Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EjiGvuQXGS68lqHB6akMIyz_waE.roa
File: EjiGvuQXGS68lqHB6akMIyz_waE.roa (raw, json)
Hash identifier: fMFxFEI0rREFGhbmB5rVsTE8qq4Yt2+M3jqYCKk4Ozk=
Subject key identifier: 12:38:86:BE:E4:17:19:2E:BC:96:A1:C1:E9:A9:0C:23:2C:FF:C1:A1
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 085D9FD6
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EjiGvuQXGS68lqHB6akMIyz_waE.roa
Signing time: Wed 29 Jun 2022 08:34:02 +0000
ROA not before: Wed 29 Jun 2022 08:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 185.204.16.0/22 maxlen: 24
193.16.15.0/24 maxlen: 24
193.16.12.0/24 maxlen: 24
193.16.13.0/24 maxlen: 24
193.16.14.0/24 maxlen: 24
194.39.68.0/22 maxlen: 24
80.254.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140353494 (0x85d9fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jun 29 08:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=123886bee417192ebc96a1c1e9a90c232cffc1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:20:98:61:a7:81:a4:2e:27:8b:64:d0:88:
eb:ff:25:e8:a2:35:46:56:1b:db:46:de:bf:ab:e3:
13:fa:fd:2d:69:73:52:29:0e:57:b6:4c:62:0f:59:
b0:2e:71:69:dc:8c:60:18:ec:ce:f6:b3:c1:62:14:
b4:db:68:be:97:8b:ca:23:d4:b6:15:85:fa:74:44:
e7:fe:93:12:b3:b1:e2:13:46:20:83:b4:3a:58:4e:
fd:57:6b:cc:6b:98:9b:f5:8a:d8:98:5d:5f:3b:46:
8a:4f:2d:32:62:1e:4e:63:3e:af:7d:4c:59:2a:a2:
5e:b0:c4:66:31:4c:14:9a:a8:b0:d1:66:98:e2:71:
35:2f:8a:ec:a0:44:e3:a6:6c:35:99:01:2e:1d:9b:
31:e9:ef:31:80:b8:15:08:39:b3:7f:67:24:75:8c:
0d:4b:73:a7:c9:37:ff:47:ea:3a:c4:cb:ea:64:2c:
6d:84:c9:f8:05:03:32:47:f9:c4:d6:fd:f7:3b:47:
04:d4:73:bc:71:48:39:56:97:79:59:1b:ed:03:55:
25:08:cf:75:93:fa:8f:fb:68:ad:d1:2b:b1:d2:75:
54:d5:8d:88:75:59:17:33:3a:00:04:77:07:d2:96:
09:52:41:98:83:8d:de:22:01:fb:27:fb:a0:87:bf:
5d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:38:86:BE:E4:17:19:2E:BC:96:A1:C1:E9:A9:0C:23:2C:FF:C1:A1
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EjiGvuQXGS68lqHB6akMIyz_waE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.232.0/21
185.204.16.0/22
193.16.12.0/22
194.39.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:92:f0:7d:19:12:79:66:36:71:24:9a:34:d0:2d:9f:4d:68:
bd:77:b1:66:50:37:15:85:75:25:30:70:37:7d:3d:cc:f7:3e:
ad:c2:71:49:36:8d:9e:37:9e:9e:84:4a:a8:39:5d:0f:ed:c8:
0d:2b:35:e7:e2:77:16:16:34:e2:72:1d:f3:e6:d8:e5:24:67:
b8:0d:d6:df:15:1d:3b:e3:93:bf:fb:da:56:66:7b:2d:16:f0:
34:b9:22:36:8b:3a:be:1d:e5:5b:95:3e:e7:99:30:81:f6:d8:
63:78:7a:fe:b1:c2:58:80:11:4e:8e:2f:bd:d0:7c:ef:db:e1:
fb:08:18:2d:a7:60:ae:6d:48:47:28:ed:da:63:e0:f4:85:5f:
da:60:ba:2a:8c:97:b6:31:b9:a5:bb:49:a3:9a:14:d1:d1:94:
e7:fc:12:09:8f:ae:da:4d:69:74:b6:42:92:b2:0e:5f:7d:98:
54:97:60:09:46:51:bf:5b:89:a0:f8:e5:ed:da:b2:38:a5:c3:
f6:7f:13:c5:aa:41:42:c9:5c:c0:61:fb:e9:24:17:08:71:a7:
eb:d1:d8:f2:19:74:7e:c3:de:40:34:bd:8c:00:12:f0:2f:97:
59:50:37:5c:bf:fe:2d:f2:d9:5c:16:ea:92:5d:c0:94:7e:04:
84:92:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-ams.rpki-client.org