Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/YIzbP--hI-7z4IVEKYCVeWrqIWI.roa
File: YIzbP--hI-7z4IVEKYCVeWrqIWI.roa (raw, json)
Hash identifier: 0lv3PyYCpsZ9ncaU0i1wIJhTOGo34fXJxEJ6NpHW+6Q=
Subject key identifier: 60:8C:DB:3F:EF:A1:23:EE:F3:E0:85:44:29:80:95:79:6A:EA:21:62
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0183172156BA6BB947CD3BF7E9BBA3C5B32A
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/YIzbP--hI-7z4IVEKYCVeWrqIWI.roa
Signing time: Wed 07 Sep 2022 08:46:44 +0000
ROA not before: Wed 07 Sep 2022 08:46:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50828
IP address blocks: 213.192.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:21:56:ba:6b:b9:47:cd:3b:f7:e9:bb:a3:c5:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Sep 7 08:46:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=608cdb3fefa123eef3e08544298095796aea2162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:12:9a:40:45:4b:b6:02:9a:fc:40:e9:4e:
0b:29:0d:ab:0c:5b:3c:b7:1d:45:2d:aa:3b:45:f8:
03:21:2e:95:3b:dc:b5:bf:c2:63:6f:10:3e:b6:3d:
99:90:4c:6b:df:4a:f4:f4:60:d7:e3:5c:d5:45:2b:
ab:13:92:a8:4c:37:57:df:fe:89:31:4a:00:2f:fa:
61:07:35:28:69:1e:2e:db:44:5b:6d:12:8f:64:52:
35:75:7a:eb:60:84:f2:f5:2a:63:d9:2a:f5:31:8a:
47:66:6b:d7:c0:0a:0a:f7:7e:b0:cc:e3:90:0b:0b:
34:ec:54:82:5f:06:84:8c:cc:28:8f:cc:34:7f:64:
fe:03:97:83:8d:f9:1b:af:85:0d:d4:bf:59:18:32:
6e:95:a3:01:27:0d:25:73:ba:ab:60:f5:07:a6:48:
04:42:9e:0d:74:9b:a3:8b:cc:dd:f0:8a:cc:47:e4:
ff:5a:9c:00:29:95:98:ab:06:a8:0d:60:72:7e:aa:
de:d2:d8:5b:37:84:84:74:69:09:3c:ea:69:ab:aa:
db:d0:91:6f:e8:0b:fe:66:e5:ac:c4:c7:58:6a:f9:
b1:07:1a:4b:0e:26:2d:8c:e6:b6:a6:72:76:35:b1:
28:43:c2:ca:20:aa:d6:d0:cb:2b:13:12:c5:a9:51:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:DB:3F:EF:A1:23:EE:F3:E0:85:44:29:80:95:79:6A:EA:21:62
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/YIzbP--hI-7z4IVEKYCVeWrqIWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9b:4a:02:19:1a:04:1d:f8:7f:5f:ff:9b:d1:4a:85:8d:94:
83:f0:6a:c3:4e:00:e5:8a:29:8c:75:74:21:d8:9b:a6:1b:29:
47:c0:81:26:b4:ec:b5:47:db:15:1c:39:44:5f:35:3e:ef:e5:
23:1c:c9:6f:d7:ad:1d:73:4d:3d:ce:ee:3c:e4:ad:07:50:3d:
4d:2a:15:7f:47:ef:fd:c7:87:09:b3:9e:75:81:d2:e7:dd:a1:
7e:9e:17:23:9e:9a:4d:13:bd:5a:6e:e7:6e:e6:10:7e:fe:e2:
a2:78:f5:5c:2a:1f:94:b4:4e:5c:3d:bd:e7:89:a9:33:b4:a9:
80:35:13:5f:e0:5d:91:68:5d:27:36:78:09:33:1c:5b:18:e9:
00:5a:9a:6a:3b:60:b3:25:62:e6:18:e1:f9:6b:04:d6:99:6d:
9e:23:ec:b2:f9:81:8e:43:a5:00:75:63:09:d7:52:70:2a:be:
8e:d5:95:c1:34:bd:aa:fb:0c:a1:a1:fe:e1:22:fc:a8:8d:9b:
1e:5f:57:21:66:0d:03:7e:fc:c7:ed:80:3e:fc:da:95:6c:15:
11:51:54:3e:b0:ad:0b:09:37:fc:0b:c6:95:c6:0a:f6:67:cd:
48:9c:5f:af:ba:45:af:a3:42:9e:9d:57:ba:1b:36:1f:a7:e3:
23:2a:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org