Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/eQQBraDyOnPI1tqd4h7_YNYN_5o.roa
File: eQQBraDyOnPI1tqd4h7_YNYN_5o.roa (raw, json)
Hash identifier: MTiIiQOBy0g4ODhv0w41UJXn38SzbKBs5Jmu5oO9G50=
Subject key identifier: 79:04:01:AD:A0:F2:3A:73:C8:D6:DA:9D:E2:1E:FF:60:D6:0D:FF:9A
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 07065403
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/eQQBraDyOnPI1tqd4h7_YNYN_5o.roa
Signing time: Sat 01 Jan 2022 09:57:44 +0000
ROA not before: Sat 01 Jan 2022 09:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59630
IP address blocks: 156.114.0.0/20 maxlen: 20
156.114.10.0/24 maxlen: 24
156.114.5.0/24 maxlen: 24
156.114.13.0/24 maxlen: 24
156.114.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117855235 (0x7065403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 09:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=790401ada0f23a73c8d6da9de21eff60d60dff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:56:48:ca:5c:33:19:6d:f4:e0:6d:61:e0:
e7:50:63:72:79:f5:bf:40:ec:ee:10:58:f9:51:2c:
f9:19:32:fb:49:34:30:13:40:89:a1:c5:7e:7e:30:
51:79:3d:11:db:ac:3d:be:37:57:b2:bb:28:9a:7b:
eb:b8:9c:33:b6:c2:1f:c2:df:3a:f4:ec:51:06:a5:
5d:38:90:2f:b9:74:8c:80:67:58:b7:aa:fa:45:63:
a3:d1:86:f8:be:bf:1f:43:94:a7:bb:be:6c:05:c4:
40:d4:e3:1b:32:de:2a:4f:07:65:7b:78:cf:bc:3e:
3a:fa:79:c8:03:c4:65:67:a9:ed:56:38:98:17:91:
90:3b:03:26:2b:0b:e4:b2:9a:23:8e:2d:d3:e9:e0:
b7:90:ff:80:5f:b5:4e:6e:ee:38:df:f4:27:28:c8:
00:6a:57:97:bb:50:34:db:84:94:9a:90:27:8f:6a:
22:f8:d2:07:be:0f:c4:60:6e:7f:33:d7:13:d2:f3:
34:5e:43:e7:43:fd:00:68:ea:9f:cc:b0:48:09:2e:
de:d1:3c:e6:18:31:54:5f:19:53:5a:ac:14:13:39:
24:3f:7f:84:77:bb:64:3d:ca:1e:eb:de:58:fc:fb:
02:0d:59:9d:1b:54:21:0f:9c:fd:27:3d:16:67:8e:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:04:01:AD:A0:F2:3A:73:C8:D6:DA:9D:E2:1E:FF:60:D6:0D:FF:9A
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/eQQBraDyOnPI1tqd4h7_YNYN_5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.114.0.0/20
Signature Algorithm: sha256WithRSAEncryption
34:1d:c6:10:d2:f7:30:77:72:fe:52:25:28:fe:03:55:07:f0:
0e:d3:7c:32:7b:68:72:bf:6f:b3:fb:a3:c5:89:dd:2a:0c:96:
55:c7:e7:2e:37:9f:82:b2:fc:e6:d0:16:f2:23:60:35:d1:ec:
ab:a8:ad:0c:19:74:1d:62:60:82:ed:bc:ec:b4:2c:91:e3:ee:
9b:65:4b:eb:cb:41:29:2c:57:e2:a6:22:4b:9e:93:02:e9:0e:
25:96:46:b9:8a:e8:7a:20:0c:a1:aa:b0:32:30:94:f1:95:ac:
75:d1:04:0b:6c:9f:b4:d5:9b:0f:a5:9b:89:e7:9f:3b:40:eb:
14:e0:63:51:53:e7:cf:a9:9f:0c:f3:45:e8:75:31:37:fc:72:
cd:50:d0:d4:11:e1:ce:76:f1:bc:3b:79:66:81:ab:3c:6b:f6:
14:b3:b1:f6:45:6c:59:fb:7d:ca:12:c0:62:7d:72:74:4b:46:
85:f7:f6:48:36:81:1f:44:77:d0:43:56:f8:5b:94:73:ea:9b:
eb:36:05:2e:bf:a8:b0:78:7e:56:40:c9:59:49:cc:03:f5:2f:
91:df:ff:79:f1:84:be:bd:42:04:6c:d2:81:63:89:6c:ba:b1:
ef:13:b3:2e:e5:e9:32:82:c4:ad:2d:5b:48:be:a3:34:9a:b9:
61:00:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-fra.rpki-client.org