Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/eC8WNJbR-_6MFYXHpX-4EFhaaqA.roa
File: eC8WNJbR-_6MFYXHpX-4EFhaaqA.roa (raw, json)
Hash identifier: xnByZbf2l2xcSZr7xDuyZCMFtTPDWUlwyK4Uw3VQYAg=
Subject key identifier: 78:2F:16:34:96:D1:FB:FE:8C:15:85:C7:A5:7F:B8:10:58:5A:6A:A0
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 05FC77BF
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/eC8WNJbR-_6MFYXHpX-4EFhaaqA.roa
Signing time: Sat 01 Jan 2022 16:07:37 +0000
ROA not before: Sat 01 Jan 2022 16:07:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47988
IP address blocks: 195.114.13.0/24 maxlen: 24
2001:678:ac8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100431807 (0x5fc77bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Jan 1 16:07:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=782f163496d1fbfe8c1585c7a57fb810585a6aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:5b:0d:5c:31:4b:a3:88:56:cf:c4:8b:2c:
17:29:cc:57:f4:2c:1b:75:76:10:9e:fb:7c:02:ed:
35:8c:fd:bc:c3:a4:f3:03:c6:41:25:dc:e4:02:df:
8c:7a:26:3f:42:fb:83:93:44:28:0c:aa:68:eb:dc:
f4:5d:64:4f:be:4d:14:d4:45:bd:f8:7f:79:03:1e:
04:c0:df:1f:ca:0b:43:4a:70:42:a9:7f:7d:f3:fd:
81:5e:fa:62:2f:33:48:90:57:24:b0:2f:9b:72:b2:
21:7d:a4:d1:8b:cd:f2:d5:ff:30:ce:c4:2d:0d:89:
2a:a0:15:35:41:38:ad:52:48:94:72:60:3b:13:b8:
e8:16:2f:eb:74:59:a4:5c:a2:16:41:b9:21:b9:75:
31:46:43:4d:e6:a4:61:01:b0:d3:07:e6:dd:51:ff:
97:18:e3:fb:6b:36:26:36:f5:49:59:d5:ac:ae:c1:
ae:d3:7c:7d:40:ec:cb:75:6e:89:60:59:d8:d5:0e:
27:d4:51:27:56:58:f3:6e:00:2b:ec:ff:38:ba:8c:
99:48:c7:3e:e6:6a:ff:87:8f:3b:12:21:30:2d:c1:
8c:9c:2e:78:69:53:9b:a5:c2:48:c8:6f:bc:b3:80:
9d:3b:56:fa:4f:60:fd:c0:9c:6a:b6:c3:9f:14:41:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:16:34:96:D1:FB:FE:8C:15:85:C7:A5:7F:B8:10:58:5A:6A:A0
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/eC8WNJbR-_6MFYXHpX-4EFhaaqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.13.0/24
IPv6:
2001:678:ac8::/48
Signature Algorithm: sha256WithRSAEncryption
5c:11:cc:70:7b:dd:c7:67:ac:dc:da:67:4a:40:e2:9b:a6:65:
af:9a:20:bf:90:ff:2b:db:4c:ff:2a:9c:b7:bd:83:0f:26:f0:
85:55:cb:c1:09:3a:10:28:5e:2f:89:e8:f4:39:0a:09:1a:b8:
69:eb:7b:06:12:b7:c4:32:e8:4b:b6:ca:4e:1a:8c:b9:38:8c:
7e:27:31:c9:bf:91:68:b0:26:13:7d:3c:34:70:63:ec:26:24:
ab:bb:55:ef:a7:f1:2b:9a:1b:47:84:bf:30:cb:e4:fc:65:11:
33:6e:33:8f:d0:67:fd:cf:1f:c5:f8:6e:26:53:1a:2a:3b:6a:
77:8d:c2:b9:29:00:3e:d7:b4:aa:27:85:30:22:ca:4d:ff:ee:
d1:56:6d:29:18:b0:33:c0:45:18:95:44:e4:c6:29:c0:29:fa:
0a:8c:e9:81:71:98:5b:0d:92:3e:b3:bb:e3:8a:45:48:29:11:
c2:3f:76:38:7d:02:62:3c:61:d9:3b:43:5e:b6:32:d2:5d:59:
78:eb:a5:08:15:36:d4:cd:4b:9c:72:ca:97:cb:73:a7:76:dc:
38:20:d0:b7:95:5f:69:bf:3e:d9:17:7f:1d:29:24:14:94:70:
36:93:d7:af:1f:af:aa:3e:ff:76:c3:5f:b8:33:7e:8b:f0:a5:
b3:b5:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:58 2024 by rpki-client on console-ams.rpki-client.org