Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/EvHr6FkXnGH4IzjMm00___Fy7Hw.roa
File: EvHr6FkXnGH4IzjMm00___Fy7Hw.roa (raw, json)
Hash identifier: ZC3umwAGlLt+BEW5y/xRIKf7joV4PoMLjDTQ9XtWbjE=
Subject key identifier: 12:F1:EB:E8:59:17:9C:61:F8:23:38:CC:9B:4D:3F:FF:F1:72:EC:7C
Certificate issuer: /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial: 04C269E6
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/EvHr6FkXnGH4IzjMm00___Fy7Hw.roa
Signing time: Sat 01 Jan 2022 00:56:54 +0000
ROA not before: Sat 01 Jan 2022 00:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212961
IP address blocks: 194.180.144.0/22 maxlen: 22
194.180.148.0/23 maxlen: 23
31.216.132.0/22 maxlen: 22
2a0c:abc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79849958 (0x4c269e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Validity
Not Before: Jan 1 00:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12f1ebe859179c61f82338cc9b4d3ffff172ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:64:ae:bf:e1:dd:91:1a:a2:31:ab:df:42:
88:66:e1:55:29:8c:ac:c0:dc:31:99:d3:73:45:1f:
da:23:21:20:fa:fe:e7:26:52:0b:b1:17:05:84:89:
10:5f:8e:56:28:b0:ea:ff:38:f7:d2:fc:8f:95:6c:
95:71:9c:a5:d0:02:08:4d:d1:77:65:ad:56:0c:cd:
48:d3:21:63:93:6d:ed:25:8e:cc:27:4a:6a:26:41:
25:48:8d:dc:d7:70:59:50:85:a0:63:f7:a8:69:81:
16:87:d7:a1:f2:9a:3a:5d:7e:5a:2a:b8:93:dc:74:
43:7f:0e:4f:09:9b:ae:c5:68:39:79:f9:14:c6:37:
76:d6:82:38:88:bf:cd:37:80:b7:c4:6b:a1:f7:28:
b8:ba:0e:f6:9e:9c:fe:60:fd:ef:62:95:aa:fc:2f:
6a:90:ca:a9:ba:69:ef:6d:06:28:60:3c:d9:a1:5e:
aa:db:46:19:b0:d4:c6:0a:70:bf:ba:74:3e:a7:c6:
6e:da:54:5d:70:e1:37:ab:68:7f:09:06:83:6c:52:
e8:c8:48:62:3c:08:96:60:33:f3:7a:36:27:6f:0e:
e8:9b:6e:f1:5e:2f:fd:4e:24:5d:3f:ea:57:24:22:
2a:6f:7b:a3:76:de:43:82:94:50:4a:aa:ca:21:d0:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:EB:E8:59:17:9C:61:F8:23:38:CC:9B:4D:3F:FF:F1:72:EC:7C
X509v3 Authority Key Identifier:
keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/EvHr6FkXnGH4IzjMm00___Fy7Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.132.0/22
194.180.144.0-194.180.149.255
IPv6:
2a0c:abc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:05:b6:1f:81:28:00:13:fd:f6:23:2c:50:86:e4:3e:5d:ca:
14:2d:5d:0d:f9:d1:82:96:35:0e:6b:03:5f:cb:b4:9e:60:8d:
4f:14:33:41:71:54:c9:2b:d3:f7:4d:a6:58:f6:9f:76:cc:87:
35:6d:5f:ee:50:47:2b:33:3f:36:2b:cf:5b:02:4b:90:8a:09:
e5:2a:d9:55:0d:ed:51:57:3d:f5:a1:c1:59:c7:dd:5f:9e:8c:
16:62:a7:04:2c:83:57:4b:17:5a:aa:d2:67:ee:e4:27:4d:87:
4e:11:12:c7:af:93:88:05:71:fb:19:0c:94:12:f6:4d:36:cc:
46:49:8a:f9:ba:78:76:8d:ad:e1:e9:98:bc:b3:ef:3b:93:c2:
2a:d5:a5:32:73:50:90:88:94:84:5a:ef:23:f1:85:1e:04:cf:
c1:f3:e0:b4:b0:e5:e7:01:80:49:54:54:fc:50:49:5b:04:75:
e2:31:2f:11:9a:d2:fb:49:bd:f8:3e:da:fb:75:59:6c:d6:d8:
03:cb:1b:54:77:fa:94:76:1c:7d:16:1c:e9:6a:00:4c:4a:f9:
e5:8c:11:83:4e:d5:a5:d1:1c:35:64:72:25:2d:7b:5b:43:c8:
9b:1a:52:74:8c:a1:87:74:d7:ce:b5:bf:57:a3:31:5b:3e:4c:
dd:f9:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:33 2023 by rpki-client on console-fra.rpki-client.org