Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/819XkJIUCJWaQoXg9tcTwbgLv3s.roa
File: 819XkJIUCJWaQoXg9tcTwbgLv3s.roa (raw, json)
Hash identifier: BEhxqI0pGUM4PtVVfWk4mffyymu/wGsfqNxUj+utN/c=
Subject key identifier: F3:5F:57:90:92:14:08:95:9A:42:85:E0:F6:D7:13:C1:B8:0B:BF:7B
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 01831721552E3F7B60DF1F9367CCC3940C9D
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/819XkJIUCJWaQoXg9tcTwbgLv3s.roa
Signing time: Wed 07 Sep 2022 08:46:43 +0000
ROA not before: Wed 07 Sep 2022 08:46:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12831
IP address blocks: 213.192.64.0/20 maxlen: 20
213.192.80.0/20 maxlen: 20
213.192.96.0/20 maxlen: 20
213.192.112.0/20 maxlen: 20
89.191.176.0/20 maxlen: 20
2001:4070:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:21:55:2e:3f:7b:60:df:1f:93:67:cc:c3:94:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Sep 7 08:46:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f35f5790921408959a4285e0f6d713c1b80bbf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:f2:f7:f1:b1:f9:38:51:92:b1:4a:5c:f5:
3a:34:77:ef:ee:80:99:9d:07:af:f7:ae:43:3f:a3:
d7:dd:26:5a:a8:6e:ae:af:92:0f:8c:6f:89:04:ed:
2d:33:7c:42:cb:d5:21:bb:cf:45:e3:82:8b:91:cd:
0c:e6:7f:32:a7:27:cb:a3:cb:b1:77:70:e9:38:7b:
fa:71:da:b9:cb:af:a7:69:be:de:9a:32:4e:e5:b8:
8f:8f:7e:19:a1:a7:66:34:46:71:92:9c:71:d0:e0:
e9:46:c8:2f:67:17:01:fc:80:19:03:30:6a:0f:54:
4b:14:d2:e5:b0:dd:c1:4d:50:e3:39:d9:db:31:65:
91:0a:fa:f9:ce:84:b8:23:34:ec:c4:06:e4:1e:d5:
99:02:b6:67:b8:88:99:a3:53:ec:3e:e8:ba:ea:5e:
7a:78:68:5f:cb:24:90:95:ea:16:64:67:a0:1e:e3:
df:a8:ec:2a:34:77:b7:03:51:be:97:64:5c:63:2e:
af:26:63:34:f4:86:92:49:d0:af:45:36:97:14:dd:
ce:80:aa:e0:33:88:08:e7:f5:79:01:07:54:5f:9f:
e2:8c:c3:7a:61:20:12:39:92:ae:7d:0d:80:c0:bd:
ad:dc:d5:11:0a:db:b2:e7:ef:2b:42:12:25:90:6c:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:57:90:92:14:08:95:9A:42:85:E0:F6:D7:13:C1:B8:0B:BF:7B
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/819XkJIUCJWaQoXg9tcTwbgLv3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.176.0/20
213.192.64.0/18
IPv6:
2001:4070:8000::/33
Signature Algorithm: sha256WithRSAEncryption
3c:b2:87:53:f5:a7:d7:38:fa:4c:e4:0c:22:5d:b4:9d:b8:c7:
0c:9b:5f:6c:48:ea:fa:26:13:a8:b6:5a:e8:07:59:65:fc:28:
8a:25:4f:54:6d:70:ed:6d:a3:15:8b:08:0b:8f:1f:96:de:b7:
30:2b:a2:2d:e2:99:e1:5c:ee:ab:b1:7e:85:0e:5c:2c:0d:35:
d8:10:e1:3a:4d:48:d5:57:60:34:9a:15:12:66:1e:14:06:15:
3e:3c:67:a9:77:71:d1:5c:b3:b8:af:7c:77:0f:34:5d:e7:70:
be:12:e4:a0:9b:fc:b6:d0:74:5b:81:5c:57:fb:6e:f8:09:eb:
c9:a0:65:ba:5c:14:b4:e4:2f:6f:8d:0e:d7:07:c7:69:12:71:
64:08:22:9b:45:a5:ce:94:7f:9e:3f:73:f1:8e:7f:2a:b6:05:
12:9e:56:71:8f:b6:9f:45:1c:ae:f2:19:00:11:d5:46:01:31:
c4:ed:0d:15:26:27:bc:fe:0d:1e:6d:98:bc:fa:19:9c:f6:e6:
07:5a:7a:52:23:0a:7a:a7:c5:8c:5b:a9:8e:9f:d2:7a:d6:57:
98:95:f0:f6:01:3f:ca:1c:e8:d7:0b:a3:8f:52:e8:ce:3d:97:
39:88:c7:9a:c7:85:e4:dd:3d:dc:30:7c:2b:fa:fa:64:38:4e:
7e:87:d5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org