Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/EYqnsTO7eFvPte-7GUXQ6YFJ-6Y.roa
File: EYqnsTO7eFvPte-7GUXQ6YFJ-6Y.roa (raw, json)
Hash identifier: kBD5ur2n2MBstl/hI417s83zDsPB5he6NFhaIW5kI6I=
Subject key identifier: 11:8A:A7:B1:33:BB:78:5B:CF:B5:EF:BB:19:45:D0:E9:81:49:FB:A6
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 0181F006FA9A336AD951D39EC1CE453F59C8
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/EYqnsTO7eFvPte-7GUXQ6YFJ-6Y.roa
Signing time: Tue 12 Jul 2022 01:29:58 +0000
ROA not before: Tue 12 Jul 2022 01:29:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 45.153.236.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f0:06:fa:9a:33:6a:d9:51:d3:9e:c1:ce:45:3f:59:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jul 12 01:29:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118aa7b133bb785bcfb5efbb1945d0e98149fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:50:13:4d:c4:71:54:e8:00:bd:c4:0f:02:
04:6d:ac:07:e6:b5:27:4f:05:66:3d:0b:b9:24:07:
2e:2f:a6:24:f1:ca:b8:7b:be:b7:78:a7:70:e5:49:
72:12:ed:eb:92:a7:7a:b2:98:b4:49:0a:03:2e:1e:
d4:91:c8:ca:21:5f:75:d9:04:61:59:16:b1:29:ec:
f6:7f:cd:cc:9f:10:11:5e:13:03:c5:bb:2b:3d:be:
c9:d5:3b:6e:69:1d:32:4d:be:84:a4:c0:fb:68:54:
fd:42:77:58:1f:c2:d4:ce:65:21:5b:40:aa:c1:01:
07:d0:28:64:96:6c:05:b6:6c:c3:5d:b5:44:66:e1:
45:8a:01:f4:af:d7:48:17:b1:6c:88:c2:09:5d:3f:
a8:b0:22:17:58:02:33:3b:93:83:7c:bf:22:87:d8:
db:95:6c:8b:68:69:8b:ea:34:77:6c:29:09:df:eb:
89:e2:9c:40:f7:46:ce:36:e8:77:76:cf:c0:8c:98:
54:60:5b:07:12:e5:e2:db:32:7f:a5:d5:ea:2f:f3:
af:51:21:ad:a8:a8:e1:d6:ca:48:61:98:9b:99:b3:
ed:24:1f:95:d3:a1:1c:28:cb:ab:bf:ba:9f:89:7d:
c9:39:14:8c:47:14:64:57:19:38:0c:39:ea:c4:4d:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:A7:B1:33:BB:78:5B:CF:B5:EF:BB:19:45:D0:E9:81:49:FB:A6
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/EYqnsTO7eFvPte-7GUXQ6YFJ-6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.236.0/24
77.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:f5:b4:70:e3:42:cb:ee:b9:b3:22:e4:33:7a:3b:ef:02:
85:4f:10:ca:79:d1:56:4f:e1:66:85:53:bc:ad:5f:74:db:41:
07:49:ec:55:d1:39:e7:72:3f:0a:3c:7d:35:25:9e:8d:7f:f4:
5f:4d:50:b6:ef:8e:56:d2:de:28:84:4e:9b:99:ec:5e:68:5e:
4b:55:ca:4f:90:b5:44:e5:23:db:0d:99:50:da:2a:ed:78:5e:
02:34:22:9e:40:79:33:80:f3:ab:08:ab:ef:a7:5b:76:e6:05:
1a:64:8d:e3:02:d8:cb:67:f7:de:c6:4b:a2:d8:5e:8b:a9:6f:
a5:f8:ac:cf:96:b6:0f:3b:2c:74:72:8e:05:52:c6:92:d2:0e:
8e:fb:37:71:ba:49:b8:86:84:79:0c:c7:01:58:b3:b6:08:77:
bd:70:de:cc:d7:c9:cd:11:ad:61:25:75:dc:42:40:63:1d:0f:
5f:96:52:3c:31:92:cb:3a:b7:67:cf:fd:fa:61:fe:57:01:28:
d6:c6:e5:85:80:f9:34:fb:db:3e:3c:67:0e:89:34:cc:f9:15:
96:75:4d:f3:05:68:ab:21:b5:d9:4e:c1:b1:cb:70:24:eb:a2:
19:04:3d:11:4b:ba:ae:6a:3e:02:4d:19:93:8b:59:de:03:66:
91:39:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org