Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/EshGwDUYYv0QCIkKZBQt8_WnJpI.roa
File: EshGwDUYYv0QCIkKZBQt8_WnJpI.roa (raw, json)
Hash identifier: 3Ae5mk+O/hftkwyZj4BnwAXAbcv2O8SimYqvDGh6mOc=
Subject key identifier: 12:C8:46:C0:35:18:62:FD:10:08:89:0A:64:14:2D:F3:F5:A7:26:92
Certificate issuer: /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial: 104FA7E4
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/EshGwDUYYv0QCIkKZBQt8_WnJpI.roa
Signing time: Sat 01 Jan 2022 13:57:32 +0000
ROA not before: Sat 01 Jan 2022 13:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 141.13.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273655780 (0x104fa7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Validity
Not Before: Jan 1 13:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12c846c0351862fd1008890a64142df3f5a72692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:95:ad:fe:a8:fc:3f:54:b7:e4:2f:2d:64:
7d:fc:1f:ec:c8:62:35:85:af:f9:09:3a:e1:93:8b:
7e:2c:f1:5a:49:7b:4a:2d:b1:03:d4:e5:39:00:d7:
98:12:95:2c:10:97:1c:99:d7:b5:29:65:d7:15:22:
f1:4f:21:a9:77:3c:8a:e7:35:c1:1d:93:1c:49:8f:
ca:56:c9:95:60:eb:92:96:9d:50:97:58:8b:91:c2:
2c:96:0a:8b:af:a8:cf:a4:d6:45:5a:55:81:aa:27:
98:e6:8b:80:16:22:78:4e:6d:43:4c:03:17:c3:0a:
11:69:c0:96:11:6a:cc:ae:0a:cd:48:88:79:cb:93:
a4:95:7b:62:7d:ba:df:3e:7b:78:1e:48:c7:a6:be:
7a:84:4b:4d:fd:ed:bf:f3:f1:5c:a4:98:02:3f:37:
af:f7:2a:ea:58:b5:bc:7a:8b:30:82:74:27:7c:11:
bd:28:71:1b:cc:4f:71:b0:fa:46:1d:b8:c2:6b:6b:
14:e0:98:89:ce:8c:d3:31:13:75:1d:55:ea:eb:bb:
74:84:da:80:f8:fe:27:1e:bf:0d:95:1d:eb:1a:b1:
37:3b:a4:d0:5f:d4:0c:4d:4d:d5:7d:c1:05:61:0e:
d8:bf:b2:0f:19:1d:8d:82:1a:95:52:30:ef:65:6a:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:46:C0:35:18:62:FD:10:08:89:0A:64:14:2D:F3:F5:A7:26:92
X509v3 Authority Key Identifier:
keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/EshGwDUYYv0QCIkKZBQt8_WnJpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
28:49:10:8b:84:3e:12:6f:c2:80:0a:4e:1e:e5:86:6a:8c:79:
a2:34:12:82:32:99:de:e8:ae:c0:39:a3:b6:c5:cf:fc:66:06:
5c:31:06:6c:83:8d:a9:66:99:0a:22:5f:80:37:05:f4:f0:48:
84:96:a2:e0:3f:34:e3:4d:4e:bf:d6:34:f7:14:7c:b6:82:de:
df:9d:f3:f4:d3:81:ff:19:d6:cb:1f:03:b2:bb:74:31:21:55:
05:29:d5:08:a5:ec:e9:93:5b:7d:b9:41:44:10:10:8c:52:51:
4e:28:94:59:6d:e7:6c:33:d4:da:b4:7f:05:d6:ad:12:02:bb:
56:e1:26:6f:11:29:d2:c9:a3:d9:18:4f:2b:9b:a9:b4:7b:4d:
4d:89:27:a6:fd:d1:8e:99:26:da:60:c4:15:93:68:f6:65:b6:
e9:9c:9d:f3:33:28:03:50:1e:20:0a:cf:71:1b:40:e2:8b:38:
a8:9a:0a:80:0b:33:d1:ca:f0:8d:79:44:79:45:25:d2:bb:e6:
33:c1:6b:1b:3c:78:35:55:a1:ed:27:26:be:9f:ae:e0:77:39:
a9:1b:96:58:d3:eb:ac:df:37:42:0e:65:fa:ed:a9:3f:d3:bb:
90:a8:8c:53:1c:16:b4:a6:d7:fc:d5:79:7a:92:5d:73:b4:d9:
3b:96:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:39 2024 by rpki-client on console-fra.rpki-client.org