Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/eYFIZlggNsSXSImzyyFYJifRIoI.roa
File: eYFIZlggNsSXSImzyyFYJifRIoI.roa (raw, json)
Hash identifier: lafslKbDw4J9/qYMxWPQZPijNNIdz3w7BYXdAaZnwXE=
Subject key identifier: 79:81:48:66:58:20:36:C4:97:48:89:B3:CB:21:58:26:27:D1:22:82
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: E44C22
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/eYFIZlggNsSXSImzyyFYJifRIoI.roa
Signing time: Wed 22 Jun 2022 23:52:32 +0000
ROA not before: Wed 22 Jun 2022 23:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.245.0/24 maxlen: 24
66.22.244.0/24 maxlen: 24
66.22.246.0/24 maxlen: 24
66.22.242.0/24 maxlen: 24
66.22.241.0/24 maxlen: 24
66.22.248.0/24 maxlen: 24
66.22.247.0/24 maxlen: 24
66.22.196.0/22 maxlen: 22
66.22.204.0/22 maxlen: 22
66.22.200.0/22 maxlen: 22
66.22.208.0/22 maxlen: 22
66.22.212.0/22 maxlen: 22
66.22.216.0/23 maxlen: 23
66.22.218.0/23 maxlen: 23
66.22.220.0/23 maxlen: 23
66.22.222.0/23 maxlen: 23
66.22.224.0/23 maxlen: 23
66.22.226.0/23 maxlen: 23
66.22.231.0/24 maxlen: 24
66.22.230.0/24 maxlen: 24
66.22.233.0/24 maxlen: 24
66.22.232.0/24 maxlen: 24
66.22.235.0/24 maxlen: 24
66.22.234.0/24 maxlen: 24
66.22.236.0/24 maxlen: 24
66.22.238.0/24 maxlen: 24
66.22.237.0/24 maxlen: 24
66.22.240.0/24 maxlen: 24
66.22.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14961698 (0xe44c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jun 22 23:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79814866582036c4974889b3cb21582627d12282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fd:63:dd:9e:f2:42:f0:df:28:2b:9c:2e:49:
4e:c0:34:a7:a5:d3:fc:39:52:d6:4e:c7:fb:02:84:
11:6f:65:b7:05:66:78:0c:e4:5f:55:6f:f9:93:4d:
43:59:bb:22:4a:84:0b:75:8d:34:28:c2:80:d0:1f:
dd:71:1e:2e:67:3d:f3:3e:16:08:a6:3c:64:03:c6:
98:ec:9f:3f:d3:9b:0b:fc:c8:6a:e4:cd:27:a9:d0:
8c:ab:54:58:4e:72:72:aa:57:8f:6e:28:8b:1b:4f:
3d:31:33:a4:aa:f8:6f:0b:f4:39:69:77:62:41:13:
8d:9c:08:d5:1a:33:8a:db:94:ca:5d:bf:26:c3:c0:
d3:54:06:f9:7a:34:62:57:67:1a:3f:22:f9:ec:f8:
6f:a5:77:a8:8f:69:cf:31:2d:fc:41:92:1f:5b:c9:
5d:d5:65:46:fa:c6:37:6b:03:95:58:66:b2:cd:11:
63:85:1f:63:44:d8:89:eb:ac:03:83:9f:71:88:17:
f1:4f:46:46:dc:39:1d:a3:ee:09:87:43:b0:f1:a0:
6a:69:9a:38:60:bd:f4:59:da:1f:d1:3f:11:0b:af:
d7:a7:86:e6:f1:d0:46:5a:4f:6a:3b:39:48:58:24:
63:02:0f:0f:3c:72:e3:77:5a:3b:8d:a1:7c:17:9e:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:48:66:58:20:36:C4:97:48:89:B3:CB:21:58:26:27:D1:22:82
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/eYFIZlggNsSXSImzyyFYJifRIoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.196.0-66.22.227.255
66.22.230.0-66.22.242.255
66.22.244.0-66.22.248.255
Signature Algorithm: sha256WithRSAEncryption
32:19:45:3f:32:4a:e5:7f:21:ac:fd:2a:7b:97:e1:38:5b:49:
41:16:35:e0:45:af:e3:0b:8f:89:e9:47:26:24:65:23:00:c4:
99:70:45:b8:ea:19:b0:36:96:c7:d6:f8:6f:ba:dd:9d:c0:a0:
48:09:ba:c8:a1:8a:4e:73:87:41:72:6e:20:f1:bb:71:cf:20:
ed:e2:ca:70:ae:82:28:3f:ef:6f:63:39:89:85:08:34:40:c6:
76:d3:71:34:1a:64:ae:ab:c8:e2:34:a8:28:22:c7:83:52:0f:
e6:4a:64:89:78:d0:48:8e:43:0e:59:90:6b:1e:f1:c9:20:50:
67:73:6c:bf:0d:44:7d:b1:d7:63:bd:e6:e2:1c:6e:6d:62:ae:
ea:d4:a7:02:fa:5f:e9:51:58:8f:85:a4:28:02:4e:61:01:d0:
64:e0:dc:e2:b2:9d:ca:0f:6e:66:5a:55:4a:0f:dc:1d:35:13:
08:dd:c9:07:77:5a:0f:1b:8a:64:08:38:1d:3b:3c:fa:a6:bd:
12:d8:a2:d0:a3:af:04:24:87:4d:86:75:a5:e8:f8:85:9f:e8:
e7:75:18:78:e2:20:1b:a6:55:36:96:e5:44:31:03:b6:49:b0:
57:a8:9a:3b:d4:4d:1c:2c:fa:5f:00:a6:b1:b3:96:b0:35:4e:
96:d3:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org