Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/eGq-fn2WN1K6dgF6gVTA_SpLnzk.roa
File: eGq-fn2WN1K6dgF6gVTA_SpLnzk.roa (raw, json)
Hash identifier: 4XkSfIsJsZASqbDCAok0IRvvCmcoYuugqZ0IbzygEsw=
Subject key identifier: 78:6A:BE:7E:7D:96:37:52:BA:76:01:7A:81:54:C0:FD:2A:4B:9F:39
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 0182643B9711AA8D0F34AFA2616688385F26
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/eGq-fn2WN1K6dgF6gVTA_SpLnzk.roa
Signing time: Wed 03 Aug 2022 15:03:23 +0000
ROA not before: Wed 03 Aug 2022 15:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209282
IP address blocks: 5.61.211.0/24 maxlen: 24
77.87.184.0/24 maxlen: 24
2a12:90c0:a0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:3b:97:11:aa:8d:0f:34:af:a2:61:66:88:38:5f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Aug 3 15:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=786abe7e7d963752ba76017a8154c0fd2a4b9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:c7:51:f5:01:11:31:50:2f:bf:8c:49:aa:
0a:e0:dd:39:f2:96:75:5e:89:09:03:af:7d:3d:d3:
b7:df:41:06:90:e5:55:1c:aa:b0:10:cb:1d:7b:33:
04:f6:3e:56:8d:1d:17:36:97:4f:10:08:b1:0a:0f:
0d:84:b3:8e:76:53:53:dd:3a:80:63:0a:d3:e1:f2:
5a:3d:1c:8c:f8:96:9a:56:73:5f:cf:eb:f8:eb:46:
c0:66:57:47:bf:50:6a:68:06:db:48:28:37:c0:52:
36:0e:da:7e:11:6e:39:92:64:23:ce:c5:47:ae:31:
7d:5f:e2:e0:1d:e4:13:f7:5d:f9:b2:9b:77:27:cc:
4d:cd:2b:7a:65:79:c2:8c:26:c6:8e:5e:87:4b:6f:
e0:a2:9f:91:04:c9:55:d6:77:1a:e7:7a:ff:93:ee:
71:5d:44:09:0a:0f:5f:ef:a0:d0:38:3b:c7:8a:00:
d3:2b:c9:a2:d5:e5:c9:20:cb:62:98:7f:dd:af:3c:
34:bf:21:ee:17:1f:ae:4e:be:4d:13:55:30:58:13:
05:94:a1:76:a2:d6:3d:4d:b6:63:d4:d0:fb:a3:57:
92:92:53:97:d3:ca:e8:0f:6a:ab:ba:9f:fd:b0:5e:
bf:0a:9a:94:6d:16:75:be:34:dc:d9:bb:7c:b6:b6:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:BE:7E:7D:96:37:52:BA:76:01:7A:81:54:C0:FD:2A:4B:9F:39
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/eGq-fn2WN1K6dgF6gVTA_SpLnzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.211.0/24
77.87.184.0/24
IPv6:
2a12:90c0:a0::/48
Signature Algorithm: sha256WithRSAEncryption
05:d5:d3:14:09:48:35:0f:96:d5:13:18:a8:33:88:42:83:c6:
51:5b:39:e3:ea:07:0b:8a:6e:87:aa:f7:01:14:59:9d:d1:ac:
b5:c4:43:76:c8:36:69:ac:e2:0c:36:24:51:3d:04:bb:00:d7:
b4:18:1b:08:2f:3a:d4:9a:30:42:85:e6:6f:26:ee:c4:fd:37:
7e:9b:99:e1:3c:4a:1c:16:60:3e:eb:c2:75:e8:36:93:4c:01:
79:a2:a4:89:07:6b:42:c8:85:91:d2:3e:78:5d:96:53:d3:b4:
56:3a:e1:c4:ca:68:b2:f9:44:32:35:35:7c:3b:7e:7d:80:78:
b7:e4:97:f6:ef:2a:78:f1:71:9b:4b:a2:b0:b1:3a:de:ab:3b:
02:e9:e4:4e:55:f5:df:52:f8:c8:a6:c7:56:b6:29:65:d5:15:
1c:81:8b:9b:2c:27:0a:60:cf:22:4f:72:e5:e2:1e:5f:bc:5d:
bd:ef:09:d4:d4:41:08:b3:2e:d5:77:c3:e4:26:ba:78:ca:cd:
67:43:20:20:0f:9e:49:96:17:35:fd:0f:44:39:8c:8a:f6:fb:
ff:b8:d4:5b:f2:52:96:57:2e:30:e5:31:c8:86:e2:89:94:1f:
8c:b5:a0:8f:6f:80:d6:e7:76:16:96:ab:d3:6a:2b:e4:40:07:
ee:51:87:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org