Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EPY7nsFjPSOQXhfg4aU5PxjlPBE.roa
File: EPY7nsFjPSOQXhfg4aU5PxjlPBE.roa (raw, json)
Hash identifier: F5tevIMgvFlaY2Y2B7g0wB6aQCwGM0HOG4UKbwPGKKA=
Subject key identifier: 10:F6:3B:9E:C1:63:3D:23:90:5E:17:E0:E1:A5:39:3F:18:E5:3C:11
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 05BE3A37
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EPY7nsFjPSOQXhfg4aU5PxjlPBE.roa
Signing time: Sat 29 Jan 2022 07:12:36 +0000
ROA not before: Sat 29 Jan 2022 07:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96352823 (0x5be3a37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 29 07:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10f63b9ec1633d23905e17e0e1a5393f18e53c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:ea:62:76:8e:44:63:22:95:e3:2f:f1:27:
2e:51:f8:12:37:bd:92:4e:54:d0:39:b4:16:74:6d:
70:cb:18:75:cf:a3:b8:b6:3a:f1:17:2a:1d:5e:c4:
a4:ba:51:6a:bd:4f:b9:d0:86:00:ef:3b:9e:a2:a3:
f1:b0:15:33:b9:9a:91:3d:60:19:ce:93:86:a7:fc:
67:76:50:09:68:16:2c:48:b5:b4:bc:31:f1:bd:c3:
48:96:54:13:1b:a5:36:bb:43:97:a3:db:fe:0d:d3:
a9:27:70:48:8d:52:91:79:2d:4d:9d:05:24:6c:bd:
7f:de:4e:e8:ba:a1:6d:e5:99:ab:e0:17:f2:67:f4:
21:92:3c:9d:41:d1:92:cb:71:e4:84:97:d7:72:a8:
dc:a5:41:ff:93:cc:8c:61:52:1d:86:a0:69:43:a9:
b4:f6:71:ae:d9:f7:6c:de:42:ed:56:ad:90:bc:47:
3e:64:3c:cb:2d:60:ab:c2:8b:58:0a:44:e4:dd:21:
1e:f9:9e:e4:48:45:1c:ab:97:ae:a2:bb:74:d5:a7:
fa:13:68:6b:85:89:66:22:5a:6f:ba:95:f3:f2:53:
4c:dd:83:81:56:ff:1f:7a:dc:6a:b9:27:46:fb:31:
ca:87:27:63:52:db:5d:b1:06:ab:40:db:b3:45:ff:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F6:3B:9E:C1:63:3D:23:90:5E:17:E0:E1:A5:39:3F:18:E5:3C:11
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EPY7nsFjPSOQXhfg4aU5PxjlPBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
49:75:b5:08:94:9c:5b:e1:01:8c:5d:fc:b0:89:92:d3:34:c9:
ca:88:ec:90:3d:0a:27:0a:49:d5:d4:f7:f2:e1:23:e8:b5:71:
2d:22:c3:85:01:73:73:fa:8c:7a:03:4c:c5:18:33:b1:13:dd:
20:3a:93:fc:d5:8d:19:6b:4c:08:ed:6c:28:ab:88:b0:d4:18:
8e:fa:08:55:89:74:93:bd:c8:9e:7b:a7:69:75:b3:ea:59:2c:
e2:7d:42:df:e4:00:f9:16:81:38:03:4b:fc:25:90:82:36:51:
03:c9:08:66:6d:c0:a0:f6:e8:1e:80:ac:ee:46:3a:65:fd:21:
c5:c5:99:1d:63:ac:a0:19:ea:8f:d1:a3:4a:e6:d8:7d:fe:87:
e9:e1:33:28:6f:31:78:87:32:53:ad:65:19:74:c1:46:eb:80:
40:22:c9:cd:59:a2:0d:30:78:0f:6f:de:8d:94:d3:00:19:f9:
3a:a4:d5:e0:63:fe:23:70:de:03:92:e7:fb:bd:13:b1:4b:79:
87:ed:68:f4:45:f3:3c:4f:4d:10:7d:1a:e6:19:d4:23:7d:eb:
67:35:51:7b:db:a4:41:31:e8:b5:3b:b6:fa:f1:f8:42:a7:2f:
aa:2b:8b:37:fc:aa:cd:47:eb:0f:21:c8:7e:a6:e4:c7:75:10:
c5:3a:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org