Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/EUQao_tz1OCsdbc9svgYJMTvexw.roa
File: EUQao_tz1OCsdbc9svgYJMTvexw.roa (raw, json)
Hash identifier: LwO5EnfzBlMynHDf7bnsZtNouSaiqKOu6hJcGXPBeWI=
Subject key identifier: 11:44:1A:A3:FB:73:D4:E0:AC:75:B7:3D:B2:F8:18:24:C4:EF:7B:1C
Certificate issuer: /CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Certificate serial: BA5967
Authority key identifier: F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/EUQao_tz1OCsdbc9svgYJMTvexw.roa
Signing time: Sat 01 Jan 2022 06:52:19 +0000
ROA not before: Sat 01 Jan 2022 06:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12212583 (0xba5967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Validity
Not Before: Jan 1 06:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11441aa3fb73d4e0ac75b73db2f81824c4ef7b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:4c:73:b0:87:58:09:69:e0:96:02:14:75:
71:2d:0a:e9:d5:a0:75:62:43:ed:c1:e5:f4:97:a0:
82:d0:2e:38:1e:9c:9f:1a:91:90:14:3e:d2:53:f7:
ab:d9:83:c7:7d:37:51:33:6b:78:5c:16:3c:64:fe:
a8:31:e1:6c:dc:e5:68:a1:0a:ab:a0:20:5f:ca:20:
2d:34:1c:f9:86:7f:d8:94:1a:37:94:43:0c:77:a6:
09:69:0d:e6:de:f4:92:41:84:0a:0d:01:36:56:98:
94:74:fc:9a:fb:4f:23:11:5e:e2:d0:16:3d:64:ae:
29:29:a5:2c:5f:a5:59:d0:15:13:43:47:72:b0:8f:
bb:03:ae:d0:85:6f:bf:1a:3f:04:26:fb:91:d3:8a:
78:67:ce:ef:26:5f:8e:cd:23:b1:04:f3:4b:99:11:
3f:ff:1a:76:58:d6:c0:ad:c7:2b:18:ab:5e:6d:e6:
b5:2a:25:66:e7:db:a3:dd:2f:4c:50:d4:d7:1a:9f:
e0:7d:85:72:b4:fc:bd:6e:04:57:e5:1a:2e:b8:53:
ce:71:fb:96:12:87:78:3b:3b:28:a0:5d:97:7a:e1:
50:4b:4b:f8:9b:9f:91:b0:ea:4c:b2:63:75:a3:95:
fa:30:ef:a2:69:2e:ea:05:c0:4a:8c:b7:33:76:b2:
b4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:44:1A:A3:FB:73:D4:E0:AC:75:B7:3D:B2:F8:18:24:C4:EF:7B:1C
X509v3 Authority Key Identifier:
keyid:F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/EUQao_tz1OCsdbc9svgYJMTvexw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
75:83:22:96:53:fb:3f:52:82:82:9c:49:b7:6d:cf:1f:6b:ce:
02:09:45:5b:a8:3c:68:f3:16:0f:6c:d8:ae:69:0d:6f:bc:45:
54:82:ea:86:2a:d7:f2:df:68:98:a5:b7:65:5f:b6:15:ac:ca:
22:72:8c:db:23:0a:ad:7d:83:b5:fb:4c:b1:e2:e8:a5:5d:ba:
51:0a:9a:64:b6:b1:8a:72:09:9c:c2:a3:2a:6a:0e:70:f7:87:
ed:d3:70:e2:8c:f5:29:5f:c7:21:73:18:b7:68:5c:21:a9:40:
ba:b6:a7:ec:e0:89:68:ad:52:cb:b4:3d:87:32:46:ea:05:92:
26:c4:9f:26:aa:b2:b1:81:a9:30:82:f5:d7:59:15:1a:a9:ca:
d1:79:76:f9:b6:f6:f2:aa:e4:0f:5b:d7:59:34:12:75:a1:c5:
59:c9:a1:a2:44:0d:a6:5b:a6:e6:88:24:cf:03:4b:51:77:7f:
3d:09:df:8d:cb:00:b8:bb:c8:bd:93:85:6f:29:18:5d:3a:8c:
86:37:e9:f1:01:da:39:8f:19:b5:47:94:cd:a3:47:06:d0:03:
72:2f:bd:ac:0e:48:ba:57:fe:01:5f:1c:92:63:b6:de:f6:0e:
a9:4d:21:b1:51:d5:0a:62:9b:90:45:d0:c4:15:6c:e7:ef:4d:
3d:8a:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:40 2023 by rpki-client on console-fra.rpki-client.org