Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EDfkioquNOmtrSi_lz3p_f8Y6S4.roa
File: EDfkioquNOmtrSi_lz3p_f8Y6S4.roa (raw, json)
Hash identifier: aRMVzkK4+/VhB6N5TDOyN4EksoYD0mpDQ93B9UYwqmA=
Subject key identifier: 10:37:E4:8A:8A:AE:34:E9:AD:AD:28:BF:97:3D:E9:FD:FF:18:E9:2E
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0A0585BA
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EDfkioquNOmtrSi_lz3p_f8Y6S4.roa
Signing time: Sat 01 Jan 2022 05:03:26 +0000
ROA not before: Sat 01 Jan 2022 05:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39083
IP address blocks: 5.252.232.0/22 maxlen: 24
80.78.132.0/22 maxlen: 24
2a0d:2140::/29 maxlen: 48
2a07:6f40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168134074 (0xa0585ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 05:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1037e48a8aae34e9adad28bf973de9fdff18e92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:b2:65:64:3a:28:c6:68:fd:03:fb:50:10:
c3:12:e7:78:65:b0:9f:83:43:25:e6:f3:0e:ca:28:
08:8d:72:83:2a:34:65:3c:b7:dd:6d:ab:ef:76:9e:
78:2d:6b:91:ae:11:8d:4b:d8:73:5d:d1:63:07:3e:
49:24:d6:6f:47:2f:38:10:fd:21:b7:93:0f:a0:31:
16:ce:f4:4f:ac:46:56:f5:a6:13:54:67:9a:b2:82:
0c:3a:e1:12:ec:a8:3c:21:2f:65:db:95:51:49:2a:
dd:9a:4a:ab:73:0e:85:36:8e:61:d4:42:f7:77:b7:
9a:39:60:cf:4c:c1:32:c4:d9:1d:63:e1:f1:4c:a2:
68:ea:e7:dd:b1:e6:f3:fa:ab:6a:3f:08:e9:8d:dd:
d3:7d:c5:ed:20:f2:14:99:00:9f:b9:2b:c3:c9:0c:
4d:40:42:b0:fc:5d:5c:fd:d6:f4:57:98:38:d2:99:
1b:5b:9e:28:b8:07:ed:c0:ce:a3:85:b4:a2:08:76:
6c:72:8c:6a:74:61:38:0f:3b:20:d9:c2:60:c3:a3:
c3:34:fc:53:e0:e0:d8:d7:61:2b:32:09:f1:5c:ca:
0f:05:2b:07:27:0a:75:75:75:14:08:0a:85:5c:48:
26:ca:d4:bc:01:52:f1:7b:0e:66:ac:87:10:53:de:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:E4:8A:8A:AE:34:E9:AD:AD:28:BF:97:3D:E9:FD:FF:18:E9:2E
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/EDfkioquNOmtrSi_lz3p_f8Y6S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.232.0/22
80.78.132.0/22
IPv6:
2a07:6f40::/29
2a0d:2140::/29
Signature Algorithm: sha256WithRSAEncryption
57:03:35:f7:78:98:ff:e5:6e:14:61:0f:50:a7:84:06:19:45:
f1:82:fe:72:2d:61:a2:41:0b:ac:09:c0:2d:c6:8e:96:a4:22:
56:08:91:98:aa:3c:67:bc:62:bc:40:75:b8:0e:17:93:91:46:
29:d7:2f:b9:44:28:97:db:3c:07:bd:e7:ef:72:1e:bf:30:a6:
2e:07:7e:5f:18:2b:48:e2:6e:3f:87:46:82:19:13:68:e8:70:
4b:b5:27:c7:a8:da:ab:3d:57:f2:e6:ff:d2:16:4f:b9:96:36:
68:1e:3f:f2:1c:96:d6:bd:d3:a0:5c:72:06:b6:1a:14:93:04:
54:7d:c1:79:51:99:56:93:2e:15:91:6d:7f:7c:d6:7c:e0:60:
c0:4c:c8:30:c8:50:9b:88:5f:37:e6:27:9b:89:bd:0e:af:6e:
4f:f5:b4:34:57:7e:a6:b6:cd:fb:9c:a1:b3:7f:e4:eb:d2:47:
e7:48:10:b3:83:2c:2d:65:8e:10:52:0c:8c:37:c8:52:51:f9:
8b:8c:20:ed:91:e6:5c:30:cb:90:a8:a5:7e:2c:ef:fa:cc:8b:
a9:e2:b9:0c:f7:6a:64:63:00:ac:fd:da:5d:6b:62:07:ad:f9:
e2:c1:b4:fd:9c:3d:98:97:89:85:ed:c8:45:c8:f9:df:16:40:
20:f9:33:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org