Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/EgQYc8pusgSUdGLoUv-ZgwIO6fw.roa
File: EgQYc8pusgSUdGLoUv-ZgwIO6fw.roa (raw, json)
Hash identifier: wEQTbXqMHrJREN4BwfjOMx/v+l8uqwpXXhUNPFD76go=
Subject key identifier: 12:04:18:73:CA:6E:B2:04:94:74:62:E8:52:FF:99:83:02:0E:E9:FC
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0591FDD7
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/EgQYc8pusgSUdGLoUv-ZgwIO6fw.roa
Signing time: Sat 01 Jan 2022 05:03:21 +0000
ROA not before: Sat 01 Jan 2022 05:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49801
IP address blocks: 194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93453783 (0x591fdd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 1 05:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12041873ca6eb204947462e852ff9983020ee9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:19:20:2e:c9:f5:2a:32:60:85:48:ea:c9:
ae:ba:73:8f:ec:b6:6e:5e:b8:1b:bd:08:69:c9:f0:
02:a6:be:52:80:87:03:1b:96:f9:61:e1:20:fa:55:
aa:d5:56:5d:23:17:8b:ff:35:60:b0:8f:b8:83:91:
56:e0:4b:3b:52:20:71:55:d0:90:bc:e1:a4:29:31:
32:f5:6e:b1:83:a0:0b:23:31:46:6f:d3:25:b0:0d:
0e:54:6b:22:2e:50:c2:63:1a:ea:4e:da:06:62:0f:
28:39:a8:e8:da:2b:41:ab:ac:7b:b7:b6:5c:29:f6:
a5:6e:fb:a2:cd:6a:3a:b6:ee:06:6a:13:71:1d:22:
42:9b:d1:8e:3f:a5:0a:4b:1e:65:74:a8:d8:85:67:
d7:87:fa:17:de:9b:b0:ca:70:9e:08:54:1a:5f:fc:
91:2e:7f:17:80:bc:d9:8e:80:a4:2b:4f:c9:6a:c9:
c0:7b:44:d9:d3:3a:fb:e3:98:4b:72:fe:19:53:81:
d8:ac:6e:fc:d4:4b:2b:40:42:aa:11:35:4e:fd:93:
d4:d6:14:e6:b9:53:3f:f2:7a:0b:d8:25:ec:03:24:
b0:9d:4f:27:b1:64:43:e8:0f:57:83:4c:ec:8c:02:
7e:90:a5:1e:56:e5:07:e0:aa:b6:ab:de:ac:c6:31:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:18:73:CA:6E:B2:04:94:74:62:E8:52:FF:99:83:02:0E:E9:FC
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/EgQYc8pusgSUdGLoUv-ZgwIO6fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:68:06:6b:53:ba:08:56:d4:70:f7:4f:6a:a7:cd:8e:23:8b:
ae:14:c9:f2:bd:be:e3:1d:84:cd:71:e2:87:ff:35:24:ae:59:
3e:92:15:e7:85:00:cc:39:71:ee:51:47:66:df:92:d7:f0:c3:
d9:54:69:a0:bd:4e:65:9a:ce:b0:76:f3:9f:1f:2f:f1:4f:a8:
76:80:ba:79:dc:da:50:a9:0f:91:2f:4f:0b:88:d9:39:2a:35:
a0:32:ac:77:7c:d7:d1:3f:50:18:93:2a:d6:26:3f:ef:97:9e:
a7:7e:31:86:91:9a:2b:2c:ca:ef:01:8e:55:dc:a4:64:50:01:
68:bb:13:16:85:19:44:30:90:fc:ce:c5:06:a3:f9:4d:19:bb:
55:fd:f7:58:e3:25:db:d9:c9:92:2e:7a:37:75:a1:b0:13:ac:
d5:32:d6:43:d0:2b:e4:f3:b8:eb:0d:10:ae:82:91:20:03:57:
d5:73:d6:db:7e:f1:33:5a:4a:e1:7d:cf:8c:bf:84:80:99:e5:
f1:0d:8e:1f:13:b8:46:24:72:d2:9d:16:6b:1b:f8:52:5f:05:
16:42:02:59:9e:48:b1:d4:89:02:6a:3b:b0:5d:2c:ac:7b:3e:
f3:25:9f:0f:fd:22:91:0d:e3:1c:3d:41:09:97:d6:d2:52:90:
2f:b2:ab:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:35 2023 by rpki-client on console-ams.rpki-client.org