Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/eQAiPFgdg9gnz1QGD5rFr98a9mI.roa
File: eQAiPFgdg9gnz1QGD5rFr98a9mI.roa (raw, json)
Hash identifier: EImCDXNxFNhbhupXF3wNHHOGGUOII0hkE1PmvREcTSg=
Subject key identifier: 79:00:22:3C:58:1D:83:D8:27:CF:54:06:0F:9A:C5:AF:DF:1A:F6:62
Certificate issuer: /CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Certificate serial: 0B927324
Authority key identifier: 31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/eQAiPFgdg9gnz1QGD5rFr98a9mI.roa
Signing time: Thu 17 Feb 2022 10:18:58 +0000
ROA not before: Thu 17 Feb 2022 10:18:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43009
IP address blocks: 193.105.74.0/24 maxlen: 24
81.23.249.0/24 maxlen: 24
81.23.250.0/24 maxlen: 24
81.23.251.0/24 maxlen: 24
81.23.252.0/24 maxlen: 24
81.23.248.0/24 maxlen: 24
81.23.253.0/24 maxlen: 24
185.255.9.0/24 maxlen: 24
185.255.10.0/24 maxlen: 24
185.255.11.0/24 maxlen: 24
185.255.8.0/24 maxlen: 24
202.22.160.0/24 maxlen: 24
202.22.164.0/24 maxlen: 24
202.22.165.0/24 maxlen: 24
202.22.166.0/24 maxlen: 24
202.22.161.0/24 maxlen: 24
202.22.162.0/24 maxlen: 24
202.22.163.0/24 maxlen: 24
202.22.171.0/24 maxlen: 24
202.22.172.0/24 maxlen: 24
202.22.168.0/24 maxlen: 24
202.22.169.0/24 maxlen: 24
202.22.170.0/24 maxlen: 24
202.22.173.0/24 maxlen: 24
202.22.174.0/24 maxlen: 24
202.22.175.0/24 maxlen: 24
81.23.254.0/24 maxlen: 24
81.23.255.0/24 maxlen: 24
2a0c:55c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194147108 (0xb927324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31eb9b2db4a3bddf8c92fc50b9713043dd56dc38
Validity
Not Before: Feb 17 10:18:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7900223c581d83d827cf54060f9ac5afdf1af662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:17:17:77:69:b9:4e:85:a9:13:b0:e0:cc:
67:ef:c0:d2:6e:58:09:83:ca:34:4e:f6:82:6d:90:
b6:06:6e:a1:c8:89:8c:dd:89:57:b4:70:b1:cf:ad:
9c:93:70:ca:fe:01:31:d4:3d:3a:35:67:60:46:8e:
47:4b:21:e0:27:3b:1e:3e:cb:e2:97:2a:26:1f:24:
b4:b6:3b:28:de:4e:ad:35:15:a0:b1:25:4b:68:9a:
4f:73:32:43:f8:fa:06:4f:32:5c:b0:53:93:5d:2c:
42:a0:0f:e0:9d:22:0e:44:29:42:2b:91:3d:8f:66:
86:a0:1c:89:81:b9:aa:85:9c:ae:f9:7c:2c:ca:c3:
f5:3f:8e:e4:ff:f2:94:cb:45:c4:6c:23:ef:34:17:
8a:ae:86:72:02:a2:ed:6b:d9:32:0a:a1:7c:8b:38:
60:cc:2e:4b:10:0f:af:25:f4:ee:f2:cb:d0:4a:75:
f1:05:37:43:e3:d1:b7:73:19:e0:57:24:d7:91:57:
a4:98:ec:1e:c1:e3:01:c1:05:dd:f4:99:fb:18:0a:
97:00:85:42:32:c2:83:00:4e:cb:60:20:12:7f:b3:
83:a2:f1:05:7e:54:35:ed:3c:ab:c8:09:e6:d5:b1:
0d:c9:57:84:f0:d3:be:38:64:29:bf:e8:15:9f:41:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:22:3C:58:1D:83:D8:27:CF:54:06:0F:9A:C5:AF:DF:1A:F6:62
X509v3 Authority Key Identifier:
keyid:31:EB:9B:2D:B4:A3:BD:DF:8C:92:FC:50:B9:71:30:43:DD:56:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeubLbSjvd-MkvxQuXEwQ91W3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/eQAiPFgdg9gnz1QGD5rFr98a9mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/247005-559d-4eb4-b3e8-bd24f003578f/1/MeubLbSjvd-MkvxQuXEwQ91W3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.248.0/21
185.255.8.0/22
193.105.74.0/24
202.22.160.0-202.22.166.255
202.22.168.0/21
IPv6:
2a0c:55c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
0d:32:26:8d:c3:ee:ce:67:f6:58:d2:5a:15:8b:a9:27:b8:5a:
a5:15:ef:86:d8:9b:31:3a:95:2b:f3:45:77:44:9f:ee:15:39:
f1:5d:90:74:c1:ba:4c:1a:0f:8d:4a:f8:7a:a2:a6:1e:be:a6:
40:71:d6:cb:ca:bf:aa:ce:ae:78:86:8b:85:ef:21:76:8b:94:
fe:dd:bf:cb:f6:d1:a3:fd:09:d8:51:ef:47:78:0d:d2:b9:29:
e7:e9:75:56:6e:21:47:91:47:28:f0:8c:d6:ae:f9:19:5f:46:
fc:da:b5:59:ec:e7:d5:3e:b7:6c:c3:ff:88:1a:e0:cd:f9:ae:
c5:b8:24:89:8a:2e:cf:c5:c7:2e:70:f6:de:4e:2b:a8:ee:8c:
27:b4:e7:b4:69:7f:53:09:52:7d:0d:9f:78:eb:f3:d1:f8:57:
da:35:f3:c1:d1:89:08:8e:23:3e:23:79:59:65:ae:a4:b4:87:
06:04:64:4b:ab:38:aa:de:6b:0d:b3:6b:87:c1:be:6b:45:55:
49:47:7b:e8:1b:54:92:c9:32:92:a8:91:b1:5d:0a:3b:ef:c9:
dd:3b:88:5b:12:36:d4:09:e9:18:3f:b6:d6:e9:6f:f0:b0:51:
61:fa:a0:83:c1:92:16:e9:ed:61:27:06:73:1f:fb:e8:48:59:
4e:52:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:24 2024 by rpki-client on console-fra.rpki-client.org