Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/Ez1__u2YeVwn5rJthNN2T2J5kCI.roa
File: Ez1__u2YeVwn5rJthNN2T2J5kCI.roa (raw, json)
Hash identifier: T0qiHQMvOD+1IU0vgM3RcVQ6rycnhES/X9uELpD6dW4=
Subject key identifier: 13:3D:7F:FE:ED:98:79:5C:27:E6:B2:6D:84:D3:76:4F:62:79:90:22
Certificate issuer: /CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Certificate serial: 018481F84BEC3A9EC6BE438DC7EE0874D574
Authority key identifier: 79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/Ez1__u2YeVwn5rJthNN2T2J5kCI.roa
Signing time: Wed 16 Nov 2022 19:44:04 +0000
ROA not before: Wed 16 Nov 2022 19:44:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 194.147.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:f8:4b:ec:3a:9e:c6:be:43:8d:c7:ee:08:74:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Validity
Not Before: Nov 16 19:44:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=133d7ffeed98795c27e6b26d84d3764f62799022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:db:f2:b5:e7:f2:62:e3:7c:e5:3b:8a:09:
3d:96:4e:75:56:75:ae:2e:82:3f:7f:66:9c:ae:21:
1f:47:3f:ea:63:ad:f0:d2:e1:13:9a:a4:ba:24:d3:
6e:b2:a2:96:9a:a6:0c:0e:b3:2b:d9:17:44:ba:c3:
92:8b:ba:fa:ae:3c:30:45:3c:8a:ab:eb:df:4b:95:
98:87:07:9c:ff:e4:3c:ae:b0:61:34:e9:ff:34:ed:
15:09:2b:25:d7:23:b3:4c:ca:a0:84:a1:73:e9:56:
90:1e:51:5f:b1:93:ea:bf:67:ba:b2:eb:7b:d3:ef:
a8:58:2d:19:c6:24:8b:e0:2b:b2:72:0f:76:c2:49:
db:70:ba:0b:77:dd:a6:ef:9f:b9:a8:10:90:2b:93:
90:e2:e9:c4:cd:01:84:da:69:8a:ce:d3:a6:8a:45:
75:15:6f:fc:1e:34:8b:66:09:1c:7a:06:3a:4f:0c:
67:7a:f1:ba:4a:84:14:f2:f3:50:e5:fe:00:12:d8:
9f:ed:18:53:40:92:65:41:dc:d4:da:d2:18:c9:50:
8b:61:bf:5c:65:b0:60:84:22:71:05:bb:6d:b2:08:
fb:11:33:6b:a7:f3:7b:79:de:bd:d3:36:bc:a5:53:
fd:c0:09:ad:a8:3f:a4:4a:31:99:e3:d0:27:e4:4d:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:7F:FE:ED:98:79:5C:27:E6:B2:6D:84:D3:76:4F:62:79:90:22
X509v3 Authority Key Identifier:
keyid:79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/Ez1__u2YeVwn5rJthNN2T2J5kCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:75:44:31:48:0b:c4:0d:e5:57:41:63:7b:d2:b6:68:9d:aa:
39:c3:a7:5f:2a:4e:22:8a:f8:e0:b8:2a:dc:70:2f:39:ee:c0:
3e:90:eb:f5:ec:70:b4:b9:53:8c:d7:e2:54:ac:16:d2:7b:79:
f0:a8:98:6f:21:d4:36:51:27:fe:f3:3c:87:73:da:e8:f3:e1:
4e:14:0d:38:a9:af:a2:4d:32:7c:26:55:aa:12:de:ce:4e:09:
84:bd:29:90:0d:06:80:08:e7:8c:09:2f:2a:f1:ef:78:99:b7:
e4:81:18:07:79:eb:21:bd:fb:c2:1a:a9:38:a1:39:7a:e2:3a:
a4:ed:03:bc:de:b1:41:91:e4:b5:a3:47:1c:9e:b2:1c:09:0b:
64:c6:d1:61:40:ea:d5:c9:4a:da:37:9a:42:d6:61:1d:a2:8d:
e4:11:b5:b8:ec:11:9c:89:f9:71:b1:73:68:29:44:27:9d:e2:
1c:24:e5:96:d7:c2:e4:19:36:61:1c:41:32:7f:0f:23:68:1c:
ef:7a:86:62:de:db:1e:e8:9e:04:33:a2:c8:a7:96:7e:7a:4d:
77:3c:d6:de:ec:ee:58:39:88:7b:fa:1a:60:07:30:4e:6c:ce:
a8:57:e4:03:fe:96:c3:61:94:7d:05:d3:d9:40:eb:14:cb:5f:
49:29:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:00 2024 by rpki-client on console-ams.rpki-client.org