Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/EB6-wiLtgQ7Vi9sOPtZ2s7cmcRI.roa
File: EB6-wiLtgQ7Vi9sOPtZ2s7cmcRI.roa (raw, json)
Hash identifier: sqlLVTcI12rQE0kvJphjOUGoBhl96/0Hp34NhvVhYWQ=
Subject key identifier: 10:1E:BE:C2:22:ED:81:0E:D5:8B:DB:0E:3E:D6:76:B3:B7:26:71:12
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 018443232DA3861E8829E0EC8DC83B5560EE
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/EB6-wiLtgQ7Vi9sOPtZ2s7cmcRI.roa
Signing time: Fri 04 Nov 2022 14:54:49 +0000
ROA not before: Fri 04 Nov 2022 14:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8680
IP address blocks: 185.87.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:23:2d:a3:86:1e:88:29:e0:ec:8d:c8:3b:55:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Nov 4 14:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=101ebec222ed810ed58bdb0e3ed676b3b7267112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:e3:91:c7:30:3c:25:21:d2:37:d7:27:b7:
54:3f:92:f0:c5:83:0c:f4:09:9d:3e:fd:0a:ec:d7:
24:c5:a5:e2:cd:5c:73:52:81:b0:eb:52:dc:9f:47:
55:35:5f:5d:53:28:ef:27:67:d1:91:3a:cd:49:a3:
07:1c:b9:c0:b9:d9:a8:d2:42:61:a6:20:a3:b5:6e:
3d:30:e9:a9:16:a7:4b:1c:69:00:f9:3b:88:4e:98:
36:11:5e:53:d4:ee:09:71:0e:3c:62:2c:68:99:d2:
25:87:ad:23:9b:1c:b1:ce:c2:b5:5b:00:d8:8c:00:
6a:c1:f3:2b:3c:c3:b3:de:79:24:73:a7:fd:ed:9b:
25:32:27:17:48:07:94:ff:64:85:29:55:68:e0:94:
31:67:8b:fb:de:10:44:a5:5c:a2:00:69:b1:d6:86:
b6:9c:24:79:26:38:f5:67:3d:05:86:05:85:69:5a:
6d:ed:4e:3b:d7:d1:37:f7:76:26:28:7b:45:50:8d:
00:09:cf:f0:0f:cc:c7:68:85:8b:a8:34:41:e6:50:
2a:82:0a:f1:46:76:9e:5c:e7:1d:35:a5:be:ad:50:
2c:85:49:ca:32:a9:38:f9:8b:22:5c:2c:b0:59:cb:
09:19:17:45:af:c0:73:83:e7:f7:eb:85:3b:65:da:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:BE:C2:22:ED:81:0E:D5:8B:DB:0E:3E:D6:76:B3:B7:26:71:12
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/EB6-wiLtgQ7Vi9sOPtZ2s7cmcRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.144.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:bb:8a:e1:e6:11:f3:f1:f9:62:b6:af:97:34:a0:de:e0:c7:
4c:1d:ca:a4:3e:85:01:ff:af:c0:22:99:2e:16:2d:2d:69:c7:
fc:dc:44:c7:4d:fc:53:98:02:c3:46:c3:da:8e:01:52:30:09:
7b:37:6d:8e:43:6c:5a:93:30:46:a4:ac:d4:46:a5:ba:e2:fe:
1f:be:d5:e8:cd:d4:73:02:25:8f:dd:00:73:37:c9:74:a6:cb:
84:35:fc:09:31:2b:a6:5a:fb:1f:12:08:6c:a7:cb:06:7d:cd:
96:a1:02:29:34:f6:07:7b:ca:40:0c:7c:5f:7f:14:00:f7:ca:
49:0f:69:64:01:de:20:4a:fc:f1:a8:70:09:5c:2e:e7:b8:6a:
a9:2a:c8:b4:69:67:54:99:9c:26:41:14:ee:89:f3:e6:18:d5:
47:6b:05:dc:56:d9:c4:58:93:35:52:7f:63:6d:9c:57:4f:f1:
4a:3c:7d:6b:8a:46:27:d3:49:7d:8c:ea:ed:31:f9:c3:d1:3c:
24:b2:98:0f:ef:44:89:d0:b6:d5:df:27:3e:b8:64:21:21:b4:
52:6f:db:87:d9:c7:d5:aa:67:05:b8:39:6e:f5:ce:e6:16:aa:
f8:d6:69:d7:7e:9b:c1:b0:84:8e:9c:92:c6:0d:8b:b5:8d:f0:
f5:69:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:29 2024 by rpki-client on console-ams.rpki-client.org