Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eE0OBdLc8ogcMvYIAd_UA4Asbfs.roa
File: eE0OBdLc8ogcMvYIAd_UA4Asbfs.roa (raw, json)
Hash identifier: ZsnqAYE0hvSe9a8pXwrwSofRfRdCFwHT4Jb1v7fgtRc=
Subject key identifier: 78:4D:0E:05:D2:DC:F2:88:1C:32:F6:08:01:DF:D4:03:80:2C:6D:FB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 156DFCD3
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eE0OBdLc8ogcMvYIAd_UA4Asbfs.roa
Signing time: Tue 21 Jun 2022 13:01:45 +0000
ROA not before: Tue 21 Jun 2022 13:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 193.36.84.0/24 maxlen: 24
46.249.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359529683 (0x156dfcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 21 13:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784d0e05d2dcf2881c32f60801dfd403802c6dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8a:db:46:dd:21:cd:32:05:32:95:64:e0:70:
35:1c:f1:fe:49:04:75:4b:05:b2:bf:e2:b7:f7:a2:
51:17:c3:79:54:d5:14:27:4a:cb:97:b1:b8:c0:f0:
e3:1a:37:08:5d:ba:8c:0b:bf:f0:0a:65:36:d9:fd:
a2:d3:8b:c2:c5:a0:9f:d7:d5:fa:fa:b8:ff:49:05:
e8:2b:28:55:2e:3c:84:38:09:5a:b4:4f:08:1c:3c:
37:92:47:d0:b4:f5:d8:db:c8:28:51:a1:42:de:35:
8a:21:14:75:47:13:dd:ce:32:9c:73:be:9f:b0:d7:
0a:2d:36:77:cb:73:0d:ae:7b:ca:4a:3c:9d:c4:50:
81:ad:5e:8e:0c:97:a3:7c:15:6c:19:cf:28:24:5b:
ca:b6:d8:33:12:38:94:79:58:4c:bb:68:e6:dc:90:
b1:72:d7:9d:82:64:79:b5:3f:ec:e1:2d:89:37:16:
a3:c2:40:85:ba:89:09:50:59:2b:70:d0:ae:9d:ca:
15:ca:5c:d6:f4:d5:4c:e3:2b:68:dc:af:37:0b:91:
98:1c:03:89:bd:5c:c3:37:61:57:1d:c7:74:7f:52:
54:f2:14:4b:a0:35:c3:68:21:0d:38:f9:dc:8b:c6:
fc:f2:45:f1:32:3d:5d:e1:8a:51:9a:b1:5f:70:8c:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4D:0E:05:D2:DC:F2:88:1C:32:F6:08:01:DF:D4:03:80:2C:6D:FB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/eE0OBdLc8ogcMvYIAd_UA4Asbfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.100.0/22
193.36.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:10:cb:6f:c9:83:79:3c:70:56:70:6e:40:3c:60:1f:ef:cc:
db:52:69:48:fb:b4:7f:37:7b:82:7d:51:03:46:e8:1b:b7:6a:
58:6a:1a:f0:3c:47:21:c4:99:00:73:f1:36:d4:4a:1f:a3:be:
3d:02:8a:67:f6:9b:16:c2:15:46:fa:e0:8c:80:d0:25:1a:61:
8a:89:6d:71:0b:c9:de:2d:f3:47:f7:da:ed:fe:28:26:d5:c7:
5c:c7:ce:88:18:3b:5a:e1:70:c5:f2:09:c7:35:e2:d1:83:9a:
46:ab:3a:01:25:8d:3d:39:f8:81:6d:55:f9:ca:7f:29:19:e5:
24:35:b1:23:10:fc:41:37:e9:5d:42:81:39:ac:2b:98:7d:5f:
d1:b2:5e:fc:07:8b:1f:31:74:39:e4:8d:9c:45:40:88:30:1b:
25:7f:a3:e9:93:2d:45:e9:cb:87:41:02:c4:0b:fc:87:0d:11:
eb:15:b0:c3:a7:59:64:ab:04:d9:6f:11:73:27:28:05:9c:d3:
2b:ea:12:04:bc:d9:fd:9f:ef:9f:00:1f:6a:42:e3:4d:6b:d4:
27:12:c3:de:c1:e2:35:0b:52:25:96:0d:53:46:2c:19:ef:07:
49:88:67:20:69:5b:3b:c2:45:65:5b:67:63:43:12:a1:fa:77:
68:6a:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org