Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EQfLwnL2uYGyh6tu3m2FepqQb68.roa
File: EQfLwnL2uYGyh6tu3m2FepqQb68.roa (raw, json)
Hash identifier: C9lqH24qI7/gCBSO0lIEpvIEe2mwcsfOqWSe2jBajd4=
Subject key identifier: 11:07:CB:C2:72:F6:B9:81:B2:87:AB:6E:DE:6D:85:7A:9A:90:6F:AF
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0E7E61DA
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EQfLwnL2uYGyh6tu3m2FepqQb68.roa
Signing time: Thu 24 Mar 2022 10:55:48 +0000
ROA not before: Thu 24 Mar 2022 10:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 193.46.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243163610 (0xe7e61da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Mar 24 10:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1107cbc272f6b981b287ab6ede6d857a9a906faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:75:15:79:7a:4d:59:f1:34:e4:ed:02:c3:
b3:cd:47:c8:ea:9a:e4:e6:b6:f6:22:f3:13:ca:9b:
2c:7c:75:2e:be:e1:f4:27:36:4c:6d:4b:b0:5c:6c:
24:b7:e1:42:cc:30:8b:06:f5:ee:72:56:46:a1:2b:
e8:fa:24:d8:8b:a7:aa:f5:04:7e:38:eb:73:3d:1f:
cf:66:93:44:a6:c3:96:ac:90:59:62:c8:e1:d7:c4:
42:1f:dd:e7:4c:56:23:36:5a:77:0a:51:de:9b:cf:
22:2a:18:39:4a:e2:1f:28:ad:1e:1d:32:ff:4f:99:
67:d1:81:6e:f0:3d:2d:8d:80:35:e7:2f:b2:f4:9c:
7e:a4:1a:38:d3:8d:26:dc:89:9d:eb:d8:29:4e:ff:
6f:e2:13:6f:bf:b2:13:d2:d7:a7:bd:1a:3c:aa:52:
d8:c7:26:91:79:5a:e3:c7:12:fd:2a:4d:10:44:e4:
06:35:fa:cd:e2:ce:00:ab:2e:09:ee:38:a8:0f:d9:
21:a0:41:39:28:7b:a0:52:e5:c3:f6:04:66:61:89:
6c:97:8a:7a:29:9a:ca:d2:bb:dd:6c:d6:36:c0:cf:
19:9a:20:51:11:9e:1f:fc:51:02:0e:2e:47:fc:41:
49:02:4c:3e:cd:24:97:fb:42:47:47:db:00:aa:f4:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:CB:C2:72:F6:B9:81:B2:87:AB:6E:DE:6D:85:7A:9A:90:6F:AF
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EQfLwnL2uYGyh6tu3m2FepqQb68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9e:7a:86:37:08:ff:4f:86:d8:6d:13:cf:fb:dc:a8:e4:1c:
d6:39:70:8a:a1:17:2b:cb:49:c6:b3:ea:5e:70:96:fb:4d:e2:
5f:2a:a1:f8:aa:30:e0:ab:75:00:17:7e:9a:7e:2c:ec:60:43:
87:8a:3e:e8:e7:19:0d:87:e9:54:d6:9b:6d:3d:e2:f9:4f:26:
44:78:ec:f5:93:4a:a1:c2:05:54:32:64:66:d4:0d:55:da:d7:
84:19:7f:ac:20:1a:6a:54:a3:7d:d2:19:27:50:bd:5b:d5:9a:
dc:be:49:51:9b:7f:9a:bc:33:9b:4d:26:e4:0c:22:82:17:b3:
0b:49:23:d4:5e:bc:38:9a:06:39:78:d7:05:93:38:80:3b:98:
20:b9:9a:78:83:17:ae:01:24:62:49:c4:5d:3b:07:3c:97:0f:
32:c8:8e:0a:78:a2:9e:5f:ee:ec:ce:b3:f8:92:97:8b:ef:7a:
d0:ca:01:3c:07:b3:0a:92:1c:b7:f9:21:84:5e:bb:a1:f2:cb:
e5:45:bc:26:c8:01:e1:5a:72:fb:98:06:f0:39:d1:76:c2:80:
2d:ff:9f:e3:eb:fd:cf:62:b0:d2:f5:c4:33:ce:59:52:8a:3a:
87:a0:8f:c3:8b:4a:06:7d:12:a0:d2:f1:da:6c:50:b0:e3:05:
ef:8a:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org