Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eedkDfcTeAQTNs7jJCsIHOfds7E.roa
File: eedkDfcTeAQTNs7jJCsIHOfds7E.roa (raw, json)
Hash identifier: GbSNJc3XbuPoZBt6sudfUy81SUn/VlsHdyiupu6CTbU=
Subject key identifier: 79:E7:64:0D:F7:13:78:04:13:36:CE:E3:24:2B:08:1C:E7:DD:B3:B1
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AA851ED
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eedkDfcTeAQTNs7jJCsIHOfds7E.roa
Signing time: Sat 01 Jan 2022 16:03:00 +0000
ROA not before: Sat 01 Jan 2022 16:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16135
IP address blocks: 176.88.56.0/24 maxlen: 24
212.252.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447238637 (0x1aa851ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79e7640df71378041336cee3242b081ce7ddb3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:27:bf:e9:49:ae:ac:38:24:f1:f7:ad:a8:
e5:c9:f9:f6:b2:95:c7:70:a8:6f:c6:a0:f9:3a:a5:
97:d6:73:ac:26:d9:62:51:6a:ed:e5:fe:37:e5:29:
3e:c7:36:c2:1c:d5:4b:17:0c:86:0d:60:98:b6:5a:
93:9d:1c:e5:f2:18:9d:ac:7c:46:d7:dd:ca:66:d9:
6f:f2:f8:2a:0d:13:4a:d6:f4:41:4d:08:b0:e8:3e:
4b:be:f3:87:9b:f4:bb:81:7c:90:b4:fb:ce:8e:7f:
a3:c2:c8:67:dc:15:a6:da:92:b1:d9:7a:d9:fd:26:
68:c5:5f:46:34:e8:16:aa:ac:23:ed:d2:78:88:cb:
74:38:fb:08:39:5c:e6:f2:83:eb:80:b4:f6:c7:ce:
da:b3:27:00:eb:7e:03:f5:12:75:c2:31:35:40:32:
9e:cf:45:22:9d:17:b0:86:32:3e:24:f0:7c:33:fe:
23:c4:5e:fa:45:e1:c1:31:5a:17:a4:e8:93:6c:b2:
97:11:ae:3a:d0:c9:cf:2e:fe:94:3d:61:ab:4a:79:
20:18:e0:b5:e6:9d:c2:5a:50:fa:9b:1e:ca:0a:21:
b3:05:05:11:88:27:a9:be:a1:0a:95:36:16:cc:cf:
8b:75:27:54:3c:af:12:20:fa:4f:4d:31:bc:d6:33:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:64:0D:F7:13:78:04:13:36:CE:E3:24:2B:08:1C:E7:DD:B3:B1
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eedkDfcTeAQTNs7jJCsIHOfds7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.88.56.0/24
212.252.168.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ad:7d:97:f1:6e:2d:aa:5c:d5:6b:25:de:ff:71:26:ee:18:
0a:45:13:fa:7d:28:96:d9:16:26:dc:52:46:af:f2:94:9c:6c:
68:e1:65:73:b6:4b:fd:f5:d0:c5:13:16:12:94:95:cb:8c:ed:
17:5b:e9:69:ba:e5:85:9d:91:e4:1c:37:b7:33:35:31:9e:17:
a0:23:6c:cb:e6:01:40:8a:77:de:ce:dd:cc:68:31:6e:3e:46:
46:0f:98:c0:13:1c:2e:23:88:c6:83:44:63:7e:cc:45:36:5d:
65:cb:8f:a4:28:12:d0:4b:4b:0c:45:2d:c5:c2:f5:e2:19:cd:
60:f9:de:5d:b9:2f:d5:99:fd:c5:09:27:5d:d5:bd:c6:1e:df:
fc:e7:b3:f2:e1:b4:39:d1:8c:89:1f:0b:6a:a3:c7:fd:5a:59:
e8:d3:de:6d:f8:41:ab:66:2f:ee:09:fd:d5:69:be:7f:f7:9a:
56:8e:46:a4:22:14:f0:d7:82:44:4c:f4:52:23:53:65:0d:9e:
0b:3f:35:a9:bf:b3:5d:d8:74:e5:4f:d4:7b:46:84:6f:d3:7e:
2e:a9:59:4a:95:06:3b:1a:0e:0b:f9:94:1d:5c:10:9f:78:87:
03:d9:de:e4:de:2f:4c:dd:ac:24:29:3d:f4:9a:cf:a9:b4:61:
a2:a1:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org