Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/ekea44t-PI8P8e7Sl9DBfFjDUwM.roa
File: ekea44t-PI8P8e7Sl9DBfFjDUwM.roa (raw, json)
Hash identifier: O1xVt38Ei405lm6QXvQdrRSZtY/b5x5gb013YoaiSZE=
Subject key identifier: 7A:47:9A:E3:8B:7E:3C:8F:0F:F1:EE:D2:97:D0:C1:7C:58:C3:53:03
Certificate issuer: /CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Certificate serial: 0185626989A9F02D1CE41FFB28BD89E1E44B
Authority key identifier: C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/ekea44t-PI8P8e7Sl9DBfFjDUwM.roa
Signing time: Fri 30 Dec 2022 09:42:41 +0000
ROA not before: Fri 30 Dec 2022 09:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198333
IP address blocks: 193.37.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:69:89:a9:f0:2d:1c:e4:1f:fb:28:bd:89:e1:e4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ab3c5b69af5c218dd4af764c94366c646f83a5
Validity
Not Before: Dec 30 09:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a479ae38b7e3c8f0ff1eed297d0c17c58c35303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:74:2c:09:48:30:cc:af:f9:2d:4b:1c:99:
45:34:cd:37:cc:97:ec:f0:c4:89:5f:39:7e:85:3f:
27:ab:ec:fc:6b:d8:29:82:3f:8d:0f:d8:27:77:96:
98:18:39:42:41:6b:15:de:d8:8d:f5:b4:a4:c8:4f:
ed:b8:b1:6b:fc:33:c7:cb:f9:37:84:62:ef:03:f9:
c5:e9:7d:22:24:61:8e:45:9c:d9:59:ca:94:7b:6e:
58:6b:eb:16:7b:55:81:46:6a:d7:ff:1b:b1:07:8c:
d1:68:ea:bd:d0:85:95:0d:72:4a:4a:18:48:f8:dd:
b7:60:34:86:e4:85:7b:f5:96:56:1b:73:27:7d:47:
a5:81:a7:61:8a:9f:de:32:96:be:d2:1d:e1:5d:4c:
15:d4:66:ed:5a:7c:78:e2:c6:c5:6e:86:71:d7:3c:
85:1f:9e:52:6c:60:83:1e:06:35:ca:db:49:1c:6e:
90:cf:9c:23:10:f2:c0:ee:e8:cb:91:08:7f:ca:72:
b4:5c:3f:05:69:02:fb:5c:99:68:4b:42:6f:d9:35:
59:8b:9a:04:1c:05:00:69:69:0a:22:bb:2f:56:ca:
76:c6:37:5b:fa:70:8c:8c:01:48:fb:1f:33:0b:c7:
a7:61:bb:d6:db:e9:10:f3:8c:a7:d1:db:2d:bd:d2:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:47:9A:E3:8B:7E:3C:8F:0F:F1:EE:D2:97:D0:C1:7C:58:C3:53:03
X509v3 Authority Key Identifier:
keyid:C8:AB:3C:5B:69:AF:5C:21:8D:D4:AF:76:4C:94:36:6C:64:6F:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKs8W2mvXCGN1K92TJQ2bGRvg6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/ekea44t-PI8P8e7Sl9DBfFjDUwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a26b0f-3353-4e59-bf70-118454ccd412/1/yKs8W2mvXCGN1K92TJQ2bGRvg6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.149.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fc:c2:8c:8b:c2:58:9f:2d:85:b0:66:fe:ae:44:bc:31:3e:
8e:f2:f2:84:d3:99:3c:e7:f5:c6:7e:61:90:4a:e5:e1:66:1d:
89:73:39:90:b4:08:21:7c:d2:c0:6a:4d:aa:59:3e:1f:23:12:
d6:cf:f4:2f:4f:5d:fa:0e:5a:da:30:26:78:40:96:70:08:7e:
33:23:35:92:3d:9f:9a:63:57:2d:92:89:06:b5:d2:8b:bf:d2:
6e:4e:6e:9d:97:c1:71:bb:db:ee:28:e7:eb:b7:39:e7:0d:b9:
2a:db:db:02:44:6d:49:a4:71:c2:7e:1d:2a:94:bf:d3:70:62:
98:22:1c:00:3f:dc:a7:8d:6c:df:7b:34:6a:09:81:fb:f3:45:
40:52:ca:db:21:3c:78:10:ab:1f:2a:cf:e4:cf:05:04:3f:aa:
12:6b:74:ab:0a:84:e4:f9:e1:e0:48:39:6c:9c:0c:6b:be:6a:
4c:0e:f1:47:c0:51:1a:30:9e:3a:67:76:99:f8:c4:86:bb:0e:
5b:37:a0:a3:ad:3e:53:80:31:3b:15:08:27:ea:bc:92:07:8e:
6a:3e:63:16:84:a5:45:31:b0:69:ce:b4:37:77:a6:f2:34:41:
ef:15:96:15:cc:f1:b8:22:57:70:99:b3:bc:99:e8:68:47:aa:
7b:2f:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:38 2023 by rpki-client on console-ams.rpki-client.org