Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EOeHeicN6dWakjJ0G9l7hRFdeJ8.roa
File: EOeHeicN6dWakjJ0G9l7hRFdeJ8.roa (raw, json)
Hash identifier: /vRs5CutWJ5ahVkE+v75KRwg4zu+LFQ49mJFmSvY7bQ=
Subject key identifier: 10:E7:87:7A:27:0D:E9:D5:9A:92:32:74:1B:D9:7B:85:11:5D:78:9F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01845C331C6EA59EBCB206BA8BD3BDF557EC
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EOeHeicN6dWakjJ0G9l7hRFdeJ8.roa
Signing time: Wed 09 Nov 2022 11:42:44 +0000
ROA not before: Wed 09 Nov 2022 11:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204229
IP address blocks: 178.213.180.0/22 maxlen: 22
91.238.40.0/23 maxlen: 23
91.245.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:33:1c:6e:a5:9e:bc:b2:06:ba:8b:d3:bd:f5:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Nov 9 11:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10e7877a270de9d59a9232741bd97b85115d789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:0c:03:62:a7:0e:4d:75:fe:29:c7:fd:3e:
17:0a:69:eb:bd:fc:d1:d6:eb:e8:d9:26:c7:d8:38:
8c:c4:8c:84:f6:69:4d:2b:c1:5f:11:bd:e5:ef:8a:
6c:55:06:9a:28:25:95:e8:5b:e2:2a:3d:0c:38:65:
39:b7:8b:6b:cd:01:b7:0e:4b:80:06:35:43:b0:c8:
9d:94:18:6f:3e:d1:ac:70:b0:42:cc:30:95:60:33:
d0:43:b3:3f:5d:02:54:9e:f3:f4:d6:2a:9f:82:22:
aa:80:8e:4f:fc:32:59:06:52:ad:3e:f4:7b:36:2a:
1d:86:60:e0:bc:64:c5:65:21:5f:03:51:4d:57:9b:
bf:d6:47:0b:96:86:27:a8:f2:9f:ff:13:a7:4f:85:
df:94:0f:a7:c4:01:36:11:cd:90:74:74:d7:34:f6:
7a:a5:c8:b2:a4:b3:05:36:57:07:e9:d2:af:68:0a:
57:4a:82:f1:3b:02:cf:89:22:44:92:13:bf:de:4b:
e8:d7:07:6f:86:a0:ba:cb:6e:66:7c:d1:54:79:57:
0f:0e:f9:19:07:13:8d:49:d0:40:fe:aa:7f:4b:97:
52:d5:1b:bd:a6:1f:10:6c:f4:94:ae:dd:96:34:6f:
ad:96:9b:13:bc:33:4d:03:02:fd:d2:22:22:02:49:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:87:7A:27:0D:E9:D5:9A:92:32:74:1B:D9:7B:85:11:5D:78:9F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EOeHeicN6dWakjJ0G9l7hRFdeJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.40.0/23
91.245.188.0/22
178.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
82:e0:0a:a4:08:64:4c:52:9f:c9:9c:41:34:54:3a:94:62:19:
19:68:4d:6b:7f:23:06:51:4e:36:0d:ca:c1:df:01:5c:ee:66:
f2:e8:93:46:fe:e3:f5:a0:cb:ec:dd:00:1a:87:52:57:0d:f7:
b8:34:ad:29:0d:8a:2e:1e:32:d9:09:04:62:77:4d:ae:c6:a4:
0d:eb:1f:24:81:98:25:09:9a:4a:b0:c2:a7:c9:ed:da:25:b8:
91:d9:7d:d7:d2:e0:09:1e:a2:e6:50:73:bb:ab:86:51:68:ed:
3f:33:22:f2:36:34:b2:34:d0:db:4f:b6:07:6e:af:3a:58:9f:
3b:1f:b5:3d:b4:81:57:be:9e:82:96:6d:4e:46:f7:2f:45:aa:
62:72:e7:f5:fb:5a:c7:f7:de:9a:dd:64:75:49:17:4a:68:ad:
d5:07:ae:96:f7:56:ee:87:16:dd:66:65:b8:57:8f:4c:9d:b4:
09:48:fa:e9:e5:cf:68:36:fe:31:74:f3:89:33:f0:2f:4b:df:
0e:38:a2:17:93:20:c7:b7:2f:40:58:e5:f8:f7:c1:b9:04:06:
da:e5:aa:4b:15:a8:67:84:c3:6b:11:de:53:87:24:6c:94:51:
d8:71:3b:10:d2:7e:83:ea:a1:73:c7:0b:ec:84:4d:7c:7f:ea:
d9:c3:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:42 2023 by rpki-client on console-ams.rpki-client.org