Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/EUzpj-5eeR7EniQkCHTIWlaA0LA.roa
File: EUzpj-5eeR7EniQkCHTIWlaA0LA.roa (raw, json)
Hash identifier: KDSCq8M80Ty8CbA5Q5VpdfghNyoi5UmfssrgDPhyYPk=
Subject key identifier: 11:4C:E9:8F:EE:5E:79:1E:C4:9E:24:24:08:74:C8:5A:56:80:D0:B0
Certificate issuer: /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial: 01839D3DF6DB61962860D1C4157F94BFEC91
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/EUzpj-5eeR7EniQkCHTIWlaA0LA.roa
Signing time: Mon 03 Oct 2022 09:47:07 +0000
ROA not before: Mon 03 Oct 2022 09:47:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39104
IP address blocks: 185.234.80.0/22 maxlen: 22
158.255.64.0/21 maxlen: 21
185.8.28.0/22 maxlen: 22
195.60.188.0/23 maxlen: 23
185.189.156.0/22 maxlen: 22
2a0d:700::/29 maxlen: 29
2a03:c580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:3d:f6:db:61:96:28:60:d1:c4:15:7f:94:bf:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Validity
Not Before: Oct 3 09:47:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=114ce98fee5e791ec49e24240874c85a5680d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:bb:da:57:48:a3:8c:ad:d6:31:d8:99:1d:
a3:eb:8c:80:5b:0f:45:80:50:dd:6b:41:d3:54:16:
bd:f1:0e:8a:fe:58:31:f6:40:86:53:de:53:09:d4:
fd:9b:6e:38:6e:05:6c:88:6d:49:ef:f1:30:24:da:
aa:28:9c:89:9c:07:20:c4:59:b8:93:49:24:a7:60:
48:81:dc:08:7c:f4:6c:ce:84:d5:e9:fa:22:e0:4f:
fd:bf:66:63:6f:67:0e:3a:15:8e:8e:0f:7b:37:cc:
b1:68:ca:3a:04:b0:46:b3:6a:7b:78:cf:56:f4:ef:
d1:f1:c2:fa:e4:bc:98:e4:9a:c3:66:fd:c7:95:63:
f5:c3:8b:36:09:5a:36:90:24:9d:3d:e5:02:1e:ab:
21:8b:6c:e3:33:f7:22:6c:0d:9e:bb:92:0e:0c:c3:
a3:08:01:e7:5f:0c:02:84:6f:89:a7:da:e7:60:5a:
e2:d0:86:db:6f:83:58:ca:f0:a9:f8:a1:86:31:ac:
10:46:2e:2a:64:db:20:c8:69:18:73:a5:4d:8a:40:
ad:d5:d8:0b:95:bd:ea:a7:18:4d:02:ce:32:db:45:
a6:7f:b3:fd:d0:e7:a8:bb:2c:83:f9:4e:12:b3:5a:
52:21:4e:d3:67:f7:e2:1d:13:9e:65:67:c0:57:d1:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4C:E9:8F:EE:5E:79:1E:C4:9E:24:24:08:74:C8:5A:56:80:D0:B0
X509v3 Authority Key Identifier:
keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/EUzpj-5eeR7EniQkCHTIWlaA0LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.64.0/21
185.8.28.0/22
185.189.156.0/22
185.234.80.0/22
195.60.188.0/23
IPv6:
2a03:c580::/32
2a0d:700::/29
Signature Algorithm: sha256WithRSAEncryption
9e:d4:7a:d4:d7:09:d3:0c:22:ce:af:0a:1c:3e:60:6f:df:76:
a8:ac:96:48:c8:18:8e:1b:bc:c5:1c:70:63:5e:34:a6:84:23:
5b:ff:7c:29:e4:06:1f:3f:1e:61:e2:70:4b:96:e0:29:cb:88:
6a:7d:7f:5a:c1:e6:09:45:ac:2f:95:bc:0a:e8:fc:39:2f:2e:
3c:c7:4b:fb:63:2e:94:f6:b7:1f:c1:3c:bf:2f:b3:20:ea:d8:
d7:ff:84:22:ba:06:52:f7:fe:ad:9d:51:42:b3:a4:9e:af:ca:
9e:2a:42:ce:98:93:e8:ac:b5:4a:f0:da:40:6d:bc:8d:c2:b3:
83:1c:a7:f9:36:71:34:40:10:e0:68:64:9a:0d:d7:cd:8f:1d:
0c:9c:7e:2b:84:cc:0a:fa:cb:13:4b:f7:d7:58:ce:4e:ff:af:
2f:2d:e1:eb:37:28:46:14:b1:ff:ce:1c:62:54:94:ce:dd:f6:
45:c3:91:e0:89:1f:cd:f0:39:6a:da:c9:e5:1c:4c:8b:8b:29:
07:3f:4a:17:8b:58:4e:c1:85:1b:f1:f3:a7:19:17:e1:1b:4d:
de:46:2b:5e:c7:3a:48:d9:77:59:42:9e:3e:b3:61:18:66:e3:
d8:94:56:dd:60:5f:ec:18:ef:13:04:06:b2:6a:71:80:65:5d:
4e:d8:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:11 2024 by rpki-client on console-ams.rpki-client.org