Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/eYo5rA9m3Y63Slh4ZY6iVmRBJfk.roa
File: eYo5rA9m3Y63Slh4ZY6iVmRBJfk.roa (raw, json)
Hash identifier: ZDi1PM7vdicLx6UBE2QlWGTXyhLloAK2WpjySQXFLwQ=
Subject key identifier: 79:8A:39:AC:0F:66:DD:8E:B7:4A:58:78:65:8E:A2:56:64:41:25:F9
Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial: 0A6E4359
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/eYo5rA9m3Y63Slh4ZY6iVmRBJfk.roa
Signing time: Sat 01 Jan 2022 08:02:35 +0000
ROA not before: Sat 01 Jan 2022 08:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59890
IP address blocks: 147.78.248.0/22 maxlen: 24
194.208.176.0/21 maxlen: 22
185.67.172.0/22 maxlen: 24
185.251.200.0/22 maxlen: 24
194.208.128.0/19 maxlen: 21
2a05:1140::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174998361 (0xa6e4359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
Validity
Not Before: Jan 1 08:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=798a39ac0f66dd8eb74a5878658ea256644125f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:d3:24:30:36:9e:9e:69:f4:a2:8d:8c:e7:
30:9c:6e:4f:80:7d:5d:ba:4d:fb:8b:6e:c7:a6:9e:
20:85:f9:3e:68:45:bf:57:e7:97:fa:a9:53:0f:e2:
c7:04:40:46:f4:5b:71:23:23:87:21:8d:11:ea:2d:
fa:e6:5a:f3:71:62:6f:24:1e:75:09:3a:ce:61:1a:
ed:4d:05:e9:f6:b7:b0:7f:64:fc:ee:87:5f:f1:30:
c8:cd:87:77:58:6d:95:80:97:78:cb:7d:38:d6:24:
30:8d:d0:13:e5:f4:55:9a:dd:d4:33:03:48:15:67:
cc:dc:2f:cf:f4:1e:16:fe:c9:77:0d:a2:d7:51:ba:
f7:14:57:86:fc:70:16:20:76:a6:0e:45:ac:22:73:
f9:8d:34:c8:93:e8:e5:5f:0a:69:04:5b:50:3f:15:
1d:3b:9e:93:dc:27:0b:11:45:16:b0:3a:61:3b:d1:
fb:b3:c6:12:2d:d0:3e:14:d4:39:3d:31:fd:d7:18:
86:75:8c:39:f2:77:a1:c2:4a:c0:d2:43:23:4d:f1:
90:a9:16:b0:72:49:d7:18:72:fc:5b:9c:d4:be:85:
fc:24:44:70:d8:29:cd:fe:a2:79:90:33:0a:ed:9b:
74:b2:eb:b7:dc:9d:86:06:cb:e9:71:88:be:17:02:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:39:AC:0F:66:DD:8E:B7:4A:58:78:65:8E:A2:56:64:41:25:F9
X509v3 Authority Key Identifier:
keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/eYo5rA9m3Y63Slh4ZY6iVmRBJfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.248.0/22
185.67.172.0/22
185.251.200.0/22
194.208.128.0/19
194.208.176.0/21
IPv6:
2a05:1140::/29
Signature Algorithm: sha256WithRSAEncryption
26:01:ff:b2:e3:2a:c7:77:73:7f:e7:94:18:f8:3d:9f:06:c6:
33:dd:cf:54:9e:78:68:c6:6f:b4:67:bb:76:8f:e0:48:68:3a:
41:12:e1:b6:38:48:33:80:1c:ee:1d:16:02:5a:9b:b9:b7:40:
d3:30:d5:b4:29:90:4c:2d:c2:58:22:75:76:c8:71:e8:e1:4c:
95:b2:6b:8a:05:91:cd:ff:50:ac:27:de:77:d8:78:09:b6:d8:
b6:11:42:e5:0a:02:f1:13:d8:f1:8a:16:e3:ab:66:20:e2:87:
4a:30:b3:34:d2:8a:d3:8c:09:e3:a7:49:03:9c:b1:8b:a1:2d:
be:dd:b9:ad:d6:1b:de:10:5d:87:02:01:82:53:c6:bd:c8:6b:
6a:8e:6d:f6:d4:a9:37:1d:58:48:e9:88:e3:b9:4d:77:86:ee:
52:e9:53:e1:a0:c8:fc:a4:c6:8b:be:7d:1a:f7:b5:51:ee:42:
10:ed:18:64:69:8c:79:0b:bb:7a:74:79:dc:e9:c1:43:17:42:
66:5f:93:a2:31:cd:37:96:e3:9a:bb:e4:70:06:51:85:32:7a:
56:10:2b:c5:b4:b9:eb:87:a8:46:23:05:8f:56:cb:65:ca:83:
8c:53:a8:85:69:72:7b:2d:c3:64:80:58:06:bc:49:24:71:dd:
13:fa:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:21 2024 by rpki-client on console-ams.rpki-client.org