Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/EYxpIGgwWb0dTUqUVPOn50rNIH4.roa
File: EYxpIGgwWb0dTUqUVPOn50rNIH4.roa (raw, json)
Hash identifier: FOohQx4m+u8xXFBP4eyEPU6L4dU/6AwyIFpEZmAHV8k=
Subject key identifier: 11:8C:69:20:68:30:59:BD:1D:4D:4A:94:54:F3:A7:E7:4A:CD:20:7E
Certificate issuer: /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial: 73B14D
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/EYxpIGgwWb0dTUqUVPOn50rNIH4.roa
Signing time: Sat 01 Jan 2022 04:00:45 +0000
ROA not before: Sat 01 Jan 2022 04:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1820
IP address blocks: 146.19.54.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7582029 (0x73b14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Validity
Not Before: Jan 1 04:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=118c6920683059bd1d4d4a9454f3a7e74acd207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:84:80:52:16:6e:3d:d6:88:5e:8f:f4:46:84:
e0:0b:0d:d7:c0:64:23:e1:0c:04:94:8d:3a:f9:0d:
7d:9a:e6:25:e0:21:40:90:c0:a0:03:a0:0a:cc:2c:
7c:e4:ed:6a:0c:88:7a:2d:21:1e:b9:1f:34:18:fa:
03:3a:99:61:6f:26:84:1b:2e:1b:f7:40:ab:4e:79:
be:f6:0c:f9:83:bf:8b:a9:d2:ae:72:82:fb:57:cc:
c9:cc:44:3a:c0:38:05:78:41:85:f7:97:10:bb:7c:
c8:e5:c9:16:25:10:58:c6:7b:7b:30:32:a4:8b:ff:
2c:4d:ee:6f:09:a4:26:7c:25:d0:a6:b4:13:8d:3c:
1c:87:6d:1d:f9:d2:76:bf:22:3b:82:9a:7a:9f:96:
a4:f5:ab:86:49:29:f3:96:92:ca:32:09:5c:a0:d9:
ff:1f:5c:e1:8e:02:6f:fd:62:db:48:a2:db:26:08:
e9:80:1f:c5:64:a7:ef:fc:df:8f:96:77:4f:8b:ea:
a4:f1:6e:61:b9:6b:ee:6b:df:6f:f3:5c:87:c5:4d:
23:f8:9d:d4:d0:17:e8:42:19:c4:08:6f:84:59:68:
23:f9:a2:c1:47:83:90:d2:0b:63:2f:83:23:da:08:
3d:32:4b:3d:0a:c5:7e:d4:f9:af:01:33:8e:13:0f:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:69:20:68:30:59:BD:1D:4D:4A:94:54:F3:A7:E7:4A:CD:20:7E
X509v3 Authority Key Identifier:
keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/EYxpIGgwWb0dTUqUVPOn50rNIH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:07:73:38:6c:db:d0:b4:89:dd:b7:4f:ad:81:6e:e4:a6:ac:
d7:04:f7:55:21:30:db:70:e4:e7:6a:60:79:7c:b5:5c:59:3f:
d5:83:f9:a0:71:2e:76:4a:11:ab:ff:4b:ee:be:c4:06:e4:df:
db:9f:50:c7:36:97:bd:ab:cf:3b:a5:2f:49:93:30:b1:91:15:
c9:23:08:81:6f:eb:8d:6d:64:2d:b5:89:80:ed:2f:87:29:fc:
0b:58:47:3a:c4:d2:66:76:8c:25:bf:30:05:91:2e:96:8f:75:
27:2f:50:f4:f3:b8:7d:e6:44:b8:1e:5c:5e:6b:b3:bf:61:4c:
7d:5e:35:35:ac:f3:47:6a:1d:cd:b5:f4:54:fc:48:27:13:db:
be:6d:7c:f4:8a:cc:f9:18:d8:61:71:06:e6:10:a0:06:57:19:
42:e9:e3:5b:8e:8f:5c:5e:bd:75:dd:af:ab:af:ca:28:09:72:
9b:a8:22:87:5f:45:68:d9:af:e1:ea:d1:98:31:41:04:31:4b:
57:13:c5:eb:d7:24:eb:d9:d4:20:b9:84:b1:cb:89:3e:55:6c:
77:e4:b8:72:73:dc:93:9e:d5:2d:6d:98:d8:7c:b3:33:ea:b5:
39:60:29:20:40:65:ed:e0:4b:34:fa:97:bb:12:35:68:74:4e:
8a:b3:5c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:30 2024 by rpki-client on console-fra.rpki-client.org