Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/k313wEIkqfMmLDOJZGP2vhy9ECk.roa
File: k313wEIkqfMmLDOJZGP2vhy9ECk.roa (raw, json)
Hash identifier: +p7xxgtUSRIu4DFc1TGuaXV31ECbN+t7xG62JfALI4Q=
Subject key identifier: 93:7D:77:C0:42:24:A9:F3:26:2C:33:89:64:63:F6:BE:1C:BD:10:29
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 0AF3845D
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/k313wEIkqfMmLDOJZGP2vhy9ECk.roa
Signing time: Sat 01 Jan 2022 11:02:05 +0000
ROA not before: Sat 01 Jan 2022 11:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31611
IP address blocks: 80.66.208.0/20 maxlen: 24
46.17.152.0/21 maxlen: 24
178.218.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183731293 (0xaf3845d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Jan 1 11:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=937d77c04224a9f3262c33896463f6be1cbd1029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:2d:af:9e:18:f5:84:94:87:04:da:23:0b:
a0:20:74:80:56:26:94:29:8e:38:35:74:54:fe:dd:
14:c0:94:ff:a3:56:0f:5f:a9:23:19:95:fc:13:63:
01:d4:11:6c:3b:2f:ea:2e:6e:d5:5c:2d:b8:41:4f:
24:42:e1:94:e8:69:72:b2:b6:29:41:d9:b4:1a:29:
a2:88:77:66:79:e1:9a:47:c1:0c:77:a1:0f:06:c4:
93:20:b6:4e:5d:e7:b5:4a:98:98:b8:d3:c1:0a:05:
da:b9:e2:a2:d0:2d:9a:5e:8f:6e:f0:1e:1e:de:ee:
d3:71:2c:c8:80:9c:8f:e0:df:ff:66:f5:7f:3d:63:
3f:93:ec:08:0c:8f:fd:b5:bf:28:05:e9:3a:47:32:
78:c6:4e:6c:43:2f:2d:11:c8:e1:01:a1:c1:3d:d4:
5c:ca:2d:10:a4:cd:a7:04:3a:7f:69:60:22:6f:0a:
a0:99:ad:32:d8:86:b0:ef:ab:73:a1:94:95:37:a0:
29:5c:ef:68:ae:d3:c2:ac:69:39:a4:ca:1a:4c:17:
ef:25:7f:b5:84:18:95:54:4a:2d:43:98:fb:0f:ee:
c0:92:75:d2:3c:8b:86:5d:dc:f2:2a:58:df:4d:48:
b3:bc:0a:aa:7b:33:60:8a:03:a2:6b:49:c9:d8:94:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:77:C0:42:24:A9:F3:26:2C:33:89:64:63:F6:BE:1C:BD:10:29
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/k313wEIkqfMmLDOJZGP2vhy9ECk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.152.0/21
80.66.208.0/20
178.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:87:64:6d:0a:56:f5:e3:d5:2b:a0:39:ca:a1:47:16:70:de:
55:79:25:3e:a9:e0:fd:e6:2f:e0:d0:4e:92:4e:69:6e:9e:9d:
fe:f2:ec:3a:70:e6:6c:46:65:ba:e6:6f:b5:d1:0c:0e:a8:b5:
bd:b1:d9:07:0c:35:20:22:02:82:e5:58:54:cf:ee:12:16:42:
ce:a2:9d:58:d6:77:b1:58:91:0e:44:50:dc:bd:80:4c:d2:68:
eb:5a:8c:d1:92:d6:7d:9d:40:b8:51:68:c5:10:59:60:85:c8:
2d:b5:ce:3a:e2:8d:a2:5a:79:a2:a3:ed:ad:6f:a8:5d:93:49:
11:4a:37:35:43:df:56:1a:ca:7b:0e:78:c1:0e:d1:a7:c9:9c:
7c:76:6b:89:a7:82:f6:9e:b4:93:c5:01:6d:3b:f7:76:9a:c0:
54:97:b9:87:25:f2:a2:a3:03:4f:25:67:87:7c:34:06:72:6a:
a9:7f:8a:04:42:38:e5:85:cb:b1:d6:87:cb:65:e7:ee:ea:63:
8a:9f:5e:c6:de:f0:51:87:b9:0d:1c:be:57:fd:d6:0c:f8:a2:
b4:ab:66:e5:f8:bb:1d:5c:eb:4d:01:85:74:16:31:37:b9:34:
60:fd:47:1f:0f:dd:f1:59:0f:34:5d:37:96:6e:2d:97:23:59:
bb:35:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org