Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa
File: EtArBlTqpuwlpEnIVRKqyEdIemc.roa (raw, json)
Hash identifier: 1W1zZT2NdcxNTfnPDpIZPD91oX/hr/azOotPKDPc6l0=
Subject key identifier: 12:D0:2B:06:54:EA:A6:EC:25:A4:49:C8:55:12:AA:C8:47:48:7A:67
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018B02EE
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa
Signing time: Sat 01 Jan 2022 12:03:43 +0000
ROA not before: Sat 01 Jan 2022 12:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59588
IP address blocks: 185.254.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25887470 (0x18b02ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 12:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d02b0654eaa6ec25a449c85512aac847487a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:aa:5a:c7:6a:0c:bb:45:9a:fa:d0:70:17:
30:99:8c:9c:bd:b8:1c:23:1d:1c:b3:48:29:4c:27:
35:36:95:b9:01:7d:71:20:7d:10:b7:9c:7d:16:91:
52:f5:bf:85:c2:59:bf:00:67:67:68:f2:8d:f0:65:
2b:60:90:6c:5b:78:f1:65:20:df:8b:ed:87:41:64:
ce:77:9c:b1:61:2d:ab:50:8a:85:83:eb:db:44:db:
0c:ab:cf:b8:c8:3a:02:4c:3f:0c:b2:8f:2f:5c:e3:
d8:9f:da:ee:7e:fe:e9:b2:75:78:52:78:2c:24:39:
9c:29:52:61:02:79:a1:ba:08:27:a7:a1:2e:68:5b:
a1:d7:f5:d1:7d:d3:57:d5:d1:56:74:d5:d4:6a:98:
06:88:d9:8c:5f:5d:77:ee:84:0e:82:48:af:4f:62:
5a:de:ed:3a:83:2e:d6:65:ac:2f:19:9b:32:25:ad:
a8:ea:75:e5:7b:0e:d3:b6:58:11:5b:db:08:64:e9:
2b:d6:67:05:f5:47:be:38:3e:3e:29:28:3c:91:be:
e0:6b:8b:b4:83:ea:33:c3:30:c2:0e:d2:51:e1:98:
13:1a:7b:9f:a2:bc:c6:55:8a:91:f1:ae:32:12:cf:
4f:42:48:15:57:f4:15:71:b2:08:4a:b1:03:ba:52:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:2B:06:54:EA:A6:EC:25:A4:49:C8:55:12:AA:C8:47:48:7A:67
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/EtArBlTqpuwlpEnIVRKqyEdIemc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.12.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6e:a4:88:a3:d4:67:c6:a1:ec:c1:04:3e:a7:d5:6b:4c:0b:
f6:b0:99:60:11:94:83:74:0d:5d:23:c0:e5:89:78:e9:ba:55:
d1:14:91:9c:7a:1a:4c:73:be:61:c5:2e:a3:38:80:7c:c9:28:
4d:6d:fb:fb:5c:18:b8:e4:71:7d:b9:b8:0b:7f:5d:f9:e7:11:
84:2b:5a:61:4b:4a:f6:d9:85:90:f4:32:5b:c3:71:cc:2a:8c:
d9:6f:15:03:fe:1e:7a:40:c7:9a:a4:d1:07:b8:66:f4:6f:33:
9e:63:6a:14:8f:7a:81:65:ef:cf:1f:d4:47:4d:85:50:09:94:
6f:53:25:1e:da:5c:6e:b2:04:e2:f5:8e:01:1e:a2:83:11:47:
47:8a:5c:72:69:ca:16:a4:5d:bd:20:44:dd:dd:39:b7:34:f6:
9b:98:f0:33:e3:af:0c:4b:41:5b:05:84:7e:25:df:a0:80:eb:
4f:92:be:a3:89:87:c7:4e:2b:05:d2:0b:c3:ed:d8:22:a1:f8:
4e:eb:4f:69:de:eb:db:c9:c3:c2:7b:c8:1f:9a:eb:fb:a3:46:
cc:b3:3b:a7:2e:8f:4f:25:6a:77:25:c5:9e:00:2d:ad:f3:61:
cd:4c:9f:bf:c3:33:c6:0b:6b:b1:32:18:05:89:31:b6:9e:d5:
4a:dc:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org