Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eKenGj0_w0USeKhiTvxMYKBExa4.roa
File: eKenGj0_w0USeKhiTvxMYKBExa4.roa (raw, json)
Hash identifier: KViYy1rGisGi8jgaKR0YffETs2ZHThghCs8f2K7epT8=
Subject key identifier: 78:A7:A7:1A:3D:3F:C3:45:12:78:A8:62:4E:FC:4C:60:A0:44:C5:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07FF3B60
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eKenGj0_w0USeKhiTvxMYKBExa4.roa
Signing time: Sat 01 Jan 2022 03:02:09 +0000
ROA not before: Sat 01 Jan 2022 03:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207461
IP address blocks: 83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134167392 (0x7ff3b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78a7a71a3d3fc3451278a8624efc4c60a044c5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:8b:8a:0d:6f:7c:ee:83:ab:6c:30:99:51:
96:13:ac:8c:ce:e5:b9:78:87:40:42:18:03:2f:5a:
be:e7:ab:1f:39:e6:5e:05:79:c1:a7:fa:f0:bc:7b:
c5:42:0b:6b:eb:42:69:7e:5c:6e:e9:78:b6:c9:16:
8f:33:20:3b:97:60:77:40:a0:ad:cf:c8:f7:c2:d9:
98:bb:0e:89:f7:ff:93:ac:56:ed:78:c3:51:ac:c2:
2e:31:5c:4a:17:67:8b:52:8e:53:1e:83:9d:74:19:
71:fe:e7:3c:36:6a:ad:9a:74:5b:e7:14:4f:da:cb:
5f:84:d6:14:2c:7d:f5:e5:17:56:77:46:a3:25:a2:
02:f4:68:cf:29:16:37:16:ba:14:2b:41:7b:1d:f0:
52:fe:cd:bd:02:3f:31:c6:c2:45:fc:09:70:a2:3b:
b9:6f:e1:26:ec:97:ae:be:30:27:1d:0c:55:d6:de:
a3:0d:d0:1f:8a:94:f2:93:e3:77:82:30:4b:ad:3b:
d8:96:04:7c:83:30:e8:21:53:8a:57:1d:47:be:c9:
2b:65:f4:d7:04:69:1e:5d:c4:3d:d0:b3:13:bb:57:
f9:44:c1:da:20:3b:c7:10:d4:50:56:69:df:a2:3d:
b7:a3:88:36:a4:fb:68:4c:68:99:9f:5e:88:ef:1e:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:A7:1A:3D:3F:C3:45:12:78:A8:62:4E:FC:4C:60:A0:44:C5:AE
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/eKenGj0_w0USeKhiTvxMYKBExa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
Signature Algorithm: sha256WithRSAEncryption
91:04:fd:fe:78:1c:f0:ac:a3:65:e3:16:e1:3e:e8:3f:ac:6e:
dc:88:29:f6:76:6f:1d:3b:2c:35:45:90:5f:ab:6a:56:c7:2e:
b5:69:cf:36:72:4d:c1:8e:fb:e0:c9:e4:71:4d:29:e3:48:b4:
3c:89:2b:c5:91:7c:de:4d:38:5e:c9:90:3c:00:a4:35:4b:8a:
53:c6:6c:ba:96:1e:37:e1:e8:f2:78:22:1e:41:8a:21:1f:19:
63:d7:4e:94:b3:3e:1f:04:81:4d:52:c9:47:4c:dc:ca:61:ba:
28:d2:7c:b6:d5:c5:23:52:92:c6:2f:56:f5:61:bf:bb:5e:82:
f9:1f:a0:e5:97:11:f1:66:36:0c:e8:15:9d:e9:9f:d9:2f:81:
4d:c5:56:18:99:c6:73:3c:d1:4a:15:57:bd:29:64:d6:67:16:
f2:85:c2:4f:0f:bc:f1:13:ae:a2:83:ce:b5:2c:3a:47:cd:3e:
1e:0f:b5:86:0d:5a:ab:79:cf:18:52:fc:e3:0f:4d:7d:bf:22:
f6:24:17:3e:7e:e0:df:bf:a8:37:58:aa:8b:71:a7:f5:fd:fa:
94:bb:db:3c:15:82:7e:95:42:ef:5b:05:e2:5d:a5:ff:da:42:
9e:db:f7:91:1f:39:1b:47:02:1d:28:7d:0a:a8:5d:ed:0a:28:
f4:d8:2c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org