Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ey1K-XwcMkR2RvBnXWPMIvUGNFw.roa
File: ey1K-XwcMkR2RvBnXWPMIvUGNFw.roa (raw, json)
Hash identifier: HKYkYYrrUs8B+/roeixNfK1F2Jqq6MkF3RCe5PWvI+Q=
Subject key identifier: 7B:2D:4A:F9:7C:1C:32:44:76:46:F0:67:5D:63:CC:22:F5:06:34:5C
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0E219AD0
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ey1K-XwcMkR2RvBnXWPMIvUGNFw.roa
Signing time: Sat 01 Jan 2022 03:02:57 +0000
ROA not before: Sat 01 Jan 2022 03:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197106
IP address blocks: 94.31.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237083344 (0xe219ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 03:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b2d4af97c1c32447646f0675d63cc22f506345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:13:7b:fb:af:ec:b3:e3:ab:4b:19:0e:1f:f9:
43:3c:d7:a4:c4:c7:c6:42:9c:0a:ef:db:ba:36:39:
ad:5b:3d:ae:86:88:f7:fc:f8:85:7e:25:e3:78:c5:
f1:8c:5b:b0:90:2d:33:75:39:7e:59:cb:49:11:47:
06:8f:99:5f:41:9c:0c:b0:37:0b:ed:3f:9d:a6:95:
59:90:67:08:84:7a:ed:44:c8:ba:6a:24:ce:69:9f:
89:61:6e:2c:b0:8a:e4:4a:ec:ba:71:9d:5c:4a:6c:
c0:f5:2e:d2:9d:59:56:00:04:4c:5a:44:ff:05:85:
81:01:9f:28:98:89:33:fe:c7:92:13:c6:3d:94:ec:
6d:90:32:38:95:e3:fa:f5:33:60:1d:04:c9:6a:e8:
e7:bd:3b:66:3e:5c:f9:1b:17:b3:9f:80:c9:99:e1:
96:e8:5b:f8:78:d4:de:2d:cd:c6:95:55:ce:c3:9e:
d4:82:fc:a3:29:63:72:c3:3b:ac:9c:18:b6:ac:bb:
da:0b:08:24:24:34:3b:95:75:60:70:a0:60:23:72:
08:a1:3a:6a:c8:0a:bd:7c:e5:68:03:1a:2f:86:61:
6c:be:ff:34:75:d6:d6:c4:48:41:c0:c1:83:03:9a:
70:bd:5e:ee:28:0e:26:19:e8:34:59:49:fe:99:d8:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:4A:F9:7C:1C:32:44:76:46:F0:67:5D:63:CC:22:F5:06:34:5C
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ey1K-XwcMkR2RvBnXWPMIvUGNFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f2:1d:71:3a:ac:b7:1b:65:b7:a5:36:cc:3d:e4:7a:fb:40:
8c:f0:c5:24:06:7e:ac:fb:07:a9:ba:f9:3a:76:4d:7d:d0:38:
32:63:2e:08:52:17:5b:ce:43:33:65:29:25:7f:8d:93:7e:4a:
7d:d9:bd:2f:75:c7:76:77:70:77:ae:02:a0:58:76:3d:ac:2a:
97:52:84:8a:90:34:dd:ce:d1:2a:ae:55:0c:f2:65:38:3c:46:
58:f4:82:1d:04:92:ed:a7:7d:5a:0b:b3:01:ef:40:e8:c3:1e:
8a:30:8d:16:3a:61:74:15:1a:04:22:bc:9f:59:b5:56:21:9c:
b1:19:9a:d3:94:25:3a:b5:61:3f:d0:0a:ba:b4:75:17:d0:21:
75:91:18:ca:91:ff:ac:86:cf:9f:5a:af:66:38:9e:69:59:82:
54:07:bc:32:c5:cd:cd:b3:ed:39:6f:cc:5e:5c:ed:2a:33:07:
19:63:7c:f5:24:b3:cb:5a:01:93:f9:5b:a5:bc:fd:cb:84:81:
56:06:2a:8d:48:9b:a1:30:a3:48:56:09:69:ab:b6:7e:4b:ea:
fc:2e:af:bc:ad:a5:93:42:45:3d:72:cf:37:e9:80:24:4c:49:
05:c2:1d:8c:ce:35:a0:9d:f0:9f:02:6d:54:97:05:fe:b5:6b:
6b:65:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org