Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EDn92E6dvFvCoHrDlL5VJBK5MJ4.roa
File: EDn92E6dvFvCoHrDlL5VJBK5MJ4.roa (raw, json)
Hash identifier: mFS25A17z5XbWVXPdoQivMGEMYCFedbPqdVO2iLPHzQ=
Subject key identifier: 10:39:FD:D8:4E:9D:BC:5B:C2:A0:7A:C3:94:BE:55:24:12:B9:30:9E
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821675A033B067520A5403FA03C9A9DE0C
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EDn92E6dvFvCoHrDlL5VJBK5MJ4.roa
Signing time: Tue 19 Jul 2022 12:36:23 +0000
ROA not before: Tue 19 Jul 2022 12:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51066
IP address blocks: 193.80.160.0/22 maxlen: 22
193.80.132.0/22 maxlen: 22
193.80.136.0/21 maxlen: 21
193.80.144.0/20 maxlen: 20
193.81.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:75:a0:33:b0:67:52:0a:54:03:fa:03:c9:a9:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 19 12:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1039fdd84e9dbc5bc2a07ac394be552412b9309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:23:cb:bb:9c:8c:e7:3e:77:7c:86:52:7f:
24:28:f0:e7:89:cf:02:2b:6d:13:7c:ca:b9:ee:08:
c1:91:2f:16:b9:49:0c:ef:ab:3b:bc:43:c7:80:26:
cb:de:84:d7:35:87:77:87:31:fd:3e:f1:35:7c:42:
61:f7:78:ef:f9:ab:dd:c2:0e:4f:20:25:3f:7e:f5:
85:7b:22:a2:8c:66:f9:13:48:df:30:74:8e:70:e7:
0d:38:2a:10:f2:9d:77:aa:38:78:0b:f3:7e:f9:1c:
2b:8a:b5:9c:b3:d7:89:3c:69:56:a5:03:20:d8:94:
5b:5e:4c:eb:68:25:6a:41:0e:13:f1:32:d6:07:20:
68:ed:34:84:42:48:33:0e:81:f3:d3:bd:f0:ed:37:
46:be:e0:3c:bf:57:63:ec:77:20:06:27:ac:a0:36:
1d:cc:a1:c5:8c:30:3e:2c:42:a4:db:6d:c1:0f:70:
52:71:81:ca:a5:54:ab:45:1b:00:25:25:e4:61:82:
36:dc:d1:52:ca:ec:44:10:a9:ef:6d:ab:65:c2:b3:
40:b7:da:ca:5e:9d:cd:3a:04:2e:dd:71:cf:1c:d8:
ce:d2:69:9b:97:de:54:07:97:3e:0f:a6:2a:a3:f1:
78:18:d2:cb:14:ff:7a:9a:a2:df:90:09:45:85:36:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:39:FD:D8:4E:9D:BC:5B:C2:A0:7A:C3:94:BE:55:24:12:B9:30:9E
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EDn92E6dvFvCoHrDlL5VJBK5MJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.80.132.0-193.80.163.255
193.81.1.0/24
Signature Algorithm: sha256WithRSAEncryption
55:65:88:1c:df:02:b3:fd:97:67:3a:59:1b:1a:13:20:c3:79:
ed:4a:67:7a:53:e6:31:4d:b4:20:5a:3e:e8:37:fc:69:13:4e:
6f:47:b9:7d:0a:ff:05:60:ac:5b:41:97:a5:78:14:54:65:ff:
86:a2:64:3a:f7:be:5f:5c:1f:f5:93:01:09:7d:11:f2:5f:ab:
61:d7:05:cb:0c:f6:a3:ee:ed:bf:bf:42:11:af:1a:e5:38:36:
dd:3f:e9:d7:ce:b6:b1:7a:eb:e7:ac:84:f5:96:b6:e1:79:57:
9c:53:e6:13:dd:bf:f5:b4:c4:02:61:c8:c7:11:dc:a8:36:2a:
f1:d0:25:a3:fa:0d:b8:ea:b8:3b:15:31:c7:0d:a5:c6:2e:15:
10:3e:5a:37:0e:e2:d8:22:a9:3f:e5:8c:94:cf:4a:a2:b8:29:
40:96:93:5b:fc:d3:80:6b:ad:76:e2:b6:5a:54:0a:9d:dd:0b:
04:02:1e:37:7e:22:48:63:aa:12:77:3a:3b:44:4c:7d:fd:fe:
e9:56:51:93:b1:7c:6a:58:1d:de:d5:28:d0:65:99:58:41:1b:
85:86:46:df:7f:bc:cb:35:de:3a:a6:82:dc:c3:69:96:ae:de:
20:46:3f:88:36:4f:f6:20:ab:32:99:29:51:d2:4a:8d:1d:17:
48:99:c8:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-ams.rpki-client.org