Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eovg5g5eYEbVX1t7PvzMcZ1WZiQ.roa
File: eovg5g5eYEbVX1t7PvzMcZ1WZiQ.roa (raw, json)
Hash identifier: EVHf+5D/1iRycndoaWI4qxyuKST1jY2RNLnMYLmWA2o=
Subject key identifier: 7A:8B:E0:E6:0E:5E:60:46:D5:5F:5B:7B:3E:FC:CC:71:9D:56:66:24
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 07C8DE88
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eovg5g5eYEbVX1t7PvzMcZ1WZiQ.roa
Signing time: Wed 18 May 2022 08:47:16 +0000
ROA not before: Wed 18 May 2022 08:47:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 188.209.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130604680 (0x7c8de88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 18 08:47:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a8be0e60e5e6046d55f5b7b3efccc719d566624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:22:6b:5e:cb:f4:00:2a:0e:fe:8e:4e:94:
a3:4d:70:f0:e3:67:4f:76:96:e3:18:0e:02:55:02:
3c:d3:d2:8a:46:f8:4d:78:e4:96:b0:5d:20:0b:81:
55:7b:d2:89:94:12:70:77:6a:76:a6:84:7f:18:07:
7b:3b:cb:21:e8:f3:3d:66:f4:e5:fb:f3:d7:f5:4a:
9c:3e:d8:5e:01:86:ab:65:a9:5f:a4:25:52:e2:95:
b6:8a:ac:b0:6c:5d:8d:fb:18:50:94:60:72:ba:c2:
88:77:64:c7:80:55:31:95:97:70:ff:a8:91:be:d6:
08:94:ce:5c:18:ad:6e:82:09:ad:db:48:d0:80:1d:
a5:61:96:a5:53:20:f5:97:61:d6:7d:f5:26:57:ee:
57:99:07:e3:4e:33:70:c9:cf:c2:07:d5:94:04:a4:
32:11:26:10:d0:20:52:ed:33:e3:36:7e:3f:bb:e8:
42:3b:b8:7d:99:78:28:ee:47:be:bb:39:16:fd:c4:
b1:78:9e:46:13:ee:7a:ad:06:02:49:6b:66:4f:7f:
a5:85:20:09:3a:11:7e:d5:88:94:c0:86:6a:f3:56:
1d:6f:d0:37:50:ff:e0:06:67:dc:42:a3:44:65:05:
4d:f9:54:a1:39:d6:38:80:ea:83:df:11:49:40:25:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:E0:E6:0E:5E:60:46:D5:5F:5B:7B:3E:FC:CC:71:9D:56:66:24
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/eovg5g5eYEbVX1t7PvzMcZ1WZiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
63:e4:24:60:24:2c:51:d3:60:18:5a:5a:1a:00:c4:83:f1:75:
31:bd:e3:33:2a:58:ec:36:31:60:f1:cb:f8:c4:24:49:52:60:
80:34:94:0f:94:5c:f4:ab:9d:2c:5f:a7:a3:de:78:e2:26:ce:
06:79:20:5d:bf:22:70:02:b4:bc:56:f2:52:69:11:ad:04:84:
c5:2b:9d:57:44:ef:11:c6:6e:c9:5f:7c:df:cf:2d:7c:da:17:
42:d4:5f:1e:3f:ac:46:37:dd:1d:92:63:67:6e:c0:e0:1f:30:
75:9a:e7:33:2c:45:90:34:04:73:d6:ce:b3:82:e6:51:9b:82:
34:33:76:e2:56:91:97:0d:73:b2:29:e3:95:eb:7c:59:d7:85:
a3:a5:5b:41:7f:72:a3:67:f8:23:59:eb:59:35:b3:f2:d2:52:
bb:e5:cd:71:af:85:aa:0d:c7:13:48:1f:9e:2f:e0:22:5b:97:
9a:87:1e:a9:e6:dd:94:a7:d1:fb:a3:67:8e:ae:76:5d:76:5f:
f0:e4:0e:48:69:6a:35:73:63:4b:5b:43:44:ae:36:af:cb:20:
73:f7:c2:56:8a:d0:75:3e:41:f0:e5:78:c9:f0:b3:5a:b9:82:
8b:8d:19:91:9a:b0:da:13:ff:c5:85:5e:62:82:d1:55:46:41:
af:08:cb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org