Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/EAYaMMGI5W90usPnAmY9t9ZV8cs.roa
File: EAYaMMGI5W90usPnAmY9t9ZV8cs.roa (raw, json)
Hash identifier: wiDMEob0CFYzivvP0//pWmXcRPqyqsmMFwqbVpQuHpQ=
Subject key identifier: 10:06:1A:30:C1:88:E5:6F:74:BA:C3:E7:02:66:3D:B7:D6:55:F1:CB
Certificate issuer: /CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Certificate serial: 08B58536
Authority key identifier: 2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/EAYaMMGI5W90usPnAmY9t9ZV8cs.roa
Signing time: Sat 01 Jan 2022 00:53:07 +0000
ROA not before: Sat 01 Jan 2022 00:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50407
IP address blocks: 193.105.17.0/24 maxlen: 24
195.191.68.0/23 maxlen: 23
2001:67c:2e18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146113846 (0x8b58536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Validity
Not Before: Jan 1 00:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10061a30c188e56f74bac3e702663db7d655f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:49:dd:63:da:37:34:8d:0b:71:06:32:2a:
7b:8d:91:7c:52:5e:46:49:37:ab:95:55:c1:57:b5:
7e:d0:16:63:17:9b:67:5e:b1:2d:34:99:46:13:da:
48:b5:79:5b:78:c8:9a:c0:0b:d3:3e:7b:b8:77:1d:
9c:27:ff:f1:d7:16:7d:67:39:ba:2c:3c:d6:64:68:
39:e6:57:17:8b:a3:23:10:2c:91:d6:d6:29:56:e4:
8c:d3:b3:f5:8f:ec:e2:99:92:1e:d3:74:7c:2b:b6:
82:fb:74:0a:26:72:a8:73:3e:53:da:66:ac:c8:17:
66:1e:61:f3:5e:fd:08:9c:52:f1:60:51:ac:92:43:
5d:42:fb:6c:ff:a7:8c:fc:38:85:69:73:58:69:2b:
42:29:25:dd:91:a0:02:ca:5c:6e:25:04:3f:af:9f:
87:f5:05:90:a6:18:93:35:03:40:bf:51:41:81:6e:
1d:db:d2:95:30:7a:3e:2f:e0:9b:26:6b:7d:21:fd:
c6:71:59:08:ed:7d:9e:39:03:ca:00:75:3f:85:99:
b2:49:6a:3c:03:d2:b3:3c:4d:a8:ca:12:1b:1c:95:
da:cd:30:50:02:88:93:7b:e3:2c:30:37:b9:86:63:
e1:93:b5:c3:b5:1d:7e:dd:0a:7f:22:e5:70:30:3d:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:1A:30:C1:88:E5:6F:74:BA:C3:E7:02:66:3D:B7:D6:55:F1:CB
X509v3 Authority Key Identifier:
keyid:2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/EAYaMMGI5W90usPnAmY9t9ZV8cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.17.0/24
195.191.68.0/23
IPv6:
2001:67c:2e18::/48
Signature Algorithm: sha256WithRSAEncryption
8c:fd:0b:99:25:d0:ba:82:0f:e1:6f:71:46:f0:89:73:a0:ba:
e7:84:97:f9:69:97:cc:a1:e5:95:8a:89:ba:5c:1f:e7:19:95:
9c:c7:eb:97:db:75:c1:86:5b:69:6d:97:c7:a1:4a:60:2f:24:
89:9d:f2:67:28:1f:76:56:d8:cd:e9:eb:4b:41:77:c7:c5:6d:
42:d1:0e:de:21:6a:05:39:ba:df:ca:2b:51:c5:bd:74:bc:09:
0c:17:cc:49:6a:cb:72:82:b4:ea:48:ee:5b:6c:09:7b:f8:15:
b8:72:f5:b0:24:51:4f:76:4c:e9:a1:57:1a:6c:65:8e:cb:9d:
f3:4d:3b:87:63:fb:2f:4b:53:28:21:0a:f5:9b:b8:36:09:72:
96:c6:2e:e7:d3:7d:5e:d3:a6:c5:1c:37:fe:8b:58:52:19:c7:
d5:6f:e8:03:95:0a:24:c5:09:16:51:c9:a3:f6:a1:f8:04:ab:
a8:a2:46:00:0c:66:15:3c:09:ae:44:fc:f8:a7:c5:b8:69:43:
04:ba:51:1f:52:45:b8:d8:3e:73:5a:2d:00:a6:9c:4f:1a:82:
f5:81:b4:da:6e:42:0d:f4:6a:e9:d8:9a:3c:35:c5:aa:58:40:
99:e6:85:59:c3:71:5c:eb:55:21:71:54:b9:7c:00:dd:41:1c:
b6:88:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:47 2024 by rpki-client on console-ams.rpki-client.org