Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/EjWap6UVikyVEFS-AXzscCycI9k.roa
File: EjWap6UVikyVEFS-AXzscCycI9k.roa (raw, json)
Hash identifier: +61zPzUZfBcOO8Q4BKKB+LmNvaqRM8i2f3QRPKNkKec=
Subject key identifier: 12:35:9A:A7:A5:15:8A:4C:95:10:54:BE:01:7C:EC:70:2C:9C:23:D9
Certificate issuer: /CN=1e514098a5a9736cda4303e0495e94652390aa91
Certificate serial: 08974B07
Authority key identifier: 1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/EjWap6UVikyVEFS-AXzscCycI9k.roa
Signing time: Sat 01 Jan 2022 14:02:21 +0000
ROA not before: Sat 01 Jan 2022 14:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208959
IP address blocks: 46.232.210.0/23 maxlen: 23
185.207.164.0/22 maxlen: 22
45.86.221.0/24 maxlen: 24
2a11:b00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144132871 (0x8974b07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e514098a5a9736cda4303e0495e94652390aa91
Validity
Not Before: Jan 1 14:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12359aa7a5158a4c951054be017cec702c9c23d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:7b:a2:97:70:5d:93:f6:f3:0b:b4:7b:5e:
13:00:bd:02:84:47:77:d5:b6:0a:ce:c5:ca:20:ee:
c8:c6:fb:ee:1e:c9:5c:3c:32:b3:b9:33:88:2e:b0:
34:8f:fc:56:e1:8b:ca:e4:f3:5a:a2:c4:20:33:b7:
eb:30:67:0e:f3:f3:b9:a7:38:27:60:22:6d:ac:81:
8b:f2:13:82:52:91:06:cb:e8:a0:89:96:8a:3e:63:
cc:ab:03:c1:20:71:2f:69:51:e6:d3:41:94:e4:77:
38:f0:3e:99:11:cc:02:69:40:e9:f7:a1:3d:62:29:
91:79:e8:1c:31:ca:25:c9:d3:de:1c:f3:ab:73:f9:
53:fe:6f:5d:7d:ff:c3:19:7e:c1:60:b9:70:93:16:
0c:f6:39:74:c0:17:79:21:d0:4b:4d:0b:da:6b:fc:
b7:a9:79:19:70:da:95:37:20:3c:25:cd:fb:3b:13:
cd:8f:0e:d2:d3:a1:35:80:4c:a3:e6:b3:18:f6:75:
cb:de:1f:d1:21:85:90:09:b5:67:67:ca:74:44:9c:
fc:af:bc:31:eb:8a:66:d3:5d:d9:03:93:64:06:23:
7d:e5:de:85:e1:45:bc:7c:41:73:67:0f:64:a9:8a:
a8:ea:9e:6d:d5:f6:fd:9e:27:8f:21:85:0e:70:16:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:9A:A7:A5:15:8A:4C:95:10:54:BE:01:7C:EC:70:2C:9C:23:D9
X509v3 Authority Key Identifier:
keyid:1E:51:40:98:A5:A9:73:6C:DA:43:03:E0:49:5E:94:65:23:90:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlFAmKWpc2zaQwPgSV6UZSOQqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/EjWap6UVikyVEFS-AXzscCycI9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/35dfcb-d92d-48fe-9dad-854381686c7b/1/HlFAmKWpc2zaQwPgSV6UZSOQqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.221.0/24
46.232.210.0/23
185.207.164.0/22
IPv6:
2a11:b00::/29
Signature Algorithm: sha256WithRSAEncryption
34:42:e6:31:4d:05:d2:38:6f:ef:08:ec:f9:4c:0c:99:67:29:
67:a5:de:7c:8d:83:e8:a4:20:4e:73:58:a9:23:8f:2e:bc:68:
59:a2:1b:b6:8a:47:e2:88:65:be:3f:c6:93:4c:43:51:1e:83:
ee:44:77:a5:bc:65:26:83:68:9a:ef:3e:90:9e:1a:86:35:46:
87:af:ee:2c:b5:eb:2f:5c:9e:08:46:26:93:e6:a9:7f:23:d7:
2e:7e:f8:8b:bd:fd:86:82:ea:e3:ee:c0:e1:06:ad:14:55:27:
3c:19:91:83:6b:83:f9:25:f1:17:71:8d:c0:e6:70:a6:49:98:
ba:dd:b1:98:9a:09:94:f1:28:e6:d8:de:55:bf:9e:5c:50:ac:
8f:b3:9a:b1:54:ce:26:fc:c9:60:8a:98:6d:64:76:7d:1f:93:
9e:c9:76:e2:4d:3f:40:2b:75:34:d6:07:09:39:26:0b:b2:ed:
ae:77:75:dd:a6:89:2c:9b:a7:b7:fe:a8:7d:e5:97:32:d6:f5:
9c:35:1b:74:c7:6b:cd:0d:fd:29:ad:c6:a9:9e:50:90:0e:49:
d6:7d:b0:1d:30:b1:30:7b:fd:9e:e1:33:a7:f5:5a:a4:76:45:
30:85:c9:f8:33:cc:06:bb:a7:94:19:ab:04:be:58:41:2f:11:
20:a1:d8:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:27 2023 by rpki-client on console-fra.rpki-client.org