Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EZW_2-6yEYi4ePeNzf8_PSaW9Z0.roa
File: EZW_2-6yEYi4ePeNzf8_PSaW9Z0.roa (raw, json)
Hash identifier: fI2trgPEg3dFiICTL8iZb1zYKSyqEuJ50BtopSnVodU=
Subject key identifier: 11:95:BF:DB:EE:B2:11:88:B8:78:F7:8D:CD:FF:3F:3D:26:96:F5:9D
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0182F028880A3E7134BF8702973398F67E7F
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EZW_2-6yEYi4ePeNzf8_PSaW9Z0.roa
Signing time: Tue 30 Aug 2022 19:09:24 +0000
ROA not before: Tue 30 Aug 2022 19:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19750
IP address blocks: 185.235.85.0/24 maxlen: 24
91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:28:88:0a:3e:71:34:bf:87:02:97:33:98:f6:7e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Aug 30 19:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1195bfdbeeb21188b878f78dcdff3f3d2696f59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3d:bf:0b:8e:6e:6b:45:bd:3b:26:98:3a:57:
87:fc:c6:63:e6:ce:c3:53:d1:6c:51:69:1c:ef:b3:
64:e1:7e:cf:f9:7e:4b:98:a9:98:c6:68:49:54:39:
08:e5:87:76:07:aa:82:7f:11:68:61:e8:71:3c:9d:
3e:9f:67:81:18:6b:a0:a7:19:05:22:f4:2a:69:66:
93:a6:b8:53:d4:b5:73:ff:05:2c:b3:10:4e:b1:16:
e0:dd:94:92:c2:02:2c:67:77:66:d8:78:4e:05:7d:
1a:53:4c:1f:b3:a8:6b:ba:79:e3:9f:58:8e:03:de:
d3:a9:34:47:0b:84:38:88:17:69:2b:d9:51:86:30:
f1:7a:a8:94:a7:f8:e3:ba:12:38:8a:d7:c4:05:85:
21:8b:c3:51:92:a6:b7:9f:92:fc:81:d4:0f:93:15:
ba:58:57:80:a7:1c:35:fb:61:9c:0b:60:d4:e5:e8:
df:05:c5:4f:e4:13:67:c1:5a:29:0d:3a:5d:ca:db:
23:7b:ca:38:7c:cc:66:bc:1a:ce:68:11:21:e5:f8:
e0:75:5d:e1:af:1c:a2:1d:b5:42:e8:8a:a4:20:17:
a5:c5:fe:98:f8:7c:7f:70:db:1e:7e:b3:7a:fc:b3:
c7:97:34:42:18:80:2f:e5:b3:d3:2f:ef:4f:65:b7:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:BF:DB:EE:B2:11:88:B8:78:F7:8D:CD:FF:3F:3D:26:96:F5:9D
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EZW_2-6yEYi4ePeNzf8_PSaW9Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
185.235.85.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e3:b9:7b:e3:11:61:9b:2d:9b:8e:82:4e:5f:03:1c:61:2b:
c9:b1:13:d4:45:de:c1:bc:3d:6d:83:2a:f4:5e:46:0b:48:50:
7d:99:19:73:fe:c1:8c:94:d9:4f:dd:5b:99:9c:02:95:53:fc:
7a:77:d1:ad:98:80:be:46:22:db:78:8c:39:82:c7:dc:2b:90:
4f:bb:2c:8d:27:f3:7d:37:bc:82:df:e7:ce:e1:86:dd:c6:f7:
2c:00:55:68:34:9f:f3:eb:c0:e9:b4:dd:4c:9a:32:c9:bf:a0:
01:81:df:de:56:b5:29:54:fc:aa:fb:37:3a:06:31:ea:af:ae:
78:15:65:1d:47:ba:fb:b0:82:e6:c0:01:9a:1d:b8:9e:4f:45:
e9:0a:7a:3f:e1:d0:97:77:a7:21:70:54:cd:5a:9b:0c:18:b9:
1e:2e:21:f6:c3:c8:ab:cf:e2:9b:af:00:fe:1e:0c:09:25:60:
ab:26:8a:ba:03:2d:1b:5f:19:0c:f9:16:07:3a:71:9e:99:e9:
7e:8f:48:fa:d0:86:00:58:2d:d1:f4:a3:c9:2c:24:be:ee:7c:
09:81:b4:56:e7:8d:99:98:4f:58:3b:9f:11:d4:68:d1:55:d8:
e5:4e:1b:06:9a:3b:bc:e1:24:dc:b8:5f:1b:77:a8:60:fb:c4:
ad:ad:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:30 2024 by rpki-client on console-fra.rpki-client.org