Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/EAcMeAMAO3Ab23A308CBJ-1xazQ.roa
File: EAcMeAMAO3Ab23A308CBJ-1xazQ.roa (raw, json)
Hash identifier: ISPhCWWQrE84iVAnLITdR38GV8X8FeRdNYT356Gpe68=
Subject key identifier: 10:07:0C:78:03:00:3B:70:1B:DB:70:37:D3:C0:81:27:ED:71:6B:34
Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial: 0182EEA8E6250F93E6F113B41C810257358B
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/EAcMeAMAO3Ab23A308CBJ-1xazQ.roa
Signing time: Tue 30 Aug 2022 12:10:22 +0000
ROA not before: Tue 30 Aug 2022 12:10:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203584
IP address blocks: 193.58.217.0/24 maxlen: 24
193.58.216.0/24 maxlen: 24
91.206.86.0/24 maxlen: 24
91.206.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:a8:e6:25:0f:93:e6:f1:13:b4:1c:81:02:57:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Validity
Not Before: Aug 30 12:10:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10070c7803003b701bdb7037d3c08127ed716b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:5d:64:e7:b9:05:5d:1e:58:8b:01:30:cd:
00:12:02:9d:a7:13:68:f6:34:77:38:de:f3:af:d1:
8f:d2:5c:71:70:84:62:07:92:9b:c4:5d:b2:57:45:
4d:76:e5:ef:b0:87:1d:cb:66:81:d6:a7:0d:d2:0f:
79:93:be:a9:85:74:f7:82:6c:7b:af:d0:9d:97:e8:
57:2d:42:b7:03:fd:cf:58:05:7a:b7:83:ee:73:7c:
2f:f1:ff:16:d3:85:4e:94:55:26:46:c4:7c:a8:d4:
2f:b8:d2:3e:16:63:47:bc:9a:58:a0:72:52:1c:a3:
e5:df:70:79:f6:2d:64:c3:ba:cc:89:65:34:a5:6e:
e0:eb:b0:c9:88:02:4d:63:b7:30:a1:50:24:82:30:
fa:76:f1:cb:a7:42:df:03:e2:66:1d:73:17:fa:e9:
34:16:6e:98:14:5c:cc:a6:00:02:01:03:8f:cb:d8:
a9:87:7e:52:27:6a:09:be:09:29:9d:ff:6f:a6:0d:
c6:44:e1:b6:7b:8f:89:ea:9d:57:9a:0d:08:a6:6e:
48:2f:ba:4a:bb:33:61:8e:e0:4e:71:d6:26:3b:e8:
56:2f:4c:26:c5:15:4a:18:4a:cb:e7:f2:7c:11:8d:
31:6c:46:f1:a2:c9:1d:d7:d2:ce:c3:c1:f2:a8:27:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:07:0C:78:03:00:3B:70:1B:DB:70:37:D3:C0:81:27:ED:71:6B:34
X509v3 Authority Key Identifier:
keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/EAcMeAMAO3Ab23A308CBJ-1xazQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.86.0/23
193.58.216.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9d:fb:9b:b3:fc:a7:b4:c2:e9:6e:9b:f8:6b:ee:bc:4d:b4:
ce:57:ed:ce:c7:91:21:6f:7b:23:3c:b7:71:7d:d1:b2:84:39:
62:d3:e7:0f:9c:15:4c:d0:9c:c1:2c:11:18:c1:7b:6b:3d:fe:
a4:90:54:1d:81:07:5c:61:a2:1f:97:d0:ec:e7:33:d4:52:28:
4f:1a:22:d9:1d:4c:4d:5f:e4:bd:fd:6c:1b:b2:23:be:bd:25:
df:46:f7:ff:c5:dd:ff:fc:60:9b:b2:73:02:16:ec:ac:d0:a5:
b9:ed:69:01:3f:6b:7c:a0:36:92:de:1a:1b:4d:a4:4a:81:3d:
8d:de:09:48:81:0a:35:25:7b:db:ad:5f:46:fd:3a:ee:b4:9e:
6d:fa:60:5d:c7:15:b0:65:17:e6:05:c4:fb:62:19:58:a7:9c:
c8:ca:94:eb:81:7d:9f:9d:23:3a:84:e2:c1:00:ba:0f:05:85:
36:2d:02:da:1a:c1:2b:8e:74:f9:ec:bb:ef:04:08:83:a6:0b:
ed:9f:67:3c:e0:96:8c:4f:f6:8b:58:c7:89:b3:c7:fd:6f:2e:
e9:6e:ad:11:3c:64:36:ae:92:d5:59:be:ba:ec:63:4a:b1:6b:
a9:7f:c5:05:b8:37:4f:b1:bd:16:83:9b:c9:b5:84:6f:78:cb:
79:0a:e9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:58 2023 by rpki-client on console-ams.rpki-client.org