Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Ep61SD7hkRIagz_SyTGThpWFqLs.roa
File: Ep61SD7hkRIagz_SyTGThpWFqLs.roa (raw, json)
Hash identifier: V8kMg/V3ILRn5fHqFwpJAQP4NMNphEvaC4VdhB79LxY=
Subject key identifier: 12:9E:B5:48:3E:E1:91:12:1A:83:3F:D2:C9:31:93:86:95:85:A8:BB
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 089E1534
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Ep61SD7hkRIagz_SyTGThpWFqLs.roa
Signing time: Sat 01 Jan 2022 11:04:08 +0000
ROA not before: Sat 01 Jan 2022 11:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 162.218.95.0/24 maxlen: 24
63.246.150.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144577844 (0x89e1534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=129eb5483ee191121a833fd2c93193869585a8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:90:24:5a:2a:2e:ba:6e:f5:c8:c3:84:7f:
8b:66:1a:4a:87:e2:de:39:00:6e:0e:15:67:57:d3:
9b:8d:f0:f2:5a:71:12:5e:0a:89:06:06:82:a1:e5:
99:92:eb:ed:5e:1f:4f:ef:a3:f6:e8:51:e2:ac:03:
38:bf:e1:d9:6a:7b:27:b8:74:61:f8:b8:ac:c7:89:
58:82:9d:cf:69:be:80:16:50:74:a5:99:41:a9:ed:
04:e1:34:49:02:da:ca:58:db:5e:c9:ef:4e:b9:2d:
9d:56:9a:d9:21:58:be:df:a8:c1:8d:6b:1a:a1:e6:
bc:21:55:d3:cb:0e:3d:63:e6:2f:52:ee:5e:82:50:
b7:53:9d:e2:d4:82:e7:ac:04:f2:0b:8c:de:c4:b0:
1f:78:ae:52:bd:30:ac:08:0f:ad:51:e8:af:de:47:
a8:63:cb:38:3b:64:89:25:1f:4b:36:6a:30:85:14:
94:43:4a:16:92:43:72:71:af:f7:14:1b:a1:0d:75:
31:44:96:79:59:5e:a3:1f:57:f3:33:cd:fe:ae:ca:
59:17:ba:5f:26:f7:2a:56:3e:f9:1e:b5:ee:ab:eb:
36:6b:16:d5:a5:9d:ae:3b:73:4e:a0:35:4d:17:89:
00:4f:03:0b:49:b4:e1:0c:09:68:0c:eb:0c:74:b8:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:B5:48:3E:E1:91:12:1A:83:3F:D2:C9:31:93:86:95:85:A8:BB
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Ep61SD7hkRIagz_SyTGThpWFqLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.140.0/24
63.246.150.0/24
162.218.95.0/24
185.230.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:72:ad:2e:27:73:bd:b3:cf:f9:b6:37:e9:57:df:44:3d:2e:
66:ce:2b:77:9a:82:68:98:f5:35:60:1d:ad:17:e5:32:b4:b4:
77:ea:33:30:c3:fe:6a:9f:6b:2f:fb:cc:01:d6:9c:49:18:2d:
1f:e6:44:03:a5:8f:95:71:7b:df:3e:14:9c:0e:53:4a:03:78:
01:f4:5f:44:16:fc:c8:61:d4:ee:58:31:5f:c4:ff:34:c2:45:
d4:b8:36:33:85:0d:b2:88:6e:0d:d3:d9:45:a0:0a:d1:90:c5:
5c:6e:20:7c:ee:8f:01:43:fc:c5:b5:05:3b:f7:57:39:18:af:
96:dd:b5:47:49:cf:55:1e:4c:dd:e5:e1:02:cb:c5:ae:1c:77:
28:c5:72:90:30:f5:b1:2b:85:24:2e:a1:88:42:ee:a4:b3:e3:
aa:a0:22:18:f6:35:2e:62:46:39:e4:06:6b:f4:3e:b7:69:84:
62:64:e7:7e:53:01:83:e4:b2:cb:17:9b:1d:03:e0:3e:e9:2f:
96:77:b0:c2:29:f9:35:9e:0d:1f:00:68:50:42:23:33:70:b7:
71:de:64:24:8a:8f:dc:fd:12:a6:68:f4:9c:f2:c9:91:9f:0e:
59:d5:98:78:61:07:34:33:f9:ef:c8:b8:fd:d4:83:7b:0d:b1:
d2:4e:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org