Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/EmgL-Rvqvn9SdvkrVOaLCozKPf8.roa
File: EmgL-Rvqvn9SdvkrVOaLCozKPf8.roa (raw, json)
Hash identifier: bPGBydclPnY9gNubBh+mXDb/7DBXIPX4NtFHx+zNjr0=
Subject key identifier: 12:68:0B:F9:1B:EA:BE:7F:52:76:F9:2B:54:E6:8B:0A:8C:CA:3D:FF
Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial: 0609B0C1
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/EmgL-Rvqvn9SdvkrVOaLCozKPf8.roa
Signing time: Sat 01 Jan 2022 07:02:10 +0000
ROA not before: Sat 01 Jan 2022 07:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12762
IP address blocks: 185.210.12.0/22 maxlen: 22
212.51.224.0/19 maxlen: 19
2a00:40c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101298369 (0x609b0c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
Validity
Not Before: Jan 1 07:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12680bf91beabe7f5276f92b54e68b0a8cca3dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:99:7b:96:3d:31:59:8f:bf:ed:7b:d5:e4:
3d:0d:96:25:80:0a:a2:3d:aa:a6:18:ef:88:ff:4b:
b8:e7:7a:5c:c5:d9:40:b8:0b:9d:0f:45:9d:75:b1:
76:d5:ec:12:04:c0:50:f7:3f:99:e1:7e:32:ea:d9:
01:36:6b:19:6e:a6:ad:ac:52:42:4f:8e:cf:5f:dc:
d8:1d:ae:60:66:c6:44:43:77:3a:66:a8:6b:02:31:
ea:89:77:d3:cd:7a:90:cf:b2:ab:0c:1b:a6:ff:fa:
ad:62:b9:e4:72:6a:00:3f:39:c3:65:60:10:d4:be:
1c:b0:d9:d5:72:ac:1a:40:98:af:1c:70:09:a2:3d:
fb:97:9b:9a:05:b5:10:b3:56:dc:e1:60:33:ce:96:
78:ba:10:a6:4a:33:78:7d:c4:61:3d:a8:31:2a:8a:
1e:c2:18:1a:68:0e:9c:c0:73:d8:d0:bd:8a:69:59:
d0:d0:24:66:63:86:eb:75:3b:9b:59:83:bf:94:a1:
25:79:74:0a:21:05:c1:be:d7:0e:95:75:d5:a7:1c:
55:ae:20:45:7b:0b:cc:ee:55:f8:16:b2:85:f8:13:
1a:0e:84:08:71:23:81:1a:ff:23:2f:e6:c0:24:b4:
89:85:7a:36:bd:f0:c5:d0:8a:07:a6:3e:21:d4:35:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:0B:F9:1B:EA:BE:7F:52:76:F9:2B:54:E6:8B:0A:8C:CA:3D:FF
X509v3 Authority Key Identifier:
keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/EmgL-Rvqvn9SdvkrVOaLCozKPf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.12.0/22
212.51.224.0/19
IPv6:
2a00:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:75:bb:1b:ab:8d:e4:5e:34:6c:cc:46:0c:15:f1:0a:a3:56:
bb:f3:ba:5f:ef:3a:34:fe:d6:df:2e:54:1b:c7:22:43:a0:7b:
70:8a:40:99:23:0f:3b:64:d7:64:b7:c4:fb:1f:67:99:8c:35:
f1:54:56:44:2a:d7:90:61:ba:fd:a5:f5:7d:33:77:d8:3b:d6:
d9:d5:1e:05:c6:58:1d:24:20:f0:a0:d4:29:75:0d:1b:56:a5:
46:4b:28:81:dc:1e:f8:67:cc:9a:49:09:2f:9f:a4:d6:06:28:
36:be:9d:15:3d:7b:b0:8a:dc:25:d7:c7:89:9e:61:54:f9:57:
9a:62:32:df:58:e0:f2:4f:79:c1:a1:f7:13:20:e3:a3:84:eb:
ba:fe:7b:e3:63:92:ad:59:1d:9e:2f:d3:3d:cb:b0:70:dc:14:
1e:cc:58:34:de:b3:29:19:42:24:31:2d:5b:28:8b:1c:e7:cc:
8c:c7:b4:dd:f8:29:0b:ce:1c:d9:36:55:ee:63:4e:89:a1:d7:
f2:94:7a:b2:d4:a7:41:7a:98:8a:52:0a:4d:bc:b9:ce:9f:f7:
e0:67:72:7f:33:ef:4a:92:c0:8c:3c:e3:77:53:8b:ce:35:50:
8a:41:f2:5c:98:d5:dd:32:71:c9:0e:03:7e:70:ca:d3:93:a6:
2c:7e:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:00 2023 by rpki-client on console-ams.rpki-client.org