Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/eqNIFM8Y9q-GYiOQnwmGNV6N97A.roa
File: eqNIFM8Y9q-GYiOQnwmGNV6N97A.roa (raw, json)
Hash identifier: mH6ACN5yVGm1ylUYfHybvSp0NNBgkXezQWVjKfjkHxI=
Subject key identifier: 7A:A3:48:14:CF:18:F6:AF:86:62:23:90:9F:09:86:35:5E:8D:F7:B0
Certificate issuer: /CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Certificate serial: 08DD4351
Authority key identifier: E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/eqNIFM8Y9q-GYiOQnwmGNV6N97A.roa
Signing time: Tue 15 Mar 2022 07:02:59 +0000
ROA not before: Tue 15 Mar 2022 07:02:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39405
IP address blocks: 185.146.41.0/24 maxlen: 24
185.146.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148718417 (0x8dd4351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6688ae96323c1fcfab54b294557397b49b03bc7
Validity
Not Before: Mar 15 07:02:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aa34814cf18f6af866223909f0986355e8df7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:1a:28:86:37:88:fd:91:13:17:ac:80:eb:
9f:57:3c:00:8f:f9:c3:d3:4a:d7:81:c5:d8:cc:82:
e3:e5:cb:d5:19:4c:7e:82:40:8b:81:9e:e2:fd:22:
e7:d7:b0:cf:d3:1e:64:8d:99:88:d9:51:2a:68:ba:
24:84:11:fa:8f:57:dc:43:ec:32:0d:7b:9d:6f:51:
4e:eb:3c:17:06:54:0b:30:a4:3e:01:cb:96:97:e5:
8a:3e:e4:a7:85:53:50:f7:2f:af:59:84:b5:fd:30:
89:46:23:cb:c2:89:e2:ae:9e:b0:60:f4:af:e7:f1:
32:6a:fc:24:fb:57:c5:b6:d1:bc:38:de:1e:bf:de:
af:14:bc:dd:dd:8b:2f:06:37:b5:81:cd:a8:8c:da:
36:75:bb:8f:8c:a9:c0:bc:42:31:aa:81:e0:cc:24:
02:ef:58:47:31:1a:c1:b7:c3:d8:6c:88:73:3c:51:
bf:fa:75:28:fe:19:cf:75:9b:57:50:2d:7d:a0:96:
66:ea:db:82:3c:96:c5:9a:e9:c8:e3:6b:81:16:39:
e1:94:cd:7d:62:33:d1:67:5e:98:bd:ce:09:d2:25:
74:b6:6e:1d:1e:02:85:a2:b9:fc:3b:a0:56:1c:25:
bb:6b:f0:aa:67:c4:d5:08:c7:7b:73:98:b0:82:13:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A3:48:14:CF:18:F6:AF:86:62:23:90:9F:09:86:35:5E:8D:F7:B0
X509v3 Authority Key Identifier:
keyid:E6:68:8A:E9:63:23:C1:FC:FA:B5:4B:29:45:57:39:7B:49:B0:3B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5miK6WMjwfz6tUspRVc5e0mwO8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/eqNIFM8Y9q-GYiOQnwmGNV6N97A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ce5ca6-f939-4fd7-b9f8-0a1ef0ec0578/1/5miK6WMjwfz6tUspRVc5e0mwO8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.41.0-185.146.42.255
Signature Algorithm: sha256WithRSAEncryption
a6:63:97:22:39:cf:0f:42:e7:bc:11:8e:41:c0:94:11:1b:44:
21:a4:14:32:8c:59:a2:b8:fd:4f:bd:a5:e3:e8:37:e4:9f:76:
17:f4:42:e6:c1:a5:9e:0b:9c:73:b2:c3:6c:8d:b0:a8:54:df:
91:19:8b:3d:9d:f0:2e:22:4c:42:02:0d:e6:50:db:4b:02:37:
7c:15:ca:be:56:5e:ce:e7:30:10:23:b6:d0:30:60:71:6f:15:
2a:ca:3d:d9:7f:ef:22:c4:46:42:84:51:bd:c1:41:43:34:d6:
9c:0c:3f:a3:4f:e2:83:bf:d3:f5:48:d1:c0:06:72:92:57:c7:
f9:93:62:32:90:15:1c:9f:e7:50:e6:8d:6e:32:ac:c3:99:74:
69:0c:39:74:9b:87:1a:08:2f:d6:99:fb:77:dc:7a:09:8a:78:
b4:9a:71:e7:14:f4:78:95:94:65:68:30:7e:ef:8f:39:96:25:
25:9c:a8:9f:33:21:2e:45:65:45:70:cb:f7:ed:30:11:53:54:
f5:5d:4b:e3:bf:60:58:6f:16:e1:8b:ed:d2:8e:22:b5:a5:28:
33:48:38:c2:b6:10:db:2e:90:80:2a:ba:ee:2e:42:1f:c8:1a:
1e:48:72:35:9c:3c:09:7a:05:c2:84:98:77:0e:87:19:33:f5:
62:1e:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-fra.rpki-client.org