Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/egkK3AxvV8T1-849_ud5SL3oexI.roa
File: egkK3AxvV8T1-849_ud5SL3oexI.roa (raw, json)
Hash identifier: fIux+OfbpYygSaMy9kp4Wpvdz3yaH1ghb+AFwIxTnAQ=
Subject key identifier: 7A:09:0A:DC:0C:6F:57:C4:F5:FB:CE:3D:FE:E7:79:48:BD:E8:7B:12
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 06714216
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/egkK3AxvV8T1-849_ud5SL3oexI.roa
Signing time: Sat 01 Jan 2022 06:03:35 +0000
ROA not before: Sat 01 Jan 2022 06:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34476
IP address blocks: 45.139.200.0/22 maxlen: 24
212.102.103.0/24 maxlen: 24
2a0f:8c80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108085782 (0x6714216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jan 1 06:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a090adc0c6f57c4f5fbce3dfee77948bde87b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:e5:81:c9:fe:33:1c:d9:1a:62:be:1f:75:
5a:cb:79:3b:c5:b3:ba:66:88:af:d6:65:d4:89:11:
04:20:b3:1f:19:8d:d3:5f:88:72:7b:2b:fb:67:a0:
24:15:80:4b:ac:5b:4e:62:66:9e:86:58:20:2c:37:
e8:3b:25:8f:87:fd:d1:1e:7e:98:90:89:1b:2d:a6:
d0:21:59:7f:80:c1:e8:dd:3e:ac:f3:ca:59:a1:1b:
7c:ef:a0:23:73:78:eb:4b:35:a4:b6:59:66:bf:b1:
7b:47:81:d5:2f:f6:12:95:ed:10:9d:12:1a:0a:2c:
8f:7f:30:73:6e:df:7a:4b:71:6f:16:dd:30:ce:9c:
36:f2:28:01:f3:9e:f4:af:f4:0d:97:40:7e:eb:75:
8e:7c:c9:be:ec:cf:35:2a:ba:35:98:88:f2:ed:1b:
1c:65:53:12:fb:73:1c:d2:0e:31:f5:d6:41:d7:a3:
75:7a:e1:1b:8d:f4:bf:81:66:c5:90:d0:d7:f0:eb:
1f:80:1c:c1:df:72:fa:91:fa:29:ef:7e:5b:12:1c:
e7:a5:85:5d:77:c0:47:95:7c:4d:9a:db:14:ca:07:
69:5d:81:f2:cb:b9:f9:d1:39:18:8b:f8:41:99:c5:
e8:b6:7d:8f:98:86:68:31:d8:de:86:26:65:83:71:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:0A:DC:0C:6F:57:C4:F5:FB:CE:3D:FE:E7:79:48:BD:E8:7B:12
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/egkK3AxvV8T1-849_ud5SL3oexI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.200.0/22
212.102.103.0/24
IPv6:
2a0f:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
57:d3:64:e4:21:57:1b:4f:e0:64:64:f4:0a:e4:a9:d7:a0:71:
a9:6e:52:1d:c9:8b:25:a2:43:5a:cc:e1:66:be:a4:31:4c:3c:
88:4e:2e:48:9f:d2:e9:6e:71:01:3b:16:eb:cc:65:c7:8b:33:
ae:70:c3:91:f9:fe:8c:57:a1:37:3b:80:d9:6a:c8:b9:d6:fe:
b2:34:7e:0a:72:b7:81:62:82:7b:3d:41:2e:c0:35:a5:98:44:
35:e7:70:90:87:07:c5:51:46:f5:83:53:e6:57:b1:74:c9:6a:
7c:44:93:4f:92:13:de:f5:0e:1e:c5:62:00:b2:38:2c:50:4d:
11:47:c3:25:6f:94:01:8e:70:15:3f:c9:9b:78:e2:f3:45:84:
2b:33:cb:1c:31:d2:4f:bb:79:1e:ee:38:21:33:2b:77:6c:d9:
8d:33:8d:4b:86:27:98:20:c3:4d:1b:68:37:f7:6b:a1:6e:b3:
49:50:73:6f:27:1a:b2:09:be:84:fa:5d:da:53:8e:7c:5a:ff:
e1:36:3b:ee:63:02:aa:5a:1c:35:33:c9:87:62:78:ea:bd:4f:
72:58:04:0a:9c:1d:c9:42:3a:2a:7d:9d:dc:b1:24:e3:84:06:
5d:82:10:f9:9f:d4:c3:ff:5d:6d:3d:1d:77:30:75:d4:79:1c:
55:60:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:45 2024 by rpki-client on console-ams.rpki-client.org