Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EhbqLgY-zKL5G-cGK3hZSXulQWY.roa
File: EhbqLgY-zKL5G-cGK3hZSXulQWY.roa (raw, json)
Hash identifier: lzBzpNcK0o8Yn+qZzQPgUfl+9fxhpQv75I4Ndsx9Lqs=
Subject key identifier: 12:16:EA:2E:06:3E:CC:A2:F9:1B:E7:06:2B:78:59:49:7B:A5:41:66
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 079EA36D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EhbqLgY-zKL5G-cGK3hZSXulQWY.roa
Signing time: Sat 01 Jan 2022 08:01:42 +0000
ROA not before: Sat 01 Jan 2022 08:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.255.54.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127837037 (0x79ea36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1216ea2e063ecca2f91be7062b7859497ba54166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:9c:15:df:a4:b8:ca:d1:7a:1e:51:5b:d0:
6d:f7:35:a5:24:cc:15:e2:22:ea:72:50:41:4d:e0:
01:6f:08:1c:ab:ed:33:c9:5c:8c:f3:53:6c:04:72:
8f:35:a7:1b:0e:01:56:22:72:24:31:35:7f:21:c7:
41:02:fa:9a:1b:ab:6a:50:bd:31:b9:f9:c8:fe:42:
84:82:3a:50:f5:d8:10:43:c5:2a:44:e8:40:c8:82:
03:11:0a:2a:83:19:f5:ed:39:a0:b4:63:9f:e3:3c:
49:b8:db:b8:1d:7d:8d:9e:1e:1d:4d:1d:ab:2b:62:
e4:5d:6c:88:7c:d0:d4:3f:30:4b:93:cb:2d:6c:09:
5d:12:15:01:f4:96:56:c5:29:2d:83:a9:4f:af:93:
81:e0:d4:dd:f7:aa:73:05:d7:f9:4f:f6:74:94:a6:
75:48:c0:57:e1:18:81:a5:d3:8b:49:f2:45:d9:5a:
7c:31:82:fb:fe:60:eb:2e:cc:ad:b3:0e:32:82:b9:
46:b7:19:c0:83:8c:c3:d1:0f:07:10:48:12:58:21:
3d:0a:c0:38:72:33:4a:53:81:c2:95:fd:d6:b1:5a:
00:58:3a:25:4f:28:28:d6:54:f8:91:b8:3b:3e:cf:
d0:e2:e7:74:0e:95:13:27:14:fa:d7:29:5f:40:16:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:EA:2E:06:3E:CC:A2:F9:1B:E7:06:2B:78:59:49:7B:A5:41:66
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EhbqLgY-zKL5G-cGK3hZSXulQWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.34.0/24
185.255.54.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
34:27:25:ef:26:00:08:2c:8c:b8:a9:e7:d9:14:42:72:da:b9:
32:b9:7f:79:aa:7f:70:04:b3:f4:f7:0e:ce:93:64:d5:35:14:
e4:1c:87:4a:3f:3b:b0:fb:f2:77:4e:77:23:36:5f:0b:04:97:
fb:19:85:a3:8a:c0:ed:f9:98:bd:be:f9:64:a7:6b:a0:85:21:
a6:b2:70:45:20:b9:e0:69:1a:bb:23:8f:02:f9:d7:7b:f9:e9:
c6:9e:70:a6:96:db:6e:0e:5a:98:85:83:6f:6c:8d:76:24:10:
84:14:cb:a6:73:3b:fb:eb:2f:5a:b6:9e:8b:d3:6f:c3:67:9a:
85:74:9d:1e:1c:bc:f8:78:6b:4f:f8:e2:40:af:46:18:ac:bc:
2a:99:72:63:de:06:c0:1a:4c:82:5b:29:d9:bc:e5:97:e9:7b:
e6:f1:0a:15:f5:8d:4e:7c:51:e6:93:0a:95:f3:45:4d:ea:3c:
1f:fa:98:71:c3:d2:c4:8b:c4:bb:05:e3:5c:63:81:32:87:33:
2b:dc:60:71:76:40:ce:c4:3d:14:2d:5f:e2:5c:51:5c:c6:5d:
0e:5d:a8:de:0b:73:5e:15:e1:74:05:73:6a:d7:6c:c3:fe:7f:
01:de:43:66:7b:a8:9e:ce:58:e3:77:0d:8d:0b:a2:8c:a4:c2:
74:24:d1:41
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEB56jbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTIxNmVhMmUwNjNl
Y2NhMmY5MWJlNzA2MmI3ODU5NDk3YmE1NDE2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHanBXfpLjK0XoeUVvQbfc1pSTMFeIi6nJQQU3gAW8IHKvt
M8lcjPNTbARyjzWnGw4BViJyJDE1fyHHQQL6mhuralC9Mbn5yP5ChII6UPXYEEPF
KkToQMiCAxEKKoMZ9e05oLRjn+M8SbjbuB19jZ4eHU0dqyti5F1siHzQ1D8wS5PL
LWwJXRIVAfSWVsUpLYOpT6+TgeDU3feqcwXX+U/2dJSmdUjAV+EYgaXTi0nyRdla
fDGC+/5g6y7MrbMOMoK5RrcZwIOMw9EPBxBIElghPQrAOHIzSlOBwpX91rFaAFg6
JU8oKNZU+JG4Oz7P0OLndA6VEycU+tcpX0AWTRsCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQSFuouBj7Movkb5wYreFlJe6VBZjAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
L0VoYnFMZ1ktektMNUctY0dLM2haU1h1bFFXWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcv
OTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8xL3BYYnJMTVJpNXVT
X0RlYWJuMk5JZGQ2N3F1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAD6FIgMEALn/NjANBAIAAjAHAwUA
KgtAgDANBgkqhkiG9w0BAQsFAAOCAQEANCcl7yYACCyMuKnn2RRCctq5Mrl/eap/
cASz9PcOzpNk1TUU5ByHSj87sPvyd053IzZfCwSX+xmFo4rA7fmYvb75ZKdroIUh
prJwRSC54GkauyOPAvnXe/npxp5wppbbbg5amIWDb2yNdiQQhBTLpnM7++svWrae
i9Nvw2eahXSdHhy8+HhrT/jiQK9GGKy8KplyY94GwBpMglsp2bzll+l75vEKFfWN
TnxR5pMKlfNFTeo8H/qYccPSxIvEuwXjXGOBMoczK9xgcXZAzsQ9FC1f4lxRXMZd
Dl2o3gtzXhXhdAVzatdsw/5/Ad5DZnuons5Y43cNjQuijKTCdCTRQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org