Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eFOmrYvRm2AwaGC_6PsDu4j8hrM.roa
File: eFOmrYvRm2AwaGC_6PsDu4j8hrM.roa (raw, json)
Hash identifier: UG0wOyHTAF4xssv41sBkeigrzPreeVWgNoj+7BP/RSQ=
Subject key identifier: 78:53:A6:AD:8B:D1:9B:60:30:68:60:BF:E8:FB:03:BB:88:FC:86:B3
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B8D59EA
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eFOmrYvRm2AwaGC_6PsDu4j8hrM.roa
Signing time: Sat 01 Jan 2022 08:56:18 +0000
ROA not before: Sat 01 Jan 2022 08:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35394
IP address blocks: 89.29.176.0/21 maxlen: 21
213.181.84.0/23 maxlen: 23
213.181.80.0/23 maxlen: 23
213.181.86.0/23 maxlen: 23
185.64.242.0/24 maxlen: 24
89.29.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193812970 (0xb8d59ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7853a6ad8bd19b60306860bfe8fb03bb88fc86b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:69:47:bc:c8:c0:7b:be:76:74:a0:73:22:
85:7f:bb:7b:79:f4:4e:ee:ba:7a:2f:79:b1:91:37:
a5:73:27:f6:f4:e7:9c:59:25:aa:cf:05:f1:41:fe:
ed:8b:ff:ba:8c:3c:97:af:09:fc:b3:82:7d:88:ae:
bf:8b:04:ab:ed:fd:f0:bb:1f:6b:c3:c9:fd:1a:25:
40:9b:b7:39:38:04:48:53:0d:19:be:ae:d2:65:55:
79:c4:c5:64:97:90:ca:e6:bc:47:ce:3b:4b:f2:a2:
59:04:1a:5c:63:ea:9c:66:d2:9c:7f:cb:68:38:cc:
17:b1:47:ea:f5:7a:5e:60:98:92:86:0d:90:02:98:
9f:b7:c9:66:3e:69:eb:87:50:9e:33:f5:c9:65:24:
56:0f:b3:f7:26:94:c2:be:7f:30:82:b0:8f:28:bd:
33:4d:64:b5:ec:8e:a7:32:a3:e6:7f:76:48:b3:a1:
b5:d3:17:aa:5b:f9:b5:66:09:7d:17:14:a3:55:a2:
f6:68:16:68:4a:b1:57:97:00:83:02:b1:14:3e:56:
44:45:4e:67:84:04:4e:cc:06:98:3e:eb:e3:99:09:
10:ea:da:56:ef:68:56:d8:e1:a5:1a:46:0f:be:83:
ed:62:cc:ca:23:e3:38:27:ce:cf:2b:80:0a:da:a0:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:A6:AD:8B:D1:9B:60:30:68:60:BF:E8:FB:03:BB:88:FC:86:B3
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/eFOmrYvRm2AwaGC_6PsDu4j8hrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.160.0-89.29.183.255
185.64.242.0/24
213.181.80.0/23
213.181.84.0/22
Signature Algorithm: sha256WithRSAEncryption
02:b6:9d:9e:02:bc:ad:66:46:20:9d:11:84:52:a5:45:c2:51:
ab:01:52:a3:a3:1e:1e:13:73:a4:31:71:f3:a7:fc:eb:01:4f:
c6:ab:dc:ee:c2:16:08:58:85:31:ba:28:a7:a2:46:f9:94:e5:
c8:82:05:bb:d7:8e:bb:85:45:2c:72:a5:88:5d:1a:40:fb:65:
8c:58:24:66:75:c4:85:5f:fb:71:c7:9a:43:39:ae:be:92:36:
f2:96:91:11:e7:70:49:13:34:e7:1e:87:18:f1:ea:90:e1:64:
2f:c0:47:6a:0f:d2:fe:64:db:25:d0:20:14:6e:a1:e9:c6:93:
1e:26:f1:ba:b6:96:6a:a1:b3:a0:93:6d:a5:4d:d1:de:7b:a7:
fd:9e:a6:5c:2d:e0:96:21:17:51:8e:f6:68:4a:81:66:5e:c9:
e5:9f:8c:c8:f0:d7:1f:8f:66:ed:f1:cc:b1:eb:8d:28:3f:7e:
58:d3:78:ed:7c:62:f2:af:6b:eb:a6:4b:51:74:42:0d:4f:9c:
59:ae:e4:50:51:d7:b3:16:94:cb:35:a8:46:ea:e4:78:e3:31:
bf:db:25:9f:c1:11:1e:37:9d:e6:c6:e7:4f:19:f6:94:37:39:
46:18:8e:85:86:1f:3a:16:77:16:4b:a1:27:6e:1e:a5:46:27:
cc:fd:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org