Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EJxWyVqyaXf-eyNYSpDphnD2ERc.roa
File: EJxWyVqyaXf-eyNYSpDphnD2ERc.roa (raw, json)
Hash identifier: mDLpb91jSQLFP/zipxYLiPQ3GsGsfuFORNBJdTCo75c=
Subject key identifier: 10:9C:56:C9:5A:B2:69:77:FE:7B:23:58:4A:90:E9:86:70:F6:11:17
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01821A69824F9F98E054157D91911EEA24FC
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EJxWyVqyaXf-eyNYSpDphnD2ERc.roa
Signing time: Wed 20 Jul 2022 07:01:38 +0000
ROA not before: Wed 20 Jul 2022 07:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201759
IP address blocks: 213.33.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:69:82:4f:9f:98:e0:54:15:7d:91:91:1e:ea:24:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jul 20 07:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=109c56c95ab26977fe7b23584a90e98670f61117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:0c:d0:03:45:f2:0b:dc:67:e9:89:7a:b2:
a7:a6:8e:50:ce:49:33:e3:b8:0d:1e:55:35:5c:a9:
c3:02:6b:cc:7c:59:bf:05:65:c8:b8:36:f0:0a:c5:
c9:b7:06:73:6c:89:58:eb:c3:ab:c7:ef:ef:1c:e8:
5c:31:d8:21:d0:d3:ff:b7:45:66:00:65:ac:c1:2b:
9d:c1:96:32:89:e7:99:28:4d:61:a8:8f:4f:10:03:
63:56:ab:cf:2b:77:fa:96:51:b1:10:af:71:14:22:
e4:f5:2c:27:2c:ce:13:9e:94:02:84:6a:b8:51:06:
5f:dd:1f:c7:3e:49:1a:43:5e:a8:da:99:65:ec:68:
e9:59:33:fc:57:12:5b:a0:5c:7f:67:5f:3b:e7:98:
29:8b:ce:01:c6:1d:a4:90:4a:83:54:19:0f:1d:a0:
27:dc:1e:cf:6a:4c:f9:94:6c:a4:08:b8:3c:5b:ae:
bd:2f:15:d1:e7:f9:e9:fb:a8:32:1f:ab:f6:5f:f4:
ae:d3:b0:21:65:a5:bd:92:ba:65:52:ea:7f:2f:83:
03:3b:6f:fa:7e:12:92:ed:84:e2:cb:04:89:46:e5:
c9:85:4c:f8:b3:39:df:0c:fd:08:3c:03:fc:5b:3b:
e2:b7:1d:d0:54:6b:aa:93:de:61:33:1b:4a:11:62:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:56:C9:5A:B2:69:77:FE:7B:23:58:4A:90:E9:86:70:F6:11:17
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/EJxWyVqyaXf-eyNYSpDphnD2ERc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a2:b6:a4:86:05:82:0a:86:48:ca:69:1a:02:01:9d:a4:a3:
07:17:ca:b4:ff:0d:5d:85:4f:50:ac:cf:0a:5a:b1:97:b8:35:
8b:df:8c:47:73:45:5c:6a:7b:97:7a:e7:df:7b:23:6d:df:f6:
db:62:36:eb:e7:83:c3:9a:ca:53:4a:01:8e:70:c3:8a:0a:d6:
c4:89:63:1e:8e:11:af:20:eb:ed:46:83:0e:f9:dd:cb:d2:84:
bf:20:27:39:ae:25:31:9c:14:87:55:fc:e1:24:ce:0f:25:fd:
5a:7e:03:13:b5:53:3c:18:90:73:b3:8e:3a:2e:b5:59:18:9d:
4e:04:49:d0:ea:0e:27:2a:42:cc:1e:eb:fb:96:a1:7a:89:fc:
96:58:95:07:4b:d3:e7:b9:cf:92:c1:25:80:d6:bc:39:39:6d:
d2:32:19:f2:50:1e:f9:07:ad:20:a9:70:61:2c:3b:b0:6b:b4:
56:8b:29:9b:07:b2:6a:90:a0:28:75:63:3f:14:27:39:e4:46:
a6:0c:64:cd:d5:fa:67:91:4f:19:92:d2:91:bb:5b:60:75:b6:
1b:ba:e1:55:b8:18:71:31:c4:b7:e0:68:9e:0b:49:82:58:0d:
c9:8d:35:9a:be:cd:83:2e:fa:ed:50:4c:a8:f8:b1:84:bf:fd:
92:2a:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org