Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/65xfRoRKpcZaDJvVtEDnRppNxAE.roa
File: 65xfRoRKpcZaDJvVtEDnRppNxAE.roa (raw, json)
Hash identifier: HNPnf6aj5iYjpNo9C4z4UdlqzDoHeJ0swJSIOh3BYVA=
Subject key identifier: EB:9C:5F:46:84:4A:A5:C6:5A:0C:9B:D5:B4:40:E7:46:9A:4D:C4:01
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 258C839B
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/65xfRoRKpcZaDJvVtEDnRppNxAE.roa
Signing time: Sat 01 Jan 2022 05:58:08 +0000
ROA not before: Sat 01 Jan 2022 05:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199671
IP address blocks: 78.31.209.0/24 maxlen: 24
31.135.168.0/21 maxlen: 21
195.225.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629965723 (0x258c839b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 1 05:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb9c5f46844aa5c65a0c9bd5b440e7469a4dc401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:81:d4:4e:9f:93:12:6f:16:bf:39:db:aa:
4d:ad:1d:88:74:f3:a6:a8:16:cd:78:70:8b:b4:70:
5b:a8:84:3a:78:af:1e:d6:cc:d2:b9:93:33:58:a8:
05:40:82:d8:b8:cf:f6:fd:d1:75:7b:d2:6b:c3:f2:
57:78:c2:a6:46:01:85:d9:d0:dc:98:4e:0e:e7:0a:
43:b5:f9:e7:9e:33:4d:80:e5:10:f5:9a:27:b1:d0:
63:09:08:48:0d:68:24:72:29:13:7e:a4:4f:b2:d0:
b1:41:36:ac:6e:78:0c:81:2e:8a:61:67:03:04:3e:
5e:af:66:38:f3:32:85:19:74:4c:f7:78:a0:69:1b:
59:ee:9d:74:15:d6:83:1b:8a:24:97:45:52:f1:59:
7f:9e:34:55:14:49:3b:36:d0:ff:b2:05:a7:a7:5f:
89:e3:81:ed:7c:1b:39:92:bc:35:31:d8:8d:9b:3a:
b3:61:af:05:33:7b:b7:ae:78:0d:2d:60:d4:6a:b0:
a2:d5:be:64:ff:96:e2:e0:50:ba:6c:e7:b8:ac:ba:
e9:80:5a:f7:c1:85:66:69:ef:08:c7:11:ce:b6:57:
cb:87:ff:3f:4e:ea:ea:97:3b:c1:32:a5:0a:4e:eb:
62:ac:f6:8d:07:53:59:a7:dd:08:8b:21:1b:c0:68:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:5F:46:84:4A:A5:C6:5A:0C:9B:D5:B4:40:E7:46:9A:4D:C4:01
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/65xfRoRKpcZaDJvVtEDnRppNxAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.168.0/21
78.31.209.0/24
195.225.92.0/22
Signature Algorithm: sha256WithRSAEncryption
56:62:e1:d9:f6:3e:16:c9:98:1f:44:d8:a0:20:f8:c9:5e:b9:
3b:3f:6e:71:6b:43:4f:b2:f6:92:f1:b7:47:b3:ea:f2:70:c9:
05:f2:b5:cc:be:18:09:43:a2:bc:41:6f:18:2f:5b:49:61:1b:
f6:b3:1f:21:a2:77:c5:48:8a:06:73:1c:15:a7:a6:58:77:f9:
31:5f:07:4d:c7:d1:d4:51:97:c1:38:4d:3f:e7:a4:b7:cc:79:
c7:b4:f8:e7:f4:a6:6e:8a:e0:70:da:d2:19:9b:4e:f2:38:12:
09:bc:84:03:ad:62:6d:06:22:c1:d2:a7:a9:f3:12:84:40:26:
9a:4d:a8:5e:bf:ce:86:4c:0e:ce:0e:4b:7c:11:7a:39:19:80:
fc:35:94:04:e3:08:73:17:2c:73:c0:49:51:6e:6c:5c:22:d0:
77:83:e2:d4:f9:ec:73:5a:00:09:c9:8e:6a:f8:51:49:24:65:
2c:f9:0a:c1:9b:28:83:22:cc:04:e8:f2:6e:b3:d6:65:9b:a2:
ea:a4:2d:f4:77:e7:8a:1c:37:7a:30:6d:ed:d9:86:9a:a2:93:
65:39:ff:2a:fd:6f:0d:e5:c8:09:7d:0a:a8:8e:b3:ab:29:0c:
c5:23:f5:9e:be:a4:51:23:c9:ae:af:ac:fb:21:28:19:27:ea:
5a:4f:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:53 2023 by rpki-client on console-fra.rpki-client.org