Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/EFjAQ7xc7-5j1ewAxpF8wHkmYVo.roa
File: EFjAQ7xc7-5j1ewAxpF8wHkmYVo.roa (raw, json)
Hash identifier: oMHJkiR3Row1GMny7+7pj673WK1ZuxgmKqiTfBUtRcs=
Subject key identifier: 10:58:C0:43:BC:5C:EF:EE:63:D5:EC:00:C6:91:7C:C0:79:26:61:5A
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 08F25C96
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/EFjAQ7xc7-5j1ewAxpF8wHkmYVo.roa
Signing time: Sat 01 Jan 2022 04:01:45 +0000
ROA not before: Sat 01 Jan 2022 04:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203676
IP address blocks: 185.137.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150101142 (0x8f25c96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Jan 1 04:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1058c043bc5cefee63d5ec00c6917cc07926615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:b6:23:2a:59:4a:25:42:68:0f:e0:86:c2:
22:dd:6e:64:4f:bc:a5:22:a5:72:8e:70:5b:12:85:
da:5b:7c:65:23:d5:a9:11:13:60:ce:22:b7:8e:80:
29:bd:47:97:25:30:c1:4d:68:be:a9:64:af:80:85:
c0:b5:d1:55:1f:19:2a:b1:d9:dd:13:b7:ab:d8:cc:
a2:10:20:9b:78:9b:d3:28:11:17:a6:b7:bb:c1:69:
3d:10:d8:8a:a2:2f:65:46:da:6b:35:d1:98:d2:72:
cf:d1:ac:55:f9:35:ae:8d:e6:e2:9d:32:22:ee:05:
1e:af:d7:ac:57:23:f7:be:18:50:5d:72:d6:2f:7b:
54:e8:c1:81:6c:9d:d7:02:fe:98:fb:39:c8:8d:3c:
e4:85:68:e1:5f:e2:67:8b:c6:97:54:4d:78:9c:37:
02:c5:6e:eb:92:12:1e:bf:83:68:89:7e:24:29:f2:
17:69:3e:97:38:9f:10:11:48:3e:c0:55:cc:e4:f7:
d3:ea:4b:c1:60:03:61:f5:c1:ca:4b:aa:bb:25:16:
38:54:b1:8f:0d:93:f8:44:66:eb:94:a6:35:6e:28:
e8:95:1c:e7:3b:71:2f:cd:1d:fc:dc:b2:9d:8a:94:
3a:0d:00:4d:bf:34:b7:d9:fc:35:5f:f3:ca:92:a7:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:C0:43:BC:5C:EF:EE:63:D5:EC:00:C6:91:7C:C0:79:26:61:5A
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/EFjAQ7xc7-5j1ewAxpF8wHkmYVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.240.0/22
Signature Algorithm: sha256WithRSAEncryption
62:30:49:64:3e:29:74:0c:56:19:d3:f3:46:d0:d2:e4:98:1f:
da:8c:7a:b4:36:e1:6b:3a:7f:ce:4f:04:5c:d0:9f:02:83:27:
fb:73:86:d0:2c:02:00:50:82:d0:da:3c:58:cb:96:8a:b6:4b:
09:e5:a1:40:07:c6:04:50:e3:57:bf:2b:42:ea:29:a8:81:85:
9c:29:f4:d5:7e:25:cd:7c:57:58:4c:95:c3:98:14:3b:d7:a6:
e1:99:92:b3:68:68:3f:33:74:4f:13:fe:c6:22:7f:48:19:dc:
5f:b2:7d:42:79:1d:7f:53:2f:7e:18:0e:68:55:92:aa:c1:7a:
83:27:41:97:67:43:7f:2b:bc:fc:23:8c:14:00:77:65:b7:42:
2d:f4:23:40:23:2d:69:c2:68:ae:eb:12:81:2f:c4:12:f3:57:
48:6b:3c:70:9b:6a:09:7c:0d:4a:cf:d8:e7:33:ac:47:f4:f9:
b3:c4:d9:b4:cd:39:55:fb:08:fd:bb:b6:c1:fb:84:63:c5:36:
2b:a0:40:55:e8:e8:87:b6:e3:4d:6b:d2:68:87:7d:4b:bd:b7:
21:0e:a9:c1:5f:d4:28:5c:e2:0d:61:fa:79:29:c7:c1:9b:8e:
a3:af:db:8c:14:51:b8:75:dd:d8:d3:d5:32:32:c1:af:d6:8d:
b3:ef:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:22 2024 by rpki-client on console-ams.rpki-client.org