Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/EgzCBvObAYrkrd77sp9jkJkp89w.roa
File: EgzCBvObAYrkrd77sp9jkJkp89w.roa (raw, json)
Hash identifier: QORT/x866Xarviyoj/09uwOrZzZlGtX5G+zEnj30P+w=
Subject key identifier: 12:0C:C2:06:F3:9B:01:8A:E4:AD:DE:FB:B2:9F:63:90:99:29:F3:DC
Certificate issuer: /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial: 0469CC6E
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/EgzCBvObAYrkrd77sp9jkJkp89w.roa
Signing time: Sat 01 Jan 2022 07:55:58 +0000
ROA not before: Sat 01 Jan 2022 07:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6696
IP address blocks: 194.1.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74042478 (0x469cc6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Validity
Not Before: Jan 1 07:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=120cc206f39b018ae4addefbb29f63909929f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:d9:18:03:37:f7:70:cf:46:fc:97:a9:16:
03:c1:e4:91:71:33:78:06:38:79:e7:63:84:ea:07:
03:2f:fa:74:b1:2f:80:d2:4c:04:26:e5:0a:66:c8:
0b:72:b6:a9:0b:28:d3:70:3d:6e:39:bd:77:b1:f7:
77:41:31:05:ad:f8:19:45:c7:59:0b:e5:9f:d6:6b:
48:86:59:be:5e:38:61:df:57:00:2a:ca:16:79:9a:
2f:c2:75:4b:74:72:0c:f1:2c:6a:a2:71:20:19:9e:
4d:49:f3:f8:f0:65:30:de:7e:ca:83:7e:28:ea:bd:
2b:33:96:86:1e:3a:0c:a5:34:de:1b:bf:27:3c:bb:
b2:d9:e5:7c:da:8e:9c:02:92:e5:56:94:0a:f9:81:
b7:5f:8e:8b:a1:06:ea:b7:5b:5f:8c:26:ad:bd:5f:
d2:12:f8:47:f2:7c:17:b2:10:50:13:f0:7a:2b:7c:
6c:5a:3c:65:af:c9:a4:ab:4a:3c:86:3f:27:95:7a:
0e:04:71:34:53:fe:fe:d8:59:c4:27:62:37:48:1c:
7e:c8:82:21:5c:ea:6c:89:ed:01:c8:65:65:61:f4:
35:ea:77:ef:ce:70:2a:2f:d0:48:cc:8f:43:df:24:
70:9d:a5:51:c8:51:93:78:23:1d:6f:97:ac:2e:8d:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:C2:06:F3:9B:01:8A:E4:AD:DE:FB:B2:9F:63:90:99:29:F3:DC
X509v3 Authority Key Identifier:
keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/EgzCBvObAYrkrd77sp9jkJkp89w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.205.0/24
Signature Algorithm: sha256WithRSAEncryption
56:20:77:63:ac:b0:28:cb:a9:28:fd:d7:0b:7e:43:f2:f1:9c:
e7:10:89:0f:66:45:7a:e1:29:c9:78:99:21:84:1b:be:97:13:
50:31:f2:30:e7:9a:f8:e1:de:22:45:9e:63:32:b7:ca:38:89:
21:88:2c:13:b1:60:a4:8e:dd:5b:22:e0:2e:8b:b5:91:73:cd:
59:f2:75:c6:d0:a3:bc:05:0b:8e:6e:d5:5c:41:2f:c9:7c:c2:
95:51:bf:ae:19:09:4d:f9:86:75:1c:01:21:5b:b5:86:ad:de:
e6:2f:38:2c:be:2a:d2:73:95:53:02:b1:b9:84:d4:a5:20:2a:
e3:45:53:f0:e1:e3:fd:f6:15:98:9d:06:e5:b8:b6:5d:b8:3f:
f5:6d:64:77:d1:70:d9:c8:64:bc:9b:11:9f:46:b3:d1:6a:cc:
99:7c:ae:a3:bc:3b:93:dc:48:1e:68:52:2a:8a:a2:3b:34:27:
1e:b5:6b:cf:27:d8:ec:20:61:c6:d2:4b:f0:9d:6f:90:a8:ca:
b7:76:2a:4f:50:28:71:55:d9:bd:8b:4f:57:ad:e8:a1:5d:88:
03:28:5d:87:5c:57:70:12:60:28:eb:08:c7:2d:37:29:b1:9a:
6c:91:91:c5:07:9b:e4:f6:be:b3:4e:85:ff:31:08:46:dd:47:
69:5e:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:16 2023 by rpki-client on console-fra.rpki-client.org