Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/eBFHnsmPY7NLoyjlREiomOHO8mc.roa
File: eBFHnsmPY7NLoyjlREiomOHO8mc.roa (raw, json)
Hash identifier: yFxNOLtzp0Hxvjn/9DtwvNMvO22EsxUKMapIeKC2rdQ=
Subject key identifier: 78:11:47:9E:C9:8F:63:B3:4B:A3:28:E5:44:48:A8:98:E1:CE:F2:67
Certificate issuer: /CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Certificate serial: 01CBC2B1
Authority key identifier: 47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/eBFHnsmPY7NLoyjlREiomOHO8mc.roa
Signing time: Tue 12 Apr 2022 11:32:39 +0000
ROA not before: Tue 12 Apr 2022 11:32:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30130865 (0x1cbc2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Validity
Not Before: Apr 12 11:32:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7811479ec98f63b34ba328e54448a898e1cef267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:31:58:62:54:db:26:f4:77:2b:01:45:e8:
4e:c8:7b:51:46:82:6e:f7:c8:0b:28:91:c4:5b:b6:
e7:ec:06:b1:17:9f:b5:71:b3:37:93:37:e9:7c:8b:
7b:22:77:0a:b4:6a:7a:e7:3f:75:6c:38:b1:f0:29:
08:f5:f7:80:55:0e:4d:fb:44:30:8f:66:57:51:d1:
a9:d1:c3:83:ad:00:76:67:40:9f:ec:54:11:d0:b3:
ba:4c:cf:51:ad:09:9e:ec:ec:87:38:e0:0a:71:31:
07:2d:48:27:67:80:40:d7:73:ec:2a:ac:23:a2:8d:
9c:04:e0:fe:90:b4:b5:cf:e0:56:99:98:f3:69:00:
fa:a3:eb:aa:f0:de:00:52:ae:aa:9f:81:54:37:5c:
88:12:50:6b:1f:d4:1a:e2:b3:65:e9:56:48:d8:b7:
e6:ca:d5:79:15:e0:f2:e9:c2:f4:f2:88:9c:bb:f0:
71:e1:24:e4:66:72:0e:92:12:81:5f:f8:2f:ee:d1:
0b:ea:f0:9b:8e:cd:8b:6c:09:2e:9c:c2:ca:bc:06:
f6:67:2a:a0:08:21:66:1a:5f:40:11:94:e5:13:53:
f2:72:f5:c1:81:9d:ad:5d:27:76:02:85:d8:c2:ca:
59:f5:32:5a:14:8e:78:c6:ff:c4:0e:64:12:aa:79:
20:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:47:9E:C9:8F:63:B3:4B:A3:28:E5:44:48:A8:98:E1:CE:F2:67
X509v3 Authority Key Identifier:
keyid:47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/eBFHnsmPY7NLoyjlREiomOHO8mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R9n54WpBUwvCq6oY8Xp0VgF3IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d7:d0:31:42:cf:68:36:34:9b:de:10:93:5b:35:fa:cc:a9:
83:5b:61:f4:aa:be:b1:80:84:37:4e:4a:28:46:0d:18:49:c2:
88:ac:a0:ee:57:af:d7:18:84:86:45:bf:18:46:e8:b5:2f:4d:
58:4d:77:35:95:ab:dc:bd:38:2a:97:b0:c7:5d:12:00:23:00:
3e:47:ec:3f:33:03:aa:4f:0f:13:5e:42:6e:ca:ee:97:df:6e:
cf:0c:50:6c:b9:e3:4d:e4:99:d9:63:a3:66:6d:5b:c4:8b:62:
12:a3:c1:bc:f8:4b:61:56:22:08:35:ca:55:86:83:56:c0:6e:
c4:63:39:85:8c:48:73:39:fb:64:ed:7d:21:9c:ea:0b:9c:41:
e3:4a:13:1a:22:1d:da:7f:27:df:e8:47:80:61:66:51:0a:9c:
d4:22:e5:56:c9:21:c1:0e:1c:cb:e4:63:bc:e6:0f:92:1d:9c:
60:63:20:0f:1c:61:fc:8f:a1:66:6b:51:26:38:45:52:c1:78:
a1:aa:79:7d:80:f9:b8:1e:6f:d4:4d:a4:3f:c4:61:ce:4c:7d:
c0:26:14:05:0d:fd:5e:50:9e:8c:97:3a:4b:30:59:83:73:f0:
61:d2:91:64:3a:87:b5:4b:f2:09:94:fb:dd:87:b0:73:b4:bd:
33:77:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org