Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/EZViTPOODEmoAO-RCccWQ1HH_GU.roa
File: EZViTPOODEmoAO-RCccWQ1HH_GU.roa (raw, json)
Hash identifier: drfkrfy+qbkedGIU7D1ed+KLUiKdbZx840Y/WuaoO0g=
Subject key identifier: 11:95:62:4C:F3:8E:0C:49:A8:00:EF:91:09:C7:16:43:51:C7:FC:65
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0279F8DA
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/EZViTPOODEmoAO-RCccWQ1HH_GU.roa
Signing time: Sat 01 Jan 2022 00:52:50 +0000
ROA not before: Sat 01 Jan 2022 00:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 194.104.85.0/24 maxlen: 24
194.104.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41547994 (0x279f8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 00:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1195624cf38e0c49a800ef9109c7164351c7fc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:19:c3:cc:85:6d:ee:bf:f2:9f:91:05:dd:
9b:ff:f0:89:9e:be:90:23:72:db:8a:6f:9f:74:73:
dc:e7:53:e4:11:3f:d1:fc:6a:64:f3:5c:eb:a9:65:
01:d2:33:8d:44:ba:c7:cc:8e:36:a9:92:d2:c2:dc:
11:25:56:4b:7a:39:ad:ee:dc:bf:f2:54:66:6f:96:
02:93:36:fb:84:c6:0e:96:48:e3:d8:80:b2:71:a8:
86:d9:09:51:1c:95:9f:d1:d7:16:81:05:4b:3f:57:
0d:19:b8:dc:1a:71:f1:1d:21:b5:0f:db:39:fa:c5:
88:bb:c5:c1:d1:1b:3d:4f:04:5a:c3:18:3c:86:1b:
2c:8e:76:c9:54:a4:de:b6:46:ae:98:75:ab:5b:e1:
a0:cd:1b:01:85:e9:ff:82:d0:97:50:6f:1b:72:b6:
c2:d9:04:5d:10:8b:70:75:95:97:26:22:fc:f0:de:
e1:f8:be:9d:60:03:b0:4b:6e:97:d2:8e:2b:cc:a7:
9c:24:15:b5:03:22:18:f3:e5:32:6f:49:82:9f:48:
0d:b7:74:7c:65:50:53:11:7f:7e:b8:9e:af:80:14:
99:fe:e3:41:fd:bb:8b:1f:85:d2:40:d8:c8:5e:2a:
22:88:48:21:a7:6e:a3:36:9b:91:e5:62:44:93:02:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:95:62:4C:F3:8E:0C:49:A8:00:EF:91:09:C7:16:43:51:C7:FC:65
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/EZViTPOODEmoAO-RCccWQ1HH_GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.1.0/24
194.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:2d:ed:9f:89:c2:8a:40:2b:e9:75:d8:f7:5d:cb:9a:c6:d4:
92:77:4d:43:4a:0a:13:c3:77:03:3b:2b:4d:eb:0e:06:98:49:
1b:3e:a6:ed:9b:7d:4a:dc:ad:5b:2b:86:e1:b3:2e:ea:c3:97:
3c:35:6d:2a:fa:d1:27:6a:85:06:aa:69:c1:6a:e2:2b:5a:24:
48:2d:a7:1f:0e:e8:04:c1:2f:fd:c4:0f:3e:d4:36:eb:f3:5c:
08:b0:c3:38:f5:cc:5c:7d:77:a5:b6:19:19:07:58:00:63:fa:
39:7e:81:94:f4:f1:6f:34:e5:91:86:3e:69:75:03:9c:aa:31:
57:e5:02:16:2b:14:e4:ab:b1:c4:b7:bd:2c:06:c1:d0:f2:d1:
85:40:67:72:d8:c1:91:4f:63:d1:bb:5e:a2:e9:62:b1:50:f6:
3d:42:ab:09:95:76:17:d7:a5:5b:27:dc:28:aa:6f:ec:d4:05:
84:cb:bf:8b:00:08:9b:e5:33:66:65:a4:7f:5d:30:cf:a6:49:
40:36:cd:9f:e3:75:55:30:3e:5c:7d:4c:47:07:1f:9a:5a:5c:
9c:d7:f8:0a:1d:78:ac:b1:c3:44:85:3b:52:e9:9a:01:98:46:
5d:4a:12:80:a6:18:f9:f7:e1:e1:6f:b1:7b:a8:6d:4f:8e:53:
d6:0a:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-ams.rpki-client.org