Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/EehITpySCsBUUenSOMuTjUHRkBg.roa
File: EehITpySCsBUUenSOMuTjUHRkBg.roa (raw, json)
Hash identifier: /YCSp2BbmyFPpCnPhCGfn14wlZAQI445dm9De44z/Mk=
Subject key identifier: 11:E8:48:4E:9C:92:0A:C0:54:51:E9:D2:38:CB:93:8D:41:D1:90:18
Certificate issuer: /CN=4b25df8620374243e3c5eab25550af24e0eff48c
Certificate serial: 2B063E
Authority key identifier: 4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/EehITpySCsBUUenSOMuTjUHRkBg.roa
Signing time: Wed 27 Apr 2022 16:37:31 +0000
ROA not before: Wed 27 Apr 2022 16:37:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49284
IP address blocks: 46.29.104.0/21 maxlen: 21
185.208.232.0/23 maxlen: 23
185.208.232.0/22 maxlen: 22
185.208.233.0/24 maxlen: 24
185.208.234.0/24 maxlen: 24
185.208.234.0/23 maxlen: 23
185.208.235.0/24 maxlen: 24
188.92.184.0/21 maxlen: 21
37.209.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2819646 (0x2b063e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b25df8620374243e3c5eab25550af24e0eff48c
Validity
Not Before: Apr 27 16:37:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e8484e9c920ac05451e9d238cb938d41d19018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:4a:32:da:33:5f:d9:de:74:65:d4:ea:f9:
b8:ea:bc:80:1d:61:22:04:c7:f7:2b:e2:9b:bc:3f:
ee:1c:8b:48:ec:4f:0c:42:75:8d:42:2d:00:70:30:
d5:9d:4e:57:96:e8:6b:1c:87:22:af:5a:47:96:e2:
c1:89:2b:73:c9:a7:e3:a0:23:d4:ec:e4:61:09:03:
d5:ce:1f:90:29:5d:8f:25:e0:8e:c2:83:0d:4b:42:
7b:a7:d8:3a:86:b5:96:bb:ff:f4:52:b2:5e:0b:83:
fa:ab:fa:df:bc:cc:2a:0d:43:6b:08:30:e3:d5:5b:
77:f5:ea:21:0c:b3:88:3b:c7:74:94:fc:49:7f:60:
72:43:92:b3:9d:f3:07:c6:2e:1e:7c:0f:13:b1:92:
36:31:34:66:0b:6c:af:66:b0:99:c8:02:89:0a:8a:
a2:70:43:d0:00:b2:59:fe:86:9e:0b:35:44:d9:9d:
51:39:38:b2:f1:bf:9a:c9:34:35:fa:4e:28:1d:8b:
ed:52:a8:6b:af:97:e2:69:1b:14:a6:9b:1f:6b:3e:
99:09:7b:10:f5:13:f1:c4:ce:86:b9:ef:0e:c3:c4:
b2:ad:f3:b2:81:d7:78:0c:65:a7:e9:c8:3a:b9:23:
4f:70:9e:f2:81:81:bc:06:85:f1:87:14:e9:2c:fa:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:48:4E:9C:92:0A:C0:54:51:E9:D2:38:CB:93:8D:41:D1:90:18
X509v3 Authority Key Identifier:
keyid:4B:25:DF:86:20:37:42:43:E3:C5:EA:B2:55:50:AF:24:E0:EF:F4:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyXfhiA3QkPjxeqyVVCvJODv9Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/EehITpySCsBUUenSOMuTjUHRkBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a71248-a465-40d4-a2cf-a41b50aa272d/1/SyXfhiA3QkPjxeqyVVCvJODv9Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.200.0/21
46.29.104.0/21
185.208.232.0/22
188.92.184.0/21
Signature Algorithm: sha256WithRSAEncryption
09:80:0b:74:59:1e:61:62:ed:1b:2b:4d:90:18:2d:51:48:b4:
dd:98:1f:52:3e:fd:8d:52:18:fe:12:32:f0:76:80:4e:8f:d0:
24:14:f9:a0:8a:d0:9f:89:32:1b:37:01:01:e1:90:a2:08:60:
9a:54:af:3c:3b:ea:a1:4f:d8:6c:f7:a0:c6:92:7b:de:8a:8f:
29:06:d1:30:35:fd:9a:ec:dc:9a:ef:cb:d0:20:ff:13:5e:74:
a7:8d:8d:4f:f8:78:43:92:e6:10:1d:4e:cc:d0:93:19:25:7b:
83:ef:31:7a:29:34:4a:81:e8:b9:7a:5e:a1:2e:25:11:02:97:
78:2c:b4:0e:5f:aa:80:4a:e3:64:b9:12:c6:75:cf:8a:9d:df:
a5:7a:73:b0:ff:e9:cc:ca:06:65:bb:a0:18:e0:e4:66:c6:d3:
b3:37:66:14:e7:06:ae:81:4a:62:d2:0a:8a:b5:62:ef:1d:61:
42:dc:cf:45:a6:8e:6b:43:11:07:a7:60:ef:14:95:18:03:93:
6f:03:21:2c:7c:cb:8d:1e:2e:8e:44:18:7b:b2:19:7e:eb:7d:
ee:7e:9f:ce:cc:d9:a5:e8:e9:d9:48:ae:87:68:62:51:a3:10:
1b:d8:78:40:ae:b8:6e:1a:9d:b7:b3:19:12:b8:80:1b:dc:a5:
d8:c6:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-fra.rpki-client.org