Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EL8JpDEHCmo34TRrDF6DSby8NFY.roa
File: EL8JpDEHCmo34TRrDF6DSby8NFY.roa (raw, json)
Hash identifier: u3Vra0VGDX3uTQGFoZi5GlpPlgeLK/S8l/2Oa3UJzdo=
Subject key identifier: 10:BF:09:A4:31:07:0A:6A:37:E1:34:6B:0C:5E:83:49:BC:BC:34:56
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16ECCECD
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EL8JpDEHCmo34TRrDF6DSby8NFY.roa
Signing time: Sat 01 Jan 2022 12:01:44 +0000
ROA not before: Sat 01 Jan 2022 12:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210160
IP address blocks: 37.18.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384618189 (0x16eccecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10bf09a431070a6a37e1346b0c5e8349bcbc3456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:9d:45:ea:e7:ea:f0:82:22:a6:8b:14:2e:
30:19:68:a4:9e:a7:3e:0e:56:34:40:51:75:a6:dd:
a3:a3:41:9f:78:19:ee:9c:31:77:9a:f0:b8:26:4f:
79:cd:3f:b7:a4:52:7e:26:18:67:db:78:b4:b3:9e:
d0:83:6a:f0:76:4f:10:cf:50:43:6c:ed:f7:dc:50:
5d:fc:2e:f7:83:44:45:e9:49:4a:2c:3e:79:10:3a:
d2:b5:7b:84:31:ba:e2:a4:b7:1e:2e:9b:61:0a:c3:
b2:55:6d:f6:99:7d:99:7f:87:af:5e:3b:58:79:bf:
9e:47:dd:4f:48:7f:61:8e:b0:07:6e:3d:bb:ca:c4:
78:99:7d:c6:49:a3:5e:48:ee:5a:b2:9e:26:ea:0e:
7d:ba:aa:17:3f:f2:e6:7f:ec:d0:a0:a9:ba:25:7b:
e3:7f:3c:9b:28:fa:2b:38:2a:78:46:0b:2f:74:3a:
e8:82:3d:30:de:9c:22:82:1a:2c:20:58:5c:a4:a4:
a8:c9:52:f8:a0:0f:85:4a:d5:21:dc:49:ae:b6:72:
37:47:5b:2b:ea:b7:f8:20:a7:ca:85:45:db:4f:24:
cb:b0:ac:0d:71:f4:85:8e:e3:15:af:be:83:ce:9c:
19:02:60:60:0b:33:1e:26:3c:b9:fb:e8:c8:85:c1:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:09:A4:31:07:0A:6A:37:E1:34:6B:0C:5E:83:49:BC:BC:34:56
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EL8JpDEHCmo34TRrDF6DSby8NFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c8:92:99:aa:2f:f4:02:93:70:cb:7d:a4:e7:47:1e:10:18:
cd:b4:46:0f:fa:1a:5d:b8:24:72:5e:36:07:1c:67:dc:b6:22:
21:76:d4:1f:97:6e:9c:f9:87:18:8a:47:c5:8c:6e:e4:82:a0:
ea:e5:fc:2c:0f:da:8f:80:1a:cc:d5:7d:4e:14:8b:18:d9:91:
9d:bc:34:e5:ab:36:62:d8:9d:69:6c:78:6a:87:2e:3b:b3:f7:
f3:e5:68:2e:83:26:64:c6:a0:ac:e4:c4:99:ac:cc:97:ea:09:
5e:20:0d:f7:01:1c:da:34:ab:b1:64:12:b5:c1:3e:32:8f:a7:
2c:ab:12:a8:aa:c0:72:2c:0a:bb:57:23:ad:52:32:26:38:d5:
b8:22:e2:9a:a0:79:41:81:b0:e2:4c:07:2f:be:be:e0:ed:98:
65:2e:c6:bb:04:8a:8a:68:3d:bd:64:a6:ff:22:71:db:d3:89:
57:0f:f1:42:aa:9b:73:9d:7e:c9:a3:1b:fe:a2:eb:32:d2:2f:
31:13:3b:f7:0a:6c:aa:27:46:b8:39:55:61:b7:96:64:d3:4e:
0e:eb:35:e0:8f:0a:27:fb:ad:c7:91:53:f9:28:c8:e4:c2:34:
9c:b6:3d:a4:9b:ce:1b:e4:1f:70:af:be:a8:a1:ef:15:fa:61:
6c:ed:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org