Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/E99p9Vvgo0kopBKQCy9x0DR011Y.roa
File: E99p9Vvgo0kopBKQCy9x0DR011Y.roa (raw, json)
Hash identifier: lcRVncRnUavJmjEkyZjYzRdfn+mkSBbA8TRMthXUbWw=
Subject key identifier: 13:DF:69:F5:5B:E0:A3:49:28:A4:12:90:0B:2F:71:D0:34:74:D7:56
Certificate issuer: /CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Certificate serial: 2FE55E43
Authority key identifier: EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/E99p9Vvgo0kopBKQCy9x0DR011Y.roa
Signing time: Sat 01 Jan 2022 10:55:15 +0000
ROA not before: Sat 01 Jan 2022 10:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24634
IP address blocks: 80.79.144.0/20 maxlen: 24
185.125.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803561027 (0x2fe55e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebfabfa628063f6b8e9888566f5f3fcfa798c621
Validity
Not Before: Jan 1 10:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13df69f55be0a34928a412900b2f71d03474d756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:d1:17:b8:e6:d7:40:1a:94:7c:4d:45:4b:
ca:82:6d:76:c9:17:21:58:2b:b9:4c:e2:9c:d0:89:
00:45:45:9a:f3:25:b7:9a:b8:3d:a9:39:e6:dc:19:
42:c4:ba:9e:cf:8f:2c:83:46:68:4f:51:a5:0c:19:
33:83:d9:b2:59:e2:62:4f:52:bf:90:95:a2:f0:c6:
52:27:dc:28:5f:a5:07:03:15:9c:e7:cb:0a:cb:63:
c9:c4:18:b7:fc:39:37:42:ff:b1:99:aa:96:3a:d6:
a4:82:6b:94:e7:30:22:31:10:84:50:e5:95:2a:a3:
05:49:09:32:b8:13:e4:6f:a6:89:7e:a1:89:06:1f:
1e:6a:ba:bb:04:21:c3:14:5f:f7:c1:53:0e:dd:df:
92:c8:55:25:f8:67:4d:a0:e2:31:13:25:5e:d5:98:
2a:91:22:a0:75:54:1a:6d:55:90:56:6c:86:a2:0f:
41:d9:44:ef:f3:c8:c1:d7:d3:d2:72:e3:3e:6b:df:
89:b8:f4:1e:00:94:f0:a4:5b:1f:dd:75:ba:dc:18:
d1:f3:08:c2:fb:67:11:a3:97:32:73:89:b9:5d:7f:
66:82:2e:fe:7c:e4:e9:04:1d:56:e4:f6:45:2b:72:
a7:51:dc:0b:b6:10:17:56:d9:74:d1:61:ad:df:dc:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:69:F5:5B:E0:A3:49:28:A4:12:90:0B:2F:71:D0:34:74:D7:56
X509v3 Authority Key Identifier:
keyid:EB:FA:BF:A6:28:06:3F:6B:8E:98:88:56:6F:5F:3F:CF:A7:98:C6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_q_pigGP2uOmIhWb18_z6eYxiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/E99p9Vvgo0kopBKQCy9x0DR011Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a3a311-3784-4818-abf9-e5fd6e9842ab/1/6_q_pigGP2uOmIhWb18_z6eYxiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.144.0/20
185.125.156.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a0:a5:29:92:75:1d:bf:2d:48:33:cf:df:3f:ec:1a:6c:99:
1e:e4:67:f5:c1:32:5d:c0:bc:fb:c1:9e:78:24:e4:66:55:1b:
6c:84:c2:fe:79:d9:e5:11:61:42:ca:cc:29:53:5d:00:92:40:
fd:1e:b0:c6:32:13:82:cc:69:f5:7f:42:11:7c:b6:f0:14:b8:
14:8a:59:1a:c0:e7:08:d0:32:38:28:96:7d:c1:31:ea:7a:a9:
e8:83:bf:a7:da:94:8c:a0:be:7e:ca:cf:be:ea:f0:a0:08:40:
0e:07:90:3a:3b:a7:79:92:01:03:18:e0:3e:bc:91:c1:da:22:
ff:66:de:bf:d1:c1:aa:e2:ec:be:ae:dd:7a:5b:ea:c2:f3:3b:
48:95:a1:c2:81:26:4c:2f:59:65:68:3d:6d:76:ff:cd:b7:e3:
ac:02:d7:61:b5:7a:ec:a6:4a:25:3c:bf:9c:25:4c:66:78:f9:
e5:dd:6e:90:1d:89:08:ae:49:31:eb:85:13:80:be:da:44:a8:
18:79:ca:87:5a:e1:ef:ac:cc:6c:b7:25:2b:c1:32:3e:e1:aa:
9a:82:ce:57:a1:68:02:41:c3:f8:25:f7:e3:9e:ae:43:31:a0:
78:3c:32:51:44:b0:ac:10:01:b8:79:5a:54:84:c8:7c:eb:24:
b1:11:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:27 2024 by rpki-client on console-ams.rpki-client.org