Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/esEDFSyxXgzuFYz_vI9OmIqTK4g.roa
File: esEDFSyxXgzuFYz_vI9OmIqTK4g.roa (raw, json)
Hash identifier: yIaqAMC5tdQKGepvlVQjrYp9JrVUvMe9kJyWesfAnIw=
Subject key identifier: 7A:C1:03:15:2C:B1:5E:0C:EE:15:8C:FF:BC:8F:4E:98:8A:93:2B:88
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: D76F75
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/esEDFSyxXgzuFYz_vI9OmIqTK4g.roa
Signing time: Mon 20 Jun 2022 11:17:53 +0000
ROA not before: Mon 20 Jun 2022 11:17:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62212
IP address blocks: 87.236.146.0/24 maxlen: 24
91.199.137.0/24 maxlen: 24
188.127.247.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
2a11:3b80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14118773 (0xd76f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jun 20 11:17:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ac103152cb15e0cee158cffbc8f4e988a932b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:3e:d8:b1:65:f7:80:ce:bc:6f:e8:88:f3:
77:e9:18:3e:2f:79:af:e1:d3:11:f2:19:f5:9b:9f:
8a:ee:4c:e1:70:6b:85:5b:f6:00:89:4f:d4:0b:69:
9d:f9:e8:42:f2:3a:85:b1:66:e4:8e:cc:d4:45:e9:
d6:77:0d:68:40:1c:f8:da:9f:df:1e:08:c3:7d:30:
d8:4d:4f:47:bf:2d:6b:d6:7d:ba:ee:77:31:b6:ba:
bd:7c:94:49:05:ff:3e:64:c1:6c:3b:32:52:0a:dc:
09:77:1d:7a:3e:30:50:98:98:13:3b:b0:50:ed:b2:
ab:11:37:b0:7f:7d:3e:9c:4a:14:19:b6:18:62:08:
83:c2:ab:38:05:da:d2:37:00:2e:33:30:d7:98:3b:
90:da:14:27:33:9e:eb:66:cd:c0:4d:9d:19:6a:f5:
ae:dc:e1:be:b2:1f:74:73:da:eb:69:87:40:cd:f9:
d9:13:68:b4:40:de:be:1a:6c:9d:97:71:65:d0:42:
ea:b9:fc:ad:e3:dc:81:9d:f2:02:ee:49:14:ef:77:
f2:3d:e1:19:5b:83:40:5d:a7:ee:9c:41:e5:2d:3d:
03:3a:db:9a:e4:e7:7b:b9:ce:12:f8:f2:03:41:1b:
95:43:8d:3d:93:d4:ea:00:8e:b3:ba:3d:e7:82:d2:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C1:03:15:2C:B1:5E:0C:EE:15:8C:FF:BC:8F:4E:98:8A:93:2B:88
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/esEDFSyxXgzuFYz_vI9OmIqTK4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.146.0/24
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
188.127.247.0/24
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:8d:40:8b:a3:4e:d0:f4:fb:19:a0:7a:d9:4a:f8:91:0a:55:
60:3f:95:7a:95:8c:29:84:fb:ee:08:29:85:e1:9b:f7:03:b4:
32:f7:f7:c4:8a:fd:98:8f:eb:0d:63:e0:84:e6:05:76:08:53:
11:15:9e:bb:09:3b:0c:3b:cc:3f:60:99:31:bd:5a:ff:ba:03:
b3:86:5c:96:35:1b:bb:65:99:b7:4e:47:4c:5f:d3:86:5e:83:
ac:a2:1d:f1:ed:49:72:f9:1c:b8:ac:d8:52:a2:3f:4b:22:ca:
8e:b9:52:9e:da:35:08:33:39:4f:94:31:6c:c0:33:09:85:15:
d9:2a:6b:18:5c:39:c9:37:a1:83:b6:52:bc:7a:98:c2:b7:15:
fe:7d:f6:16:00:16:15:1f:58:a4:47:01:27:ed:e2:6f:cb:c0:
27:34:7a:16:e4:06:df:33:98:11:20:96:11:54:36:7a:58:39:
d8:97:b1:1c:83:90:f2:13:a8:0c:b7:b9:98:29:1f:81:91:54:
42:49:c3:51:48:42:da:a1:59:e0:73:46:72:b5:b6:2a:b6:5b:
06:41:48:81:e7:96:dd:7c:8c:50:d4:52:89:3b:a4:ee:25:ca:
be:23:53:e7:62:63:57:4f:af:78:48:06:91:87:52:c8:b3:4a:
56:66:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:39 2023 by rpki-client on console-ams.rpki-client.org