Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa
File: EcQCfHD4DLjyMzdUh7fZd75qC7s.roa (raw, json)
Hash identifier: laWVocPFBiFRzto2kZ6MFchtzlNg9iUASgrXGJj6I7o=
Subject key identifier: 11:C4:02:7C:70:F8:0C:B8:F2:33:37:54:87:B7:D9:77:BE:6A:0B:BB
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 01F4E278
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa
Signing time: Sat 01 Jan 2022 10:56:45 +0000
ROA not before: Sat 01 Jan 2022 10:56:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60167
IP address blocks: 185.192.48.0/22 maxlen: 22
2a0a:22c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32825976 (0x1f4e278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jan 1 10:56:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11c4027c70f80cb8f233375487b7d977be6a0bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:20:e0:91:b5:b3:da:d2:ef:13:35:6f:3e:
16:63:31:77:24:61:f4:50:56:de:a6:fe:92:62:90:
f6:f3:da:f4:6f:ac:d8:fe:c3:39:87:d0:e0:5f:ad:
25:ae:78:c9:06:38:97:b7:2b:e1:dd:57:c3:31:3c:
04:5b:5d:ee:89:ce:cd:ec:6e:c8:16:cf:4e:28:2b:
24:0a:d5:c9:d2:db:bd:ff:ad:e5:ed:b7:20:7e:98:
9d:01:2d:d6:01:1e:d6:00:07:c6:b4:f3:ef:05:fa:
3e:a4:dd:df:0e:0e:2b:81:37:08:de:6c:9a:fc:60:
1e:36:50:56:e2:f0:00:7a:c8:e6:79:5b:e0:fd:71:
29:a4:7b:3f:ac:c0:da:4f:fc:67:96:c3:35:ef:31:
70:b6:e9:cb:af:ee:2d:3d:75:ba:9a:bd:14:2a:25:
ba:66:fe:d2:2a:92:57:1e:4c:65:3c:c8:cd:60:db:
7f:85:25:36:d3:6f:cf:a8:6d:36:c8:76:74:0b:ea:
56:21:4d:80:e3:c9:98:73:a0:99:65:77:0e:99:6e:
2b:26:02:0a:5a:fd:63:87:1e:f2:a6:cb:04:0f:4e:
ed:4b:98:4f:04:3e:2e:2d:4a:27:9c:2b:7c:82:29:
38:f5:7c:d3:cd:aa:37:58:fd:62:a1:70:be:5b:74:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:02:7C:70:F8:0C:B8:F2:33:37:54:87:B7:D9:77:BE:6A:0B:BB
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.48.0/22
IPv6:
2a0a:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:5e:83:6c:ad:dc:a4:26:e9:ad:58:87:c9:51:94:64:1b:6f:
fc:c5:ed:20:4c:ac:ad:9e:81:cb:b5:06:e5:96:42:4e:c3:fd:
19:d8:a7:28:2f:64:04:e1:19:31:a2:27:27:10:47:1d:7f:99:
b3:75:ea:bf:7f:bc:00:da:0b:20:cf:48:36:ff:4d:2c:aa:67:
fd:6e:5f:a6:39:a1:d2:f8:a5:86:09:27:75:dc:fc:d9:f1:25:
e4:27:a2:e8:84:ab:53:70:2e:c9:a7:36:80:3c:16:f4:b6:ba:
99:6a:53:a5:f7:15:a7:29:f4:6c:98:7a:c4:d9:11:7f:1d:56:
ca:d4:ca:90:43:ed:be:b7:bb:ee:14:86:88:d4:ed:d2:ec:58:
d6:65:14:db:9f:ea:b0:6a:33:dc:04:5d:fb:51:b8:bc:ca:83:
18:ad:12:e9:46:07:ed:56:30:60:c6:25:24:92:8a:da:e3:4f:
a5:30:9f:f2:6f:80:44:17:83:88:07:06:03:2e:e4:c0:24:ba:
fa:b5:94:ca:e7:c3:cc:95:9f:41:b7:15:ed:38:82:76:18:c6:
2c:7c:4a:2f:6e:1c:7d:f7:e3:33:1b:0b:68:ad:a3:7a:19:79:
a1:06:3d:5b:eb:c0:fb:ff:55:40:17:71:b3:d6:49:0e:c5:a1:
10:21:3a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:43 2024 by rpki-client on console-ams.rpki-client.org