Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EjySa6bw0o4v156rtVq874O0KLY.roa
File: EjySa6bw0o4v156rtVq874O0KLY.roa (raw, json)
Hash identifier: hZUjLsMvKQ78+HGaBWuBLMZAVp4WZGL/BcJVM79gqB4=
Subject key identifier: 12:3C:92:6B:A6:F0:D2:8E:2F:D7:9E:AB:B5:5A:BC:EF:83:B4:28:B6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 081126E8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EjySa6bw0o4v156rtVq874O0KLY.roa
Signing time: Fri 11 Mar 2022 19:44:29 +0000
ROA not before: Fri 11 Mar 2022 19:44:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 185.230.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135341800 (0x81126e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 19:44:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=123c926ba6f0d28e2fd79eabb55abcef83b428b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:1d:05:b9:6f:7e:fb:dc:f7:ee:19:c8:81:
a7:b2:52:85:96:ab:cb:9a:b7:ee:1a:c0:af:89:04:
ae:da:33:47:10:51:08:d6:11:fe:96:7e:71:7a:d8:
47:e6:43:5e:37:ff:6d:d1:af:ad:3b:6c:e3:04:8c:
15:b6:8e:f5:c9:38:5d:48:0b:02:a5:b3:a3:bb:ed:
8c:59:6e:7a:ec:35:79:af:29:f2:4d:ab:9f:85:57:
88:43:8e:f8:e3:33:0c:61:ce:28:7d:26:84:fa:2a:
fa:bd:a2:92:38:05:21:30:eb:92:50:6d:de:28:13:
a8:7c:f4:24:34:fd:be:48:21:46:a7:a2:84:15:d4:
20:9a:c4:f6:1e:4d:91:d3:8c:ef:38:d4:8d:14:79:
08:ca:8d:28:38:b5:08:55:b6:7c:4f:e2:9d:b6:6f:
2a:1d:8e:7b:e0:0c:51:2f:76:85:b1:f1:0a:fb:47:
27:64:76:a1:af:3d:61:3c:4d:d0:f4:77:cc:af:34:
be:29:38:e8:94:aa:32:40:39:f5:1e:2f:dd:df:93:
c2:f7:56:c4:06:25:54:8e:82:f5:d9:72:c4:6b:9c:
1e:fe:d5:c7:56:7c:d5:ef:6a:42:3a:45:96:18:c3:
90:7b:56:27:40:ed:f0:0c:4e:32:b0:de:03:8d:8c:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:92:6B:A6:F0:D2:8E:2F:D7:9E:AB:B5:5A:BC:EF:83:B4:28:B6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EjySa6bw0o4v156rtVq874O0KLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.12.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5d:e5:0c:16:18:da:4b:c7:2a:48:f3:1a:aa:2f:c9:65:bd:
4c:6e:d2:5a:91:23:aa:e2:aa:31:4d:de:5d:0c:ab:ba:13:28:
2b:54:87:dc:0b:8a:e5:95:af:b3:ec:a6:87:6b:0d:bc:60:d6:
b0:af:b9:43:39:2d:9c:8a:f7:c4:b5:e8:5f:1c:1f:98:f3:80:
1d:c9:1e:6a:ff:aa:af:bf:90:16:e0:13:27:16:6f:91:05:20:
66:f5:7c:e4:82:cf:43:d3:85:c9:d0:b0:3e:ca:85:e2:7e:f9:
4b:bc:dc:d3:f5:84:d6:9d:b7:96:9a:88:97:0b:b7:8f:45:b3:
c2:a8:42:9a:c7:ca:1e:d4:42:82:b6:37:09:14:b7:88:3a:69:
b2:f2:07:28:03:28:00:3f:a7:f8:11:bd:c1:15:d0:b4:3a:02:
c3:6a:3a:06:e6:30:d6:a2:2f:eb:c6:8a:df:d1:9f:d6:73:bb:
1d:bd:93:fb:eb:9b:e1:33:7d:9a:6e:eb:3f:04:23:a8:81:80:
45:3d:4d:75:4c:ff:36:cb:47:f9:32:c9:27:20:b9:30:42:93:
aa:a5:6b:ad:a6:af:75:0c:53:79:8c:6a:81:76:74:62:89:49:
8f:fc:ae:b3:f8:23:5b:68:77:3b:02:77:0a:20:33:44:f8:01:
ba:5a:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org