Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/EuuNnTiwkA7T7Ims-kQyiJoNNEY.roa
File: EuuNnTiwkA7T7Ims-kQyiJoNNEY.roa (raw, json)
Hash identifier: 8K3uyx09JszQ4uLW94n+/Nj+rPFg+lt7nTAIYp/7hY0=
Subject key identifier: 12:EB:8D:9D:38:B0:90:0E:D3:EC:89:AC:FA:44:32:88:9A:0D:34:46
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 023B1B1A
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/EuuNnTiwkA7T7Ims-kQyiJoNNEY.roa
Signing time: Wed 26 Jan 2022 12:38:57 +0000
ROA not before: Wed 26 Jan 2022 12:38:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.212.206.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37427994 (0x23b1b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 26 12:38:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12eb8d9d38b0900ed3ec89acfa4432889a0d3446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:e4:f9:fc:1c:5b:69:66:37:70:eb:dc:78:
0c:df:1b:3c:58:18:d9:5e:de:96:8a:0f:fa:67:60:
3a:32:82:95:2a:26:56:aa:f3:a3:8f:bb:9c:ab:72:
17:78:fd:0a:cf:23:1d:db:a9:c2:5a:da:6b:97:ad:
32:55:4f:6c:3d:ee:31:48:1f:fe:59:44:5d:9a:80:
78:41:0f:0d:da:58:b2:c8:c3:de:33:a6:a8:18:f8:
f0:63:d1:22:07:35:2f:09:7a:d0:f0:91:aa:47:21:
7f:d4:7f:db:45:aa:12:5a:91:a0:04:68:47:5b:44:
c4:90:31:e6:92:fa:c2:ab:2a:38:ab:79:85:54:06:
d3:73:a2:a4:36:28:7f:ea:b0:54:94:02:1a:33:82:
37:f4:9c:5e:34:9d:d0:a1:df:70:a8:fc:0f:4f:6a:
38:1a:92:c9:f1:8c:e2:d0:88:28:91:77:e8:49:9a:
06:d8:93:71:ed:ef:46:12:e0:c2:85:4e:62:42:1c:
78:47:c7:94:b7:86:64:1e:3c:86:42:6b:93:53:45:
14:a4:ab:96:73:ba:8a:7e:a8:3f:0a:0e:af:2a:f4:
f0:3b:45:09:d4:61:75:d6:90:7f:8c:66:e0:12:66:
14:61:4c:1e:5a:30:6a:b9:bd:d6:01:7d:72:e8:1c:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:8D:9D:38:B0:90:0E:D3:EC:89:AC:FA:44:32:88:9A:0D:34:46
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/EuuNnTiwkA7T7Ims-kQyiJoNNEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:3f:1b:fe:d1:79:80:c4:21:3a:e3:6f:d4:d7:fe:5a:6e:84:
76:b7:81:ec:57:9c:84:e6:e2:ef:25:2f:a9:77:c2:58:c3:db:
9c:73:bc:85:d7:8c:1c:09:08:85:9a:54:4a:1c:cd:d5:ba:30:
32:c8:db:13:53:8a:c9:ad:95:89:5b:7d:32:86:5c:5f:8a:bb:
b4:0f:fb:20:bb:85:08:66:ad:bc:6f:78:bc:70:1c:36:db:08:
dd:d6:59:09:27:42:59:8a:e5:37:4d:78:5a:f7:9b:47:e5:e8:
ac:fc:d5:d9:4d:69:61:e9:3c:7b:b3:1c:b5:47:dd:be:48:eb:
92:76:95:11:68:bf:43:62:39:72:77:90:4b:db:3c:a6:ad:62:
17:88:de:f0:8a:22:56:ae:82:04:31:20:26:5e:2b:08:f8:e5:
4b:58:d8:9b:b6:37:84:d6:ce:11:37:5e:6e:96:2f:ae:d3:16:
b5:57:43:3a:2e:42:f4:58:28:b5:52:c5:44:28:2a:5b:dc:89:
29:6a:0b:0e:91:3f:3c:45:2d:82:9d:ce:c2:44:2e:77:fa:bb:
17:dc:ae:fe:39:15:43:39:c4:85:c1:fa:77:9d:ab:36:b7:2b:
1a:c9:2d:03:16:49:41:73:41:20:35:f7:3b:5c:4d:fd:16:c4:
3e:1e:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org