Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eb2a3_OJsggamjKS8ic9bcJSr9U.roa
File: eb2a3_OJsggamjKS8ic9bcJSr9U.roa (raw, json)
Hash identifier: zN7py7KL6V6wPyigMZDN9wg8qW17V2aNlrCETjHdN7k=
Subject key identifier: 79:BD:9A:DF:F3:89:B2:08:1A:9A:32:92:F2:27:3D:6D:C2:52:AF:D5
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0181EBDAF2027B9F35DAA401516EE530E22E
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eb2a3_OJsggamjKS8ic9bcJSr9U.roa
Signing time: Mon 11 Jul 2022 06:03:23 +0000
ROA not before: Mon 11 Jul 2022 06:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62179
IP address blocks: 84.32.192.0/21 maxlen: 24
84.32.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:da:f2:02:7b:9f:35:da:a4:01:51:6e:e5:30:e2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 11 06:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79bd9adff389b2081a9a3292f2273d6dc252afd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:9d:5e:9a:91:94:6e:5d:63:bb:63:1a:70:
fb:1a:05:e4:b1:c7:17:20:e8:41:02:4b:78:65:d6:
ca:d2:98:ca:19:5a:95:71:68:c7:c2:4f:8d:3c:dd:
44:0a:34:ed:51:65:6e:1e:98:3e:af:39:ba:6d:24:
be:e5:52:e4:ad:97:1e:de:88:ba:24:e1:bf:71:09:
e1:a0:41:f5:b5:f7:b0:87:26:b1:67:b8:a9:cc:e1:
f8:0b:9c:07:1c:fd:75:17:3d:65:96:34:0e:f3:ab:
5d:b4:54:7a:78:86:14:45:31:f4:13:10:0b:24:79:
15:d1:d4:fd:3e:a9:98:1f:ef:38:56:f9:e9:0a:1b:
ab:bf:0a:e2:62:64:28:d3:76:38:09:67:e5:2f:cc:
16:8f:09:f9:18:f6:fc:17:00:7d:cc:7e:89:2b:e4:
77:65:fc:90:f6:4b:0a:67:ae:d0:82:f0:8e:31:86:
81:8a:08:61:43:1d:32:da:54:0a:bd:94:1c:d0:2a:
95:a4:f1:7b:9e:52:ff:02:24:e2:38:ca:d9:fe:5c:
fb:b4:23:f1:d0:8a:d2:15:27:84:0f:85:78:42:c5:
73:cc:65:af:2e:34:1f:78:e3:45:17:11:95:d0:3e:
96:e4:25:64:11:17:c9:31:e7:59:8c:f2:67:ab:b8:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:9A:DF:F3:89:B2:08:1A:9A:32:92:F2:27:3D:6D:C2:52:AF:D5
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eb2a3_OJsggamjKS8ic9bcJSr9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.192.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:13:53:56:63:a4:bd:26:81:59:e4:dc:94:7e:07:e3:bf:04:
d1:59:6f:71:f8:dc:81:61:d1:d5:54:08:cd:00:9a:2e:3f:2f:
c2:b7:10:4d:22:a7:33:be:7d:1d:14:c5:9e:70:40:84:78:ad:
7a:a4:2c:a7:30:7e:7f:08:56:71:be:3a:9d:5f:4b:d2:9d:fb:
cc:56:17:1f:f8:55:93:58:b9:b3:5a:54:d7:62:8d:a3:25:69:
ef:eb:c9:01:7d:de:f7:3f:03:ce:22:81:0b:37:bd:2a:fb:68:
0e:c0:2d:6c:43:0c:98:c6:ac:6f:dd:77:3d:71:e6:6f:da:a4:
d1:60:09:59:40:54:72:74:24:9c:c4:8f:68:7a:2c:ee:5d:1c:
9e:14:b5:40:06:dc:ef:c9:3d:f5:8c:dd:fb:4f:2b:7e:78:d6:
ff:f1:2b:e3:3f:29:1d:56:06:e1:6e:50:25:1d:83:4a:38:71:
43:79:fa:b8:61:26:77:0e:01:b6:1f:08:79:21:d4:f3:80:2d:
5d:6e:59:d4:2e:98:78:2b:11:e1:ac:06:1a:65:e1:3e:f8:e6:
3f:5e:05:20:a9:3e:83:33:a7:82:f0:40:f2:41:7f:23:4e:ad:
00:87:17:35:47:81:85:86:68:91:55:50:bd:a9:21:03:4f:56:
ce:f7:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:31 2023 by rpki-client on console-ams.rpki-client.org