Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa
File: EWGc9TQ7fMyms1hQIblWHA6nFYA.roa (raw, json)
Hash identifier: /U64MAaqe3bCDaflZLn8yNXsf0CPO9P8OhhDTgpmkA8=
Subject key identifier: 11:61:9C:F5:34:3B:7C:CC:A6:B3:58:50:21:B9:56:1C:0E:A7:15:80
Certificate issuer: /CN=0d01db542317430414757aacb093fd72069192b1
Certificate serial: 0884F049
Authority key identifier: 0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa
Signing time: Sat 01 Jan 2022 09:57:56 +0000
ROA not before: Sat 01 Jan 2022 09:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24935
IP address blocks: 94.158.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142929993 (0x884f049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d01db542317430414757aacb093fd72069192b1
Validity
Not Before: Jan 1 09:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11619cf5343b7ccca6b3585021b9561c0ea71580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:e7:82:cf:5e:a9:a2:c6:2c:1c:56:1e:a5:
19:5b:65:75:8d:84:5a:ca:30:dc:4c:56:5b:64:00:
92:fd:f2:35:cd:6b:41:86:52:90:c8:10:81:05:07:
60:c9:2c:a0:53:3b:e1:c7:65:37:0a:3b:c7:73:b8:
10:8c:49:0a:9c:ea:d5:f9:47:92:49:09:94:5a:d9:
17:c0:a8:08:9d:f0:77:9e:1d:e9:8f:f1:dc:d2:97:
82:e2:84:cc:25:5e:1c:21:78:95:a1:83:44:55:dd:
21:26:69:a0:3d:5b:34:68:47:0e:02:8b:7a:2e:4a:
37:99:5b:7c:12:da:06:4d:dc:84:a0:99:36:36:93:
38:e5:1b:4e:c1:53:d0:0a:89:91:8a:21:ef:b0:45:
a4:1d:ef:e4:a8:0a:c5:66:3d:d2:87:3e:6c:77:9b:
9f:86:a8:14:d3:32:52:cc:18:7a:1e:a2:22:4c:35:
40:81:35:73:ad:db:b2:74:b9:ca:bf:6e:e9:cb:20:
85:37:37:c1:17:fe:bd:80:bb:bc:22:3b:40:7c:7c:
c4:00:cb:23:c3:5f:8b:f5:31:1a:f5:c3:70:1f:b8:
4e:a2:17:cf:f5:a8:ae:79:a0:9d:e9:28:f2:13:17:
3c:a2:af:4e:07:b1:b1:d6:c9:69:20:66:14:d9:64:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:61:9C:F5:34:3B:7C:CC:A6:B3:58:50:21:B9:56:1C:0E:A7:15:80
X509v3 Authority Key Identifier:
keyid:0D:01:DB:54:23:17:43:04:14:75:7A:AC:B0:93:FD:72:06:91:92:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQHbVCMXQwQUdXqssJP9cgaRkrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/EWGc9TQ7fMyms1hQIblWHA6nFYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/237146-f85c-42bb-b3e5-9deb04216273/1/DQHbVCMXQwQUdXqssJP9cgaRkrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.182.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a6:80:79:22:e9:c3:33:e1:5e:3a:91:69:9a:66:d1:e5:a7:
cc:5a:49:b8:1a:e9:d3:d1:c5:4a:18:69:32:b6:82:52:ca:59:
eb:fc:c1:ad:cb:c4:44:9c:92:20:34:9e:13:d6:24:ce:7a:dd:
14:8d:4a:fd:b3:99:95:2d:02:6f:97:f2:79:7e:df:55:96:fb:
32:a5:73:9b:40:18:f8:d0:ac:19:1b:d1:09:dc:50:c0:3e:5b:
4a:69:8a:b9:ef:75:7d:5a:89:59:45:12:a4:85:de:94:01:2b:
a6:a3:f3:fa:30:78:b5:40:81:a9:ce:1c:11:fd:43:f0:56:c9:
1c:71:85:95:69:04:85:df:fd:3b:9a:79:c4:b8:1e:43:1e:f9:
91:ba:e4:34:0f:cd:a5:8e:28:a6:37:96:b8:71:52:92:0d:f7:
56:52:a0:9b:e8:d8:7a:c0:a4:c5:90:ea:fe:cf:a0:60:94:05:
3f:5d:a4:9d:83:b1:75:da:5d:38:65:f0:84:69:c0:34:32:94:
3a:5c:1f:cb:d3:79:3c:1e:cd:65:28:aa:28:0c:82:0d:cb:fe:
96:19:cd:38:ec:c7:80:38:98:34:2a:bc:fd:68:8a:50:72:41:
6f:49:a8:71:52:5d:75:62:10:a1:db:3b:1f:88:18:6c:dd:b4:
d8:60:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org