Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/enE1WMuYnVfzP9ANqnzv9oW1OKg.roa
File: enE1WMuYnVfzP9ANqnzv9oW1OKg.roa (raw, json)
Hash identifier: NMa9yIxERr7Cr3YY/SYkYAD69Csfk+OiYT1uWpkNBO8=
Subject key identifier: 7A:71:35:58:CB:98:9D:57:F3:3F:D0:0D:AA:7C:EF:F6:85:B5:38:A8
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 0185052FDF57C65C0A75677669E9C2F80648
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/enE1WMuYnVfzP9ANqnzv9oW1OKg.roa
Signing time: Mon 12 Dec 2022 07:15:01 +0000
ROA not before: Mon 12 Dec 2022 07:15:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50090
IP address blocks: 217.74.24.0/24 maxlen: 24
217.74.27.0/24 maxlen: 24
217.74.28.0/24 maxlen: 24
217.74.25.0/24 maxlen: 24
217.74.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:2f:df:57:c6:5c:0a:75:67:76:69:e9:c2:f8:06:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Dec 12 07:15:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a713558cb989d57f33fd00daa7ceff685b538a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:42:99:d0:fb:b9:7b:ee:74:83:71:f6:eb:80:
b9:21:a6:0d:1c:62:fa:33:0e:7e:c1:14:27:74:02:
78:c3:bb:26:c5:4c:7b:db:d9:e2:4c:a1:d7:7f:e7:
d4:d9:ad:43:fb:51:7a:dc:ca:f8:7e:ae:06:75:5d:
71:6b:71:16:c8:06:c5:db:78:84:8f:87:c0:53:83:
df:b4:81:23:65:c8:5d:33:92:8d:8d:58:db:b4:9e:
63:ed:2a:6a:a2:40:0c:7c:55:59:92:66:ec:3d:6c:
5d:0e:10:d6:fb:a9:af:27:06:f5:2c:d6:b2:70:c4:
bd:34:2a:9c:f0:0e:b8:24:26:87:6a:26:d6:4f:f8:
ee:4c:87:4c:90:6f:24:c0:2f:08:a9:95:97:bf:0f:
b4:58:8e:99:9e:73:f2:56:f8:56:cf:2e:71:74:5a:
4d:e8:de:ec:41:6a:ad:88:f8:e9:72:2e:73:b3:2a:
c1:08:1e:a7:42:ab:5d:aa:b7:84:7f:ff:b9:ee:ed:
bb:4a:f6:ba:b3:71:c3:76:01:7b:37:b3:33:be:f4:
88:67:d3:63:8d:c0:09:1b:a1:f4:93:66:3c:b1:3f:
df:14:5f:83:30:92:8f:77:a1:a7:34:fc:92:07:07:
21:b0:33:a1:16:d8:13:54:45:57:26:ac:55:97:9c:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:71:35:58:CB:98:9D:57:F3:3F:D0:0D:AA:7C:EF:F6:85:B5:38:A8
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/enE1WMuYnVfzP9ANqnzv9oW1OKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.24.0-217.74.28.255
Signature Algorithm: sha256WithRSAEncryption
13:1a:ac:38:78:ca:ff:e7:67:8a:13:97:db:14:b2:97:80:51:
b8:bc:61:9e:39:be:31:27:3c:5f:8d:82:65:99:cf:03:36:29:
c7:28:b3:f9:c4:99:1d:be:e5:4c:ea:25:4f:a2:35:0c:4b:8b:
1f:e6:5f:85:99:72:65:40:1b:f0:c9:86:5d:60:48:b7:96:49:
9e:4b:9b:8b:79:65:73:a2:c1:f6:85:de:a4:86:9e:e8:60:a8:
e8:28:bc:46:65:8f:6a:d2:69:62:9c:c4:b8:43:12:b7:a6:2a:
97:12:12:6d:a6:a6:e4:25:dd:94:69:bc:e0:90:e4:8a:ec:bb:
dd:b3:55:87:60:07:6f:a0:28:fe:1d:2e:64:94:99:da:64:40:
9f:a8:b1:05:8a:4d:62:5b:1a:16:53:f7:01:1d:92:64:b8:5d:
f7:6a:f6:38:ac:c0:30:25:81:b3:12:cb:b8:5c:fd:55:05:68:
89:bc:0e:84:f0:7c:46:d5:42:8d:75:48:a3:6d:e0:55:5b:b8:
cf:db:e2:83:cb:fb:ad:01:61:5d:5a:91:57:4b:ab:01:b2:78:
72:54:0f:34:36:59:4b:96:94:4d:43:1e:f0:bf:a3:ef:99:a4:
4b:8e:1e:56:3e:c6:b1:dd:8d:87:a2:bc:11:6c:fd:d7:a0:bf:
ac:a5:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org