Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/E_sMqmd-oJKg82x6k-jXMiNWD40.roa
File: E_sMqmd-oJKg82x6k-jXMiNWD40.roa (raw, json)
Hash identifier: 8etBxLZHBKH1EAayHyqhGrqNWqlPz/BwVJ9lsI2DekQ=
Subject key identifier: 13:FB:0C:AA:67:7E:A0:92:A0:F3:6C:7A:93:E8:D7:32:23:56:0F:8D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01839980F37E011D408B6EEAF8EA5D252460
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/E_sMqmd-oJKg82x6k-jXMiNWD40.roa
Signing time: Sun 02 Oct 2022 16:21:48 +0000
ROA not before: Sun 02 Oct 2022 16:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:80:f3:7e:01:1d:40:8b:6e:ea:f8:ea:5d:25:24:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 2 16:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13fb0caa677ea092a0f36c7a93e8d73223560f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:8a:48:27:a3:c0:f1:d9:3b:34:5a:01:05:
3d:8d:2d:ae:96:63:0f:3b:35:42:d8:be:a5:bb:2f:
be:b8:cf:43:f3:42:6f:bc:70:93:e6:16:c3:c0:89:
73:c0:3b:5c:2a:23:52:e9:16:01:72:61:32:75:0a:
a9:76:63:e3:74:0f:60:cd:b6:9a:dd:7e:40:bf:7d:
bc:29:26:60:61:6b:5d:4d:1d:2c:55:02:a2:a9:10:
33:87:07:27:82:c4:d4:80:fb:58:ef:e4:ea:77:82:
88:fa:7f:a6:a1:e5:9c:8b:df:13:27:74:33:33:4a:
d9:16:85:94:83:d5:a5:31:40:69:97:2c:da:d0:f7:
f7:64:7c:a0:62:1f:a2:3b:f7:5a:36:cd:4c:54:85:
3d:35:36:16:87:68:fd:d9:e7:5a:54:52:10:a7:0f:
28:ec:ae:4b:08:c9:38:ac:06:9b:d3:63:65:5c:a2:
28:c5:f8:42:97:cd:41:0a:9a:2f:e4:51:19:41:77:
fc:9c:df:61:28:03:9a:d8:80:8a:57:53:fe:45:df:
7a:8e:2f:43:a3:c7:34:58:4c:16:db:f5:1f:37:1b:
71:69:a1:38:95:58:7d:ab:0e:60:f0:59:6a:f8:a1:
62:1a:bd:d5:f4:f6:6b:ea:5c:9b:39:f0:03:71:da:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FB:0C:AA:67:7E:A0:92:A0:F3:6C:7A:93:E8:D7:32:23:56:0F:8D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/E_sMqmd-oJKg82x6k-jXMiNWD40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/22
94.241.136.0/21
94.241.164.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ee:68:c4:83:44:94:33:18:b7:83:4a:6a:24:52:f8:68:73:
fb:a1:fd:30:fd:46:7a:5c:37:bb:c4:3c:c8:0b:70:64:de:70:
3c:51:8d:42:77:41:1a:b8:7e:07:36:ea:05:d7:c8:64:79:78:
3f:99:75:bc:9d:8f:10:43:81:3f:ef:10:29:ce:f4:4c:ac:98:
88:b3:3e:35:ae:1f:1d:9d:bb:b5:10:3b:f4:51:30:0c:f9:77:
e7:86:11:66:86:21:b1:31:46:5a:50:cf:f7:0c:79:14:06:9a:
11:41:4b:4f:33:10:92:4c:e5:58:86:0f:ce:18:05:79:47:ae:
b5:f6:75:5c:08:0b:a2:7c:48:23:a5:a5:89:4b:ef:87:4f:92:
92:6f:eb:ab:a8:57:58:10:08:8f:6c:3b:d5:37:da:fa:cf:83:
20:53:cd:7a:e7:00:67:bf:fc:99:92:71:ea:1a:ff:26:29:ea:
ea:e0:22:64:d9:b1:90:47:9e:bd:45:e8:d1:cb:06:b3:ae:eb:
8a:f2:37:49:11:bf:88:4f:67:a7:f6:94:65:d6:20:62:34:bf:
8f:92:bd:1b:db:36:c4:5f:79:99:e9:dc:97:ec:e0:24:72:8b:
07:b4:28:91:0b:96:be:f1:42:23:82:ac:1f:b6:06:f3:98:2c:
64:70:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org