Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/EjmvEN95TeSJ9gD7PiRw0klDzV8.roa
File: EjmvEN95TeSJ9gD7PiRw0klDzV8.roa (raw, json)
Hash identifier: eO0DTsVpy8qSosz3eNj1XsWDcDoI2Zm53R0hYraJ0tg=
Subject key identifier: 12:39:AF:10:DF:79:4D:E4:89:F6:00:FB:3E:24:70:D2:49:43:CD:5F
Certificate issuer: /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial: 08B91D6D
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/EjmvEN95TeSJ9gD7PiRw0klDzV8.roa
Signing time: Sat 01 Jan 2022 05:00:42 +0000
ROA not before: Sat 01 Jan 2022 05:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210278
IP address blocks: 101.56.0.0/13 maxlen: 13
195.162.92.0/22 maxlen: 22
101.62.194.0/23 maxlen: 23
101.62.196.0/23 maxlen: 23
2a0e:400::/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146349421 (0x8b91d6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Validity
Not Before: Jan 1 05:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1239af10df794de489f600fb3e2470d24943cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:a1:5d:95:82:30:3b:7e:fd:6b:b9:0a:e2:
37:39:c0:03:49:ac:ec:6b:5b:2b:8e:3a:b2:43:cb:
68:20:4d:ca:72:08:58:a4:a6:4b:58:7a:13:16:bf:
12:03:88:fc:2d:17:db:15:97:01:d5:1b:7e:ee:fe:
84:2f:1b:a5:97:a0:e1:90:94:e0:a0:cf:9a:1f:b1:
7a:05:44:3d:a4:72:3c:71:7f:78:4c:86:f5:bc:34:
62:ca:57:87:15:0c:5f:8d:c7:aa:c8:45:2f:4a:63:
4f:94:bc:ed:ea:c5:19:af:2a:52:87:ee:7d:bf:1a:
b7:62:b4:12:88:8a:4f:9c:ab:15:2e:72:57:cb:b0:
96:d0:4a:bc:c5:4b:95:15:0c:6d:70:c5:4f:67:76:
d6:7d:e1:09:87:7a:1f:58:cd:99:56:5f:af:51:cf:
9b:82:cb:b6:ae:29:ac:ff:1e:ff:9e:63:bd:c9:bf:
f9:c4:f0:6c:fb:db:12:6f:aa:ab:cb:7f:ba:c7:7d:
bd:ad:3c:ea:5d:ed:bd:cb:a9:04:c9:ef:c1:81:8c:
76:b9:e0:ac:5d:b7:5c:73:1e:c0:6d:23:f6:40:3f:
18:c8:4c:ba:05:4b:16:e0:92:90:cc:97:fc:ac:65:
4a:81:2c:c6:0a:2c:8c:1f:02:58:b9:19:fe:88:99:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:AF:10:DF:79:4D:E4:89:F6:00:FB:3E:24:70:D2:49:43:CD:5F
X509v3 Authority Key Identifier:
keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/EjmvEN95TeSJ9gD7PiRw0klDzV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.56.0.0/13
195.162.92.0/22
IPv6:
2a0e:400::/25
Signature Algorithm: sha256WithRSAEncryption
90:c1:87:4a:c9:2e:91:02:54:30:b6:92:b1:ec:10:2c:ed:b4:
da:1c:94:3f:b5:0a:3d:38:f9:20:4d:1b:09:d3:73:1c:0b:0d:
44:c5:21:31:78:52:fb:56:af:6b:4b:0e:09:fb:18:e0:74:60:
77:7b:8f:b7:fc:99:39:bc:02:38:4a:a1:59:a3:32:e1:99:3d:
6c:53:7d:03:e8:7e:58:45:4b:7d:00:92:7b:04:97:a8:41:b1:
fa:b0:e7:58:a8:22:88:76:3a:fc:62:03:ff:e0:2c:37:7b:c8:
d4:f2:4c:28:76:eb:78:90:bb:d9:f7:24:6a:a6:83:ce:18:a7:
70:5d:44:93:cb:8f:2b:6e:3c:ac:13:af:79:b1:50:ff:11:91:
68:fe:0d:c7:6f:ca:09:62:74:1f:4b:0b:49:57:38:bd:bd:c3:
01:01:4b:a3:7c:96:d4:b3:3e:7a:e7:b8:a4:3c:97:2f:39:9b:
0e:bb:cc:63:a5:e4:0a:db:b0:32:26:f3:3e:64:0d:86:0c:df:
93:77:d0:ee:c4:73:8f:e5:ad:68:d4:9c:30:2b:ed:16:de:72:
76:47:74:b6:65:54:bd:9c:ec:bb:27:60:58:cf:c6:67:7e:d2:
06:04:74:de:52:8e:f8:16:8b:ca:d3:3d:e7:07:7a:f6:1d:78:
12:50:20:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:53 2023 by rpki-client on console-fra.rpki-client.org