Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EvgexE5SgvR1PPScq-EDsyEGSec.roa
File: EvgexE5SgvR1PPScq-EDsyEGSec.roa (raw, json)
Hash identifier: lDG5M6FIimCKwOmJW7StW6lDXcQpMy2Lsw58eeNgmew=
Subject key identifier: 12:F8:1E:C4:4E:52:82:F4:75:3C:F4:9C:AB:E1:03:B3:21:06:49:E7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426C68D6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EvgexE5SgvR1PPScq-EDsyEGSec.roa
Signing time: Sat 01 Jan 2022 14:03:12 +0000
ROA not before: Sat 01 Jan 2022 14:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 192.165.76.0/24 maxlen: 24
194.68.37.0/24 maxlen: 24
192.121.153.0/24 maxlen: 24
194.68.38.0/24 maxlen: 24
194.14.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114400982 (0x426c68d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12f81ec44e5282f4753cf49cabe103b3210649e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:84:a0:ae:06:70:90:1a:5c:e8:b8:90:07:
78:65:8c:f6:1a:9c:56:82:77:e7:b1:e6:40:2d:76:
bb:fe:41:7b:87:d2:6a:61:2d:7b:3d:a3:08:02:d7:
4a:13:96:48:9a:32:63:9e:db:7f:2e:79:81:27:07:
30:05:a2:1d:af:8b:ff:e9:9a:77:11:34:03:7a:0d:
f5:f3:14:8a:ea:23:42:4f:e2:3c:b4:ba:ce:ae:75:
d4:72:05:b2:d7:cc:87:c5:dc:38:81:35:55:25:30:
f2:f2:ba:bc:44:c5:47:e9:40:71:b4:8c:2f:8a:c6:
80:0a:93:c9:6c:72:a3:c3:c5:4c:8a:18:0c:3f:60:
59:5d:b6:db:dc:ea:23:68:e5:3e:88:16:2f:46:a7:
65:27:e9:7b:18:ee:da:cb:38:d0:b1:7f:2a:a7:6f:
c0:6b:83:df:b0:67:17:3c:20:74:a8:23:19:59:71:
1c:1c:2a:c1:02:d8:5b:0d:bb:b3:0a:e9:ad:95:9d:
da:a9:63:38:d9:a2:29:1e:11:e4:a1:b3:97:7a:3c:
54:b4:91:99:3b:43:33:7f:15:e7:e4:94:1a:4a:1f:
78:0e:ad:48:46:cb:10:69:9b:65:70:fe:f6:e5:ab:
d2:ac:c0:a4:4f:ac:96:fa:5a:d7:19:9a:52:06:92:
db:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:1E:C4:4E:52:82:F4:75:3C:F4:9C:AB:E1:03:B3:21:06:49:E7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EvgexE5SgvR1PPScq-EDsyEGSec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.153.0/24
192.165.76.0/24
194.14.177.0/24
194.68.37.0-194.68.38.255
Signature Algorithm: sha256WithRSAEncryption
b1:ba:fd:0d:81:a7:5e:b7:01:44:e2:28:9e:86:f5:2f:59:2e:
00:a5:34:20:38:23:a9:ed:2c:07:e1:b0:72:4a:09:34:20:7c:
3b:13:e2:7e:aa:ca:2d:1e:bb:ee:25:8c:aa:67:db:d3:f4:d5:
f9:6c:fe:9c:9f:a7:44:84:9d:3c:69:6f:2b:f9:c1:e5:9f:d5:
2c:75:ef:c2:c2:42:b6:b9:b1:fe:c4:a4:07:98:af:6b:b9:44:
0b:2a:a0:14:61:5a:37:70:18:d5:29:00:4a:80:83:62:6f:e9:
2c:7a:a5:f6:30:84:6f:15:04:a1:ea:ea:c3:6d:9d:24:61:55:
b0:df:04:77:19:dd:49:b7:77:50:bc:af:60:ab:ee:8e:08:a3:
7b:a3:42:58:95:b5:b5:fb:4d:68:4e:34:8e:8b:c3:e7:15:49:
e2:35:3d:ae:83:ec:39:c9:bb:4f:aa:af:c3:e6:f6:47:aa:55:
10:16:79:c8:72:a8:2a:aa:7d:0b:be:fd:2d:a5:f6:05:5d:0f:
98:06:ef:70:6c:31:5b:a4:c1:71:52:07:fc:e1:0f:90:72:cf:
c0:c6:be:db:b1:aa:d3:b2:84:03:fd:9e:09:d8:e3:19:7d:57:
c1:11:84:4b:59:95:09:14:9c:0e:99:8b:b2:01:d8:ef:95:a6:
8f:dc:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org