Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/epoaTimYACo6AYYChClry6P_zwY.roa
File: epoaTimYACo6AYYChClry6P_zwY.roa (raw, json)
Hash identifier: 6+g8R4psrePjYrBlMzJE2O71q2whZ+OHLemm2plXHJs=
Subject key identifier: 7A:9A:1A:4E:29:98:00:2A:3A:01:86:02:84:29:6B:CB:A3:FF:CF:06
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 01A6605F
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/epoaTimYACo6AYYChClry6P_zwY.roa
Signing time: Sat 01 Jan 2022 06:54:52 +0000
ROA not before: Sat 01 Jan 2022 06:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203836
IP address blocks: 194.34.201.0/24 maxlen: 24
194.34.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27680863 (0x1a6605f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jan 1 06:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a9a1a4e2998002a3a01860284296bcba3ffcf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:4c:c9:6b:b8:fa:7e:c8:a0:f4:1f:c5:90:
59:2e:fd:15:16:63:d3:2e:c1:65:46:69:5a:e4:f6:
e4:e2:ff:5b:3f:94:56:91:3c:ba:67:85:16:d0:fa:
c0:34:f0:d5:ca:05:1e:23:a2:46:8b:9c:fd:7a:03:
ea:d5:08:a0:ce:89:81:58:24:3f:ff:45:3e:e9:c1:
7d:08:4e:1e:3d:9a:04:78:19:42:58:ff:cf:7a:5d:
71:56:1c:a3:54:79:e0:ae:ce:cd:74:a6:20:fc:8d:
3f:66:6d:04:1d:ec:58:4a:c1:85:64:bc:34:37:7e:
ee:d6:88:04:b8:7d:b8:1c:7e:c1:d9:c7:98:8b:a3:
45:49:73:28:06:e2:f5:fa:2e:bc:d5:8c:db:cb:e1:
a9:ff:55:f1:bb:30:ef:6a:eb:d8:04:48:a1:de:b2:
9d:a2:18:d2:cc:66:48:4c:b5:df:6a:d8:75:1a:57:
e8:83:55:a3:6b:7e:7c:3f:19:aa:08:5d:de:56:e7:
a1:1b:0d:2f:11:58:ee:ed:39:53:36:14:98:45:cf:
f7:bd:6b:af:42:c3:46:ad:e7:18:23:a8:d2:51:89:
dd:7f:1a:16:a2:fc:bc:27:a3:c2:8a:bc:3d:76:2e:
2f:df:38:64:3c:62:e8:ff:24:37:21:45:f1:bb:69:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:1A:4E:29:98:00:2A:3A:01:86:02:84:29:6B:CB:A3:FF:CF:06
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/epoaTimYACo6AYYChClry6P_zwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.200.0/23
Signature Algorithm: sha256WithRSAEncryption
58:da:51:4e:cf:87:d2:84:ed:3b:23:54:3e:65:93:81:83:b2:
cd:a9:44:da:54:02:48:c4:f0:65:4c:c9:0d:fc:98:62:4c:66:
7f:1d:7b:0a:00:ff:75:c2:06:d2:3d:c9:9c:9d:8c:99:1b:a5:
de:47:8e:a3:3e:97:7c:7e:95:ec:67:0d:9d:a1:a7:7e:75:11:
e6:7d:b6:13:f4:35:44:88:53:59:6f:d8:7f:e6:61:6a:d6:65:
65:58:f5:ac:53:ef:a7:7a:fa:a7:3f:78:ec:fb:b4:9a:6b:06:
3e:e4:48:5f:c2:0f:84:0a:15:88:35:cd:14:0b:6d:b7:ef:5b:
56:93:ea:39:9f:42:03:e5:10:02:94:46:c1:62:0e:39:ac:d1:
74:96:d6:b2:60:3f:a1:94:1a:56:04:c5:96:00:ff:9d:b9:30:
ec:94:5d:5e:64:9d:a3:fb:50:56:7e:63:88:79:bd:1f:64:a7:
2c:ff:14:63:99:5b:e5:db:4c:34:e2:92:d8:cb:9f:6e:d8:c6:
b0:4d:ab:22:70:a5:54:37:79:c7:1e:47:e4:f0:80:37:69:ca:
33:c4:d4:e6:74:69:44:2f:37:d8:3e:8f:d5:b7:ec:5b:dd:51:
73:98:fa:91:b5:28:6e:30:65:72:e2:47:51:7f:42:1e:c1:2d:
1c:e4:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:33 2024 by rpki-client on console-fra.rpki-client.org