Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/EOyQRXPnXxR3GXjZ-1wJbuHKfCA.roa
File: EOyQRXPnXxR3GXjZ-1wJbuHKfCA.roa (raw, json)
Hash identifier: V5dEd02635aqROu32WZh3gsIakVi8cpm9I4TuojJMag=
Subject key identifier: 10:EC:90:45:73:E7:5F:14:77:19:78:D9:FB:5C:09:6E:E1:CA:7C:20
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0E58C888
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/EOyQRXPnXxR3GXjZ-1wJbuHKfCA.roa
Signing time: Sat 01 Jan 2022 16:11:37 +0000
ROA not before: Sat 01 Jan 2022 16:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25389
IP address blocks: 217.12.81.0/24 maxlen: 24
217.12.85.0/24 maxlen: 24
217.12.80.0/24 maxlen: 24
217.12.84.0/24 maxlen: 24
217.12.83.0/24 maxlen: 24
217.12.82.0/24 maxlen: 24
217.12.88.0/24 maxlen: 24
217.12.87.0/24 maxlen: 24
217.12.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240699528 (0xe58c888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Jan 1 16:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ec904573e75f14771978d9fb5c096ee1ca7c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:46:fe:22:6c:aa:fa:b5:ce:12:f0:73:19:
87:85:c7:9c:dd:ce:d4:45:43:b0:9b:5e:7a:f0:37:
47:d7:2c:36:45:00:ed:55:d5:ce:cb:c3:47:5a:48:
52:a8:a9:db:a5:62:05:b0:cb:9e:1e:b7:4b:eb:60:
73:09:3c:8d:c0:81:a9:df:49:9b:e0:fa:96:77:e8:
5c:cd:5f:3f:ac:45:76:7b:16:d5:6d:57:d1:45:f5:
76:1c:ea:27:e5:77:ee:71:64:26:83:41:bb:c9:f5:
ed:f2:a8:ce:61:a3:1c:a1:fb:83:34:af:9e:bd:27:
17:3c:e2:18:9b:b9:fa:4f:35:01:64:01:c9:05:4a:
8e:a0:ca:53:1f:5c:a3:ea:00:ea:b7:31:19:0a:77:
72:bd:e2:04:30:18:9a:1a:6c:1b:e6:c0:6b:bb:af:
3d:17:77:2a:a9:20:31:ed:ae:63:79:70:d0:5f:a5:
6f:aa:6a:70:eb:f3:51:b8:14:33:28:ea:41:fb:0a:
18:d5:bc:30:2c:45:04:15:16:9e:21:37:60:17:df:
fa:91:f7:31:45:92:cd:bf:9c:33:3a:24:bb:c9:74:
ec:a9:ed:a0:92:b8:35:ee:17:d4:1b:a7:fe:21:17:
be:97:c9:b5:0d:9a:fa:e9:e1:7d:14:b5:14:66:c5:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:90:45:73:E7:5F:14:77:19:78:D9:FB:5C:09:6E:E1:CA:7C:20
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/EOyQRXPnXxR3GXjZ-1wJbuHKfCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.80.0-217.12.88.255
Signature Algorithm: sha256WithRSAEncryption
4c:e8:c1:bb:fd:63:ce:5a:97:59:75:f3:61:e5:ef:76:e9:7b:
c1:fd:1d:bc:10:da:9b:1f:cc:94:37:a1:bf:8e:ae:11:41:9a:
da:49:96:53:a9:06:5e:9a:35:f6:4d:22:46:ef:0e:31:18:82:
5c:a9:04:b3:d7:2d:ba:30:ba:06:3a:dd:03:35:8b:f0:d2:42:
44:cd:fd:3d:56:24:91:82:dd:57:2a:0b:be:c2:af:41:41:f2:
f5:bc:f6:37:d5:9b:a1:a0:4a:ce:4e:02:7e:34:c9:5f:f2:70:
e5:bc:35:e0:6b:2e:36:43:f2:3d:85:63:29:dd:ad:f0:fb:ac:
02:be:05:7f:53:85:df:04:70:e4:8b:dd:89:6b:08:6b:a3:44:
bd:57:3a:e2:6b:77:a5:44:30:e4:67:ee:f4:fe:ba:e4:81:69:
2d:c6:ed:98:1a:f6:0e:8a:bb:62:da:a9:4a:8c:70:5f:cb:60:
c0:49:5c:b7:a4:ad:0a:db:41:e1:f6:ca:3c:34:8e:74:92:15:
b0:d9:41:ea:42:7a:3d:95:a7:97:e3:76:8d:66:82:0b:29:22:
92:39:cb:bd:3a:8d:b0:f3:fe:87:8a:03:2f:37:20:56:62:82:
9a:5d:25:d0:77:84:a5:b9:74:88:87:61:b8:1d:98:64:bb:5a:
7c:b9:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:55 2023 by rpki-client on console-ams.rpki-client.org