Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/EeaGQg0CgyYJWSFUOaAXHfi4_MU.roa
File: EeaGQg0CgyYJWSFUOaAXHfi4_MU.roa (raw, json)
Hash identifier: VAnefmsLuEkYYHBBBcRCY6D4TfptBY9ODy4lezi1+Bw=
Subject key identifier: 11:E6:86:42:0D:02:83:26:09:59:21:54:39:A0:17:1D:F8:B8:FC:C5
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 178CF8BA
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/EeaGQg0CgyYJWSFUOaAXHfi4_MU.roa
Signing time: Sat 01 Jan 2022 15:04:59 +0000
ROA not before: Sat 01 Jan 2022 15:04:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202463
IP address blocks: 185.73.236.0/24 maxlen: 24
185.73.238.0/24 maxlen: 24
185.73.237.0/24 maxlen: 24
87.243.69.0/24 maxlen: 24
87.243.71.0/24 maxlen: 24
87.243.77.0/24 maxlen: 24
87.243.79.0/24 maxlen: 24
185.49.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395114682 (0x178cf8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jan 1 15:04:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11e686420d0283260959215439a0171df8b8fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:f8:06:c7:fc:3a:73:ec:fd:6e:f5:3d:ad:
71:4c:75:da:df:61:f2:8b:b5:59:18:4e:67:a6:ad:
e0:3c:ca:10:a1:f4:2e:16:28:b2:d9:9b:30:a2:0a:
ee:06:b8:2c:83:52:95:52:e0:bb:6c:cd:48:ce:26:
2c:fa:f4:bd:8e:ae:07:ed:e2:1c:c9:fd:49:38:66:
e3:fc:c9:00:bb:42:5a:aa:66:f9:79:cb:75:9b:f8:
c7:21:9d:22:95:82:15:a1:f0:81:de:95:8b:71:b0:
5f:be:db:a2:1e:ae:ac:9a:c4:61:b3:7b:44:0e:74:
55:bf:b1:de:02:de:a7:a3:0c:c6:93:59:56:30:58:
1f:4c:f9:f1:8d:e3:7a:62:25:d1:c2:fa:36:eb:3c:
cf:9e:9d:78:6c:eb:e7:28:6f:7b:ab:2a:d7:ce:9f:
9e:c5:37:42:aa:45:28:49:5c:05:8f:dd:92:0a:5a:
c0:ce:e4:dc:5f:6a:15:61:9a:01:38:7d:51:fa:7b:
5a:e2:e5:6a:79:f0:18:be:00:a1:0d:d4:da:ab:82:
e1:fa:24:a8:4a:da:53:70:1d:cb:a3:ef:59:29:c4:
7b:ea:a7:07:57:44:72:cb:29:54:30:72:43:6d:c7:
81:71:68:8f:40:81:7e:32:2c:66:a0:d5:29:78:2e:
cd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E6:86:42:0D:02:83:26:09:59:21:54:39:A0:17:1D:F8:B8:FC:C5
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/EeaGQg0CgyYJWSFUOaAXHfi4_MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.243.69.0/24
87.243.71.0/24
87.243.77.0/24
87.243.79.0/24
185.49.88.0/22
185.73.236.0-185.73.238.255
Signature Algorithm: sha256WithRSAEncryption
07:d2:b1:cb:10:98:1f:34:17:ac:66:32:6b:c3:2b:8e:91:06:
e2:a5:1c:fb:82:3b:a9:9b:42:03:3e:3d:fe:99:10:88:e7:7e:
d0:f1:5d:69:d9:cf:da:e9:41:d2:7d:fd:af:d4:11:95:3d:7d:
11:9d:43:7b:f9:68:89:4c:b4:b8:6f:e2:0b:ef:7a:d1:fd:2c:
74:63:52:8d:09:4b:2b:e3:d6:e6:d6:be:16:45:d2:58:9a:35:
d9:85:ff:87:11:74:76:3b:98:b8:9e:57:b7:f9:4e:8b:86:11:
ac:18:39:24:d1:c7:b2:36:d2:8b:35:29:5e:71:fc:0f:50:20:
55:d0:34:82:0d:ff:d0:d7:c3:2b:2a:50:99:fc:48:72:9d:a8:
ad:93:85:1c:2e:fc:61:57:24:3d:08:46:9b:e7:e4:c8:ca:70:
0d:ac:9c:db:de:56:72:92:9a:ee:25:e2:44:98:84:34:3d:96:
da:9e:0d:07:ca:98:d6:4d:fe:6d:7b:2d:2e:32:42:16:fc:93:
bf:00:a6:6e:cd:2b:ee:7b:2a:5f:f6:5a:3f:b8:62:7f:74:db:
a0:8b:c7:ad:9e:31:e9:38:b9:86:26:e7:c3:34:57:ec:17:72:
4a:02:3a:70:58:4a:0f:79:7e:84:0e:56:f6:72:85:39:4e:70:
d1:99:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:15 2024 by rpki-client on console-ams.rpki-client.org