Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/eBpbLVhinB-dbPCpwsHfHWlRrm8.roa
File: eBpbLVhinB-dbPCpwsHfHWlRrm8.roa (raw, json)
Hash identifier: NBfg2o24dLjJOVXIATrCuStJEQr+jpXG6yiksqA1kU8=
Subject key identifier: 78:1A:5B:2D:58:62:9C:1F:9D:6C:F0:A9:C2:C1:DF:1D:69:51:AE:6F
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 331EA1CA
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/eBpbLVhinB-dbPCpwsHfHWlRrm8.roa
Signing time: Sat 01 Jan 2022 10:59:05 +0000
ROA not before: Sat 01 Jan 2022 10:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 79.120.195.0/24 maxlen: 24
213.253.215.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857645514 (0x331ea1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=781a5b2d58629c1f9d6cf0a9c2c1df1d6951ae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:3d:66:d8:fa:b2:d8:e5:78:5f:46:1b:b5:
e3:01:ca:76:23:d3:5b:8a:bc:a0:10:1b:95:10:01:
31:5d:7a:c2:17:f4:b4:22:84:98:3d:b0:fe:bb:cf:
9b:4f:87:f3:12:1e:c8:2c:e0:43:82:2c:63:6d:a7:
81:05:6f:7b:9e:f4:30:6d:42:bd:a9:ab:f8:72:a7:
db:47:1c:a1:16:5e:66:14:0d:9b:f7:04:4c:7d:de:
ab:b3:bc:1c:b4:3a:f7:7b:e5:44:ec:7b:ae:b4:dc:
a0:33:9a:97:a3:cb:9d:68:5d:d7:62:31:85:2c:c5:
9a:85:26:43:da:f5:9b:39:1f:69:a3:94:2d:68:46:
6d:1c:95:22:00:9c:57:eb:4d:f9:ef:18:05:0b:04:
4f:3a:ae:11:92:4b:16:49:72:48:bd:5a:d3:a0:19:
72:a9:b0:72:87:94:6f:26:a3:2a:a3:ef:b1:1a:b1:
e4:f6:17:0a:ca:a2:c0:d5:6a:77:66:49:46:f1:8f:
52:56:7e:88:f2:33:e5:25:aa:af:d5:28:1b:2c:62:
70:8b:5b:d1:cd:dd:a0:7d:ea:f0:7c:fe:f0:fc:31:
d9:f6:86:38:7c:47:32:b4:61:4c:2f:2e:d2:3d:9e:
17:71:a5:a4:a5:c4:83:90:55:74:44:93:57:ee:49:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1A:5B:2D:58:62:9C:1F:9D:6C:F0:A9:C2:C1:DF:1D:69:51:AE:6F
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/eBpbLVhinB-dbPCpwsHfHWlRrm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.195.0/24
195.184.27.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:76:ee:de:cd:a3:ef:94:db:dc:0e:95:6b:01:a7:bd:65:e0:
a8:2f:58:4e:af:42:bd:b4:8a:94:86:49:e1:10:64:4e:fd:af:
fe:7c:0d:6a:dc:36:ff:73:fd:a5:18:d9:8d:40:33:70:28:20:
61:b7:37:29:53:8c:04:99:9f:c9:84:b9:b8:ba:e0:03:00:cd:
ca:bd:43:5e:5d:41:52:b5:46:9b:12:16:6b:ba:3c:85:17:e5:
23:91:97:9e:b6:2a:62:e1:c2:41:d4:63:ca:08:59:64:b2:27:
b4:f8:d3:22:88:8b:f3:8e:40:0a:99:0c:93:18:e3:3c:0e:36:
13:57:51:bd:c7:0a:51:c9:50:37:2b:29:8b:20:ef:7c:5e:0c:
79:16:38:77:7d:59:7e:51:fe:6a:1f:f1:d1:95:0a:d0:08:d3:
ff:b9:18:18:54:e3:c6:72:7c:1a:f7:2d:fd:1d:ea:c6:7f:e6:
07:ac:5c:26:87:b2:e4:1c:b8:91:6c:2f:c4:ee:d6:09:e4:2e:
9e:bd:26:20:9a:f0:17:9e:b0:99:e0:68:9d:da:d6:3b:8e:aa:
cc:b4:de:af:65:ec:4f:eb:ef:44:6c:64:e5:1c:40:3f:69:74:
47:cd:09:10:d0:17:26:c9:3a:68:fd:cb:f4:56:f5:4b:aa:54:
59:69:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org