Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/eagM4NltBZ52J_SiosnWfTJiIh8.roa
File: eagM4NltBZ52J_SiosnWfTJiIh8.roa (raw, json)
Hash identifier: va+f/eyaz1692qQalp+uwgteTO3wnT2Gbj81o0xag6M=
Subject key identifier: 79:A8:0C:E0:D9:6D:05:9E:76:27:F4:A2:A2:C9:D6:7D:32:62:22:1F
Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial: 28F2FE02
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/eagM4NltBZ52J_SiosnWfTJiIh8.roa
Signing time: Sat 01 Jan 2022 09:02:10 +0000
ROA not before: Sat 01 Jan 2022 09:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197133
IP address blocks: 217.114.200.0/21 maxlen: 24
194.69.194.0/23 maxlen: 24
194.143.132.0/23 maxlen: 24
193.202.121.0/24 maxlen: 24
185.114.128.0/22 maxlen: 24
185.32.102.0/24 maxlen: 24
178.248.208.0/21 maxlen: 24
185.32.100.0/23 maxlen: 24
91.197.136.0/22 maxlen: 24
178.251.248.0/21 maxlen: 24
2a02:1740::/32 maxlen: 48
2a03:d280::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687013378 (0x28f2fe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Validity
Not Before: Jan 1 09:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79a80ce0d96d059e7627f4a2a2c9d67d3262221f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:01:99:f9:ae:64:f4:ee:c3:fa:87:73:ad:
a5:7e:80:ed:28:a1:e8:46:81:78:f1:df:4f:6b:58:
d3:c4:25:b1:9e:46:aa:82:ac:bb:b8:94:16:8b:63:
4c:dd:11:ec:00:56:87:2e:0d:e5:de:44:ed:44:b1:
3b:03:e6:b9:b2:4e:9c:3f:65:da:19:a1:18:7a:b2:
cc:41:9d:d4:86:de:bf:2a:3a:a5:00:d8:2f:8a:48:
09:36:56:06:b1:a0:cc:25:4d:c2:7b:3e:23:3b:6f:
1f:94:cd:1a:3f:6e:62:3c:af:e8:a2:d1:7d:9b:1e:
0a:6a:0d:d7:eb:06:b0:fe:c8:3d:8d:c5:67:10:7c:
0f:cf:49:78:a8:7c:c9:73:bf:ec:3d:ad:8f:bc:49:
9e:2f:42:7d:94:91:3d:f2:9d:87:c5:14:94:8d:8b:
13:70:8d:b5:c9:91:94:a4:71:b2:65:f1:c7:ce:3e:
fe:3a:9f:ea:f7:31:3a:9b:a4:d5:64:22:db:39:37:
f5:a5:eb:10:e4:fb:5b:7a:c8:44:19:f9:4b:b2:bc:
d6:ea:b6:40:3d:d3:9b:a7:7b:31:58:40:e8:d6:7f:
b4:cb:5b:73:b3:11:d8:7a:51:1e:24:dc:32:95:d6:
cc:f9:f0:29:31:27:42:bf:1b:e1:a9:86:22:eb:38:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A8:0C:E0:D9:6D:05:9E:76:27:F4:A2:A2:C9:D6:7D:32:62:22:1F
X509v3 Authority Key Identifier:
keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/eagM4NltBZ52J_SiosnWfTJiIh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.136.0/22
178.248.208.0/21
178.251.248.0/21
185.32.100.0-185.32.102.255
185.114.128.0/22
193.202.121.0/24
194.69.194.0/23
194.143.132.0/23
217.114.200.0/21
IPv6:
2a02:1740::/32
2a03:d280::/32
Signature Algorithm: sha256WithRSAEncryption
6f:bc:94:1c:08:8f:97:f8:99:54:b8:09:bc:db:40:2b:23:89:
07:4c:02:fc:83:64:a5:9c:2a:de:93:85:78:08:4b:36:69:8a:
1e:cf:a4:f0:05:4f:72:73:b5:07:86:0e:88:2a:64:c1:ea:5f:
5a:dd:16:bf:ec:4b:4b:dc:3f:07:c7:52:56:47:d1:0b:8b:25:
5f:d9:2c:c9:5e:2e:e1:d8:b4:42:ee:99:32:31:e6:90:a3:df:
e0:68:b8:2a:f7:db:be:f5:80:cc:8f:d8:a0:84:de:70:65:f1:
42:69:68:50:90:35:78:0e:f9:17:5b:c4:1f:7d:2a:14:ee:d1:
89:6a:88:74:59:cf:2d:c6:08:52:53:13:87:f3:c6:ab:3a:df:
41:90:79:e4:fd:91:33:0d:16:88:b8:da:dd:91:39:ea:47:22:
79:3a:6a:c5:27:20:d3:90:23:cd:80:83:ba:9b:5a:39:5d:f2:
02:41:f0:c8:35:5e:92:99:40:03:ef:db:38:51:ab:ec:33:23:
c1:92:b4:94:07:9b:c4:76:67:25:7e:ae:53:0d:33:fb:66:76:
2a:2a:53:f1:e8:4d:04:25:c2:76:cb:04:fb:99:31:90:d3:8c:
2c:e7:5d:79:93:78:eb:32:9f:82:c1:d7:38:48:dd:42:df:63:
f4:1b:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:35 2023 by rpki-client on console-ams.rpki-client.org