Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/eIqEGmUsDq0veTfFCTuU-Vfk-0M.roa
File: eIqEGmUsDq0veTfFCTuU-Vfk-0M.roa (raw, json)
Hash identifier: E8B6nl8UeuUAQm9Gc8nY7e1EWN4ir1NKST5Nc6fwY3I=
Subject key identifier: 78:8A:84:1A:65:2C:0E:AD:2F:79:37:C5:09:3B:94:F9:57:E4:FB:43
Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Certificate serial: 02BACD
Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/eIqEGmUsDq0veTfFCTuU-Vfk-0M.roa
Signing time: Fri 25 Feb 2022 08:07:59 +0000
ROA not before: Fri 25 Feb 2022 08:07:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25241
IP address blocks: 195.234.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178893 (0x2bacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce
Validity
Not Before: Feb 25 08:07:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=788a841a652c0ead2f7937c5093b94f957e4fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:5d:94:b3:d8:ff:a3:77:03:9c:d0:75:e1:
0d:17:b3:1d:ad:5f:aa:22:72:12:ab:c1:a8:c1:66:
40:f1:aa:ba:ae:19:11:32:ed:05:6b:79:98:d5:21:
14:65:ff:c7:91:48:b8:b0:0d:05:91:68:fc:0d:9b:
ac:4b:b6:43:da:a8:39:2f:7c:73:73:98:6b:c2:d2:
22:2b:3f:23:68:ad:97:dc:fa:4a:ec:29:72:7d:5a:
85:31:d8:58:72:f2:07:4a:64:73:9f:97:3a:94:68:
ef:ac:08:81:ab:40:5c:f0:ef:53:db:ac:01:1b:f7:
75:f8:f3:0a:9a:e5:eb:13:d9:eb:64:5e:f9:2e:75:
18:0b:6f:0b:ed:bc:26:c2:dd:d5:cb:1c:4c:60:25:
90:1a:76:4a:4a:a1:0e:de:41:16:c8:af:15:36:fa:
2f:d7:98:f5:f0:e0:ac:cb:84:60:50:59:d4:33:1a:
01:79:86:95:c0:d9:d7:a8:4a:d1:b0:df:b4:38:b6:
39:47:ad:85:c3:78:b9:67:90:ff:8d:f3:51:7f:c2:
51:84:9c:a6:41:a6:eb:a1:55:69:99:a1:ed:16:50:
ec:a9:0f:88:9c:28:2d:d4:1a:6c:f5:3e:33:42:05:
84:e0:b3:6e:60:da:48:20:2f:4a:dd:4a:3c:57:43:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8A:84:1A:65:2C:0E:AD:2F:79:37:C5:09:3B:94:F9:57:E4:FB:43
X509v3 Authority Key Identifier:
keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/eIqEGmUsDq0veTfFCTuU-Vfk-0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.144.0/24
Signature Algorithm: sha256WithRSAEncryption
14:96:33:fa:d9:42:ef:9f:6d:73:fd:d1:d7:18:36:d5:7b:24:
65:89:73:9b:80:06:b7:dd:07:d3:b3:d8:e3:a0:5c:59:94:71:
43:53:2e:05:6b:e5:17:80:4a:c8:36:6a:43:c9:b9:fd:df:95:
e1:ff:79:2f:73:32:b7:21:ca:39:38:95:57:54:bd:ba:53:2b:
be:a7:59:a7:d2:4b:df:dc:5d:4e:f6:10:9e:c4:7e:d7:b4:af:
a7:c8:b4:9a:53:80:d2:63:bd:c6:c2:86:be:d7:e1:d2:e0:17:
d1:ec:77:30:66:44:22:4d:20:fb:e9:b1:e2:13:63:98:f6:30:
e7:7b:a6:e3:67:64:68:57:34:fc:28:63:24:06:15:de:64:64:
f9:26:bb:24:30:e5:f0:f3:f5:af:c8:96:b1:be:05:5c:3f:c6:
d9:69:13:38:45:f5:ab:51:9e:a4:39:48:cf:1e:91:95:b3:73:
3d:98:0b:69:3c:6a:5b:d7:f2:d8:cf:4b:82:9c:36:ad:95:0f:
a8:54:84:34:69:87:fd:b2:b4:c7:70:8f:cd:50:a8:73:2d:5c:
24:4d:90:84:8a:c2:6d:93:df:cd:24:78:27:0a:5a:b6:06:e5:
8b:e6:72:f0:c5:cd:ca:06:a8:68:1c:16:da:da:f2:e3:99:fc:
3f:c4:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org