Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EHSQBaRVDWdosUzazIgnWm76O6U.roa
File: EHSQBaRVDWdosUzazIgnWm76O6U.roa (raw, json)
Hash identifier: eLEj9jZ2HuCEAUdaQihWuVd9pmDibZbRW77BRbQQBaA=
Subject key identifier: 10:74:90:05:A4:55:0D:67:68:B1:4C:DA:CC:88:27:5A:6E:FA:3B:A5
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01848AF61CD70132FDF6F3EA85A74BC2739C
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EHSQBaRVDWdosUzazIgnWm76O6U.roa
Signing time: Fri 18 Nov 2022 13:38:15 +0000
ROA not before: Fri 18 Nov 2022 13:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.81.126.0/24 maxlen: 24
194.107.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:f6:1c:d7:01:32:fd:f6:f3:ea:85:a7:4b:c2:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Nov 18 13:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10749005a4550d6768b14cdacc88275a6efa3ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:5d:2f:ca:a7:87:0a:76:a1:fb:74:44:20:
ef:f9:d3:f9:25:d5:31:34:97:ce:ff:03:4a:23:30:
bf:27:d5:05:81:5a:11:f0:56:78:29:a6:05:4e:36:
23:d3:56:4d:0f:9d:6b:d7:92:a9:bc:2c:57:eb:01:
19:ff:59:a0:fd:e0:7b:f6:da:02:5e:81:e5:28:0c:
f5:35:0f:4c:fb:a9:9d:4b:a4:51:01:fe:52:4c:45:
4f:e0:55:cb:dd:02:64:6c:3f:a1:35:32:73:a1:8d:
b2:06:a6:a3:6d:46:9b:29:02:5b:07:cb:57:c7:c0:
6d:57:9d:50:f7:79:cb:1b:71:2d:4a:b2:41:d7:6c:
4b:19:40:0a:0b:b7:03:58:7a:d0:72:7b:83:75:79:
26:a1:f1:c7:ce:70:fd:cd:46:21:f7:2f:64:2e:03:
05:d5:22:a1:89:75:dc:08:f2:70:0f:ad:c0:b7:6a:
75:53:44:d3:42:5c:c3:4f:14:52:35:ab:b0:17:71:
3b:4f:43:21:f9:18:7b:4a:ef:93:91:0b:0e:b0:06:
3b:02:3a:b6:fd:d6:e9:5a:bd:b2:4e:7c:80:a6:78:
dc:56:52:fb:98:cd:fb:a2:b2:46:b6:e3:2c:70:64:
b3:10:0b:33:0d:fd:b1:dc:9d:8e:af:3b:ca:8f:ad:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:74:90:05:A4:55:0D:67:68:B1:4C:DA:CC:88:27:5A:6E:FA:3B:A5
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/EHSQBaRVDWdosUzazIgnWm76O6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
80:78:42:7b:25:10:2f:5a:f7:9f:e2:ed:57:4f:b8:89:02:67:
22:6a:03:c8:ae:c4:10:0f:09:a9:93:5f:71:6d:f6:ab:96:7c:
b4:6b:7a:51:df:31:81:31:ee:5a:40:e3:4e:b4:cb:d6:d4:1b:
a7:d1:5b:af:cd:47:35:98:5f:cf:6c:47:4f:04:21:b1:9d:d4:
80:0a:39:b4:7e:eb:15:87:da:8a:5e:87:47:d6:30:e9:26:3f:
3f:c8:4a:2f:b6:6b:bd:44:29:30:9a:ac:5d:b8:97:31:58:bc:
e9:68:72:16:82:01:f2:f5:d2:59:00:55:00:ce:a8:e0:a6:50:
e3:5e:ca:1f:f0:a6:1d:88:e0:b3:f7:de:c8:81:dc:9a:e2:a5:
55:53:22:20:9d:49:18:9e:91:66:a4:5e:fa:2d:30:c3:e2:6d:
21:9a:b6:22:02:aa:a1:e8:9e:0c:8f:f3:2b:2f:7d:b2:8d:82:
6b:bf:b9:46:58:cd:29:9a:e6:ab:a4:41:15:f4:56:9b:61:32:
4e:b4:a2:22:4a:31:9f:71:95:b1:a8:a1:93:3d:c1:91:36:48:
2c:03:cf:af:f2:87:7d:ae:01:21:e8:13:6f:18:29:13:87:b9:
87:b7:e0:4f:91:90:6d:db:2b:2d:36:61:a4:33:cc:23:76:b0:
4a:20:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org