Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/EgQlBew_I1oTEAf0sCalPjMsQqI.roa
File: EgQlBew_I1oTEAf0sCalPjMsQqI.roa (raw, json)
Hash identifier: nVfkCrM7R4JVTfSfGhuin6C2WmCqBIJFpYY8YP7kRCI=
Subject key identifier: 12:04:25:05:EC:3F:23:5A:13:10:07:F4:B0:26:A5:3E:33:2C:42:A2
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0692DDBE
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/EgQlBew_I1oTEAf0sCalPjMsQqI.roa
Signing time: Tue 12 Apr 2022 19:02:40 +0000
ROA not before: Tue 12 Apr 2022 19:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 94.26.89.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110288318 (0x692ddbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Apr 12 19:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12042505ec3f235a131007f4b026a53e332c42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:03:d2:32:e9:0d:15:f2:77:0a:53:ea:24:
cd:ae:1e:9d:ef:28:77:e8:ee:d4:f3:7c:5e:24:fe:
79:49:f4:02:2f:a6:c2:cb:b7:1d:a8:1a:75:80:5f:
5a:4b:b2:78:01:33:5c:c2:0f:08:73:07:e7:9c:5b:
08:c8:13:ca:fe:31:11:aa:f4:9b:05:d8:bc:ca:4b:
72:80:b6:43:01:a7:99:89:00:5d:98:91:ef:8f:79:
b8:a3:6d:18:5a:b7:70:35:ee:41:f1:b1:b3:87:5f:
e0:30:4d:e2:fc:26:71:20:a1:2e:ed:90:dd:45:f7:
6a:2b:74:c0:6d:05:2a:32:df:5a:9f:eb:9f:44:74:
38:b3:d2:ef:c8:ad:bf:cd:c2:9d:4c:69:e0:aa:3b:
5d:52:46:3a:30:8d:6b:55:39:0e:91:96:b4:95:3a:
b6:92:0c:3e:ab:bb:81:63:5b:52:52:70:30:90:2f:
61:8d:b8:0d:0b:e9:53:ea:ff:66:50:11:40:95:f6:
a2:50:4e:57:68:dc:46:21:fd:36:e1:1f:cb:71:9d:
1d:94:58:5d:c5:39:e3:68:8e:22:4b:c3:b5:fc:a5:
65:04:68:ba:e2:a7:6e:4a:07:b1:ea:27:2e:46:91:
80:5f:bf:9f:f9:c9:21:cf:e8:75:be:63:27:40:62:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:25:05:EC:3F:23:5A:13:10:07:F4:B0:26:A5:3E:33:2C:42:A2
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/EgQlBew_I1oTEAf0sCalPjMsQqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.131.0/24
78.159.156.0/24
91.92.33.0-91.92.34.255
91.92.49.0/24
93.152.207.0-93.152.208.255
94.26.89.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:87:19:b6:f9:c9:93:71:13:db:d7:97:29:e3:e3:a7:3a:aa:
61:19:7c:7b:1a:59:45:a2:5a:f0:82:03:9b:65:52:52:06:92:
33:1a:5f:3a:0c:16:51:9a:a9:6e:62:f6:78:9b:3f:f8:e8:88:
75:8c:4d:99:5f:60:28:ba:f6:2d:5e:11:92:13:f3:91:9c:22:
68:d4:fb:01:2b:27:a5:fd:bd:8a:80:40:71:fe:76:b9:08:95:
15:89:d1:4f:6b:7f:6a:52:fe:be:3d:df:08:1a:8e:04:c7:9f:
16:72:d5:6e:9c:63:0d:4e:19:30:1a:f6:6e:8f:fe:9c:75:47:
e9:63:13:21:b2:42:b5:a7:02:1b:72:e4:a2:18:fc:00:57:48:
09:c7:01:b6:81:1f:da:72:3c:05:92:7e:2a:95:9a:ce:99:c1:
d7:2f:86:c2:39:1c:dc:84:5b:c5:75:5c:33:09:a1:cc:26:2a:
d0:2c:7a:89:d8:3f:d4:6f:41:f5:93:19:d9:f0:02:f6:e1:31:
8a:3c:6c:9e:b5:d0:b1:03:54:cf:21:9e:39:ba:c6:b6:d8:6b:
71:1a:61:8d:55:27:40:46:26:4c:13:26:8e:f3:11:84:f3:9c:
2a:b5:b5:b0:6c:94:42:67:6e:a3:b6:c3:f3:41:0e:e4:a1:b3:
e8:72:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org