Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/eRZagQV49jSgdjv7crCDBo2kBCM.roa
File: eRZagQV49jSgdjv7crCDBo2kBCM.roa (raw, json)
Hash identifier: isT/vvLcSRNnGQMn2Mj0GYnpX4LdajRLCTtr3UFn9cM=
Subject key identifier: 79:16:5A:81:05:78:F6:34:A0:76:3B:FB:72:B0:83:06:8D:A4:04:23
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 093FD0EC
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/eRZagQV49jSgdjv7crCDBo2kBCM.roa
Signing time: Wed 22 Jun 2022 09:49:44 +0000
ROA not before: Wed 22 Jun 2022 09:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57664
IP address blocks: 178.213.232.0/21 maxlen: 21
37.16.112.0/20 maxlen: 20
2a00:4cc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155177196 (0x93fd0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jun 22 09:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79165a810578f634a0763bfb72b083068da40423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:ad:48:f4:d6:cf:df:cd:be:b7:87:cc:a9:
fe:76:b6:29:46:32:40:14:ac:b2:c0:12:a4:22:d1:
6c:cc:9b:cb:f7:5e:cf:cb:17:61:55:b3:3a:f2:fb:
5e:80:98:79:c9:89:bc:70:b6:e9:3a:4f:0d:15:fb:
ce:52:c6:ab:e0:50:d4:e3:1d:ee:c3:8c:46:09:df:
bd:f2:49:79:89:71:d5:74:69:b4:49:3d:13:30:05:
ea:c8:bf:dc:4b:a9:b7:30:e0:f9:61:4e:42:7c:63:
83:74:65:10:33:7e:21:26:88:08:fe:77:c1:b9:8a:
41:01:cb:d6:e4:f6:22:c6:a1:9e:5a:79:f1:50:a4:
9c:86:1a:7f:42:96:1b:86:39:e6:4d:ba:67:50:77:
63:e0:85:dd:a1:df:59:bc:c4:23:88:1d:32:6f:f5:
77:44:42:61:ec:c3:ee:19:d8:1e:55:1e:17:38:48:
66:69:fd:ec:ee:53:4f:e3:6c:cc:6b:1c:18:df:22:
76:20:1f:09:26:f0:2a:38:20:f6:c8:1c:b6:e8:f9:
6b:5a:6d:43:7b:e0:77:a5:c6:41:a2:17:02:b0:55:
88:44:2a:c4:e6:6a:b8:aa:cb:3d:59:3e:ad:d8:6a:
f7:39:5e:82:a1:65:42:0a:90:00:8e:a2:fb:d3:71:
7a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:16:5A:81:05:78:F6:34:A0:76:3B:FB:72:B0:83:06:8D:A4:04:23
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/eRZagQV49jSgdjv7crCDBo2kBCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.112.0/20
178.213.232.0/21
IPv6:
2a00:4cc0::/32
Signature Algorithm: sha256WithRSAEncryption
52:23:ce:94:44:4e:4f:0a:93:79:36:0a:fd:15:2b:87:38:90:
6a:2f:2b:9f:3a:bf:5c:2f:78:53:d0:81:c4:ea:60:b8:58:19:
b2:ac:fd:3b:20:bb:b2:f8:1b:08:ad:66:78:ef:5f:fa:8b:b3:
db:18:24:18:12:20:3d:c3:22:fd:33:0c:4c:2c:d2:13:3a:bb:
be:5a:02:ce:00:7a:58:20:f6:f8:a1:e0:7e:ad:99:1f:25:df:
a2:4e:4c:b9:9b:8b:38:7b:bd:ef:d2:29:66:5f:46:c3:75:54:
ec:d6:2f:a7:8b:5f:e5:db:d5:e6:91:b5:50:62:4f:e4:6e:6d:
aa:55:e5:52:7f:8b:ff:40:9c:d7:62:99:66:79:65:96:10:fc:
74:a0:88:57:36:05:23:22:9b:3d:40:61:17:fb:e7:01:d9:09:
87:4c:22:f1:2a:59:8d:32:62:77:7e:03:74:f5:5f:58:94:7f:
6e:3c:5e:90:7c:08:b0:56:b1:e2:02:a6:4a:56:bc:ca:18:4c:
81:42:f2:cb:cd:05:b2:ee:0e:4e:2b:a9:33:61:66:b7:a6:59:
08:05:2c:b4:f0:20:63:54:75:0e:e9:26:83:19:6e:98:aa:53:
20:24:b4:ce:bc:10:e8:88:da:a8:fd:5c:a3:b4:ed:c4:3c:38:
12:de:d2:59
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECT/Q7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODc0ZTQ2YmY2MzZlYTYzZTVkMTIzNjJmNTUxYjgwYjI3NzE0NzgwMB4XDTIyMDYy
MjA5NDk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkxNjVhODEwNTc4
ZjYzNGEwNzYzYmZiNzJiMDgzMDY4ZGE0MDQyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANKrrUj01s/fzb63h8yp/na2KUYyQBSsssASpCLRbMyby/de
z8sXYVWzOvL7XoCYecmJvHC26TpPDRX7zlLGq+BQ1OMd7sOMRgnfvfJJeYlx1XRp
tEk9EzAF6si/3EuptzDg+WFOQnxjg3RlEDN+ISaICP53wbmKQQHL1uT2Isahnlp5
8VCknIYaf0KWG4Y55k26Z1B3Y+CF3aHfWbzEI4gdMm/1d0RCYezD7hnYHlUeFzhI
Zmn97O5TT+NszGscGN8idiAfCSbwKjgg9sgctuj5a1ptQ3vgd6XGQaIXArBViEQq
xOZquKrLPVk+rdhq9zlegqFlQgqQAI6i+9NxekECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR5FlqBBXj2NKB2O/tysIMGjaQEIzAfBgNVHSMEGDAWgBQodORr9jbqY+XR
I2L1UbgLJ3FHgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tIVGthX1kyNm1QbDBTTmk5Vkc0Q3lkeFI0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvZWRkYzA1LTQwMmQtNGRhNy05N2VmLWMxMGRhNmFhYzFiMS8x
L2VSWmFnUVY0OWpTZ2RqdjdjckNEQm8ya0JDTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
ZWRkYzA1LTQwMmQtNGRhNy05N2VmLWMxMGRhNmFhYzFiMS8xL0tIVGthX1kyNm1Q
bDBTTmk5Vkc0Q3lkeFI0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBCUQcAMEA7LV6DANBAIAAjAHAwUA
KgBMwDANBgkqhkiG9w0BAQsFAAOCAQEAUiPOlEROTwqTeTYK/RUrhziQai8rnzq/
XC94U9CBxOpguFgZsqz9OyC7svgbCK1meO9f+ouz2xgkGBIgPcMi/TMMTCzSEzq7
vloCzgB6WCD2+KHgfq2ZHyXfok5MuZuLOHu979IpZl9Gw3VU7NYvp4tf5dvV5pG1
UGJP5G5tqlXlUn+L/0Cc12KZZnlllhD8dKCIVzYFIyKbPUBhF/vnAdkJh0wi8SpZ
jTJid34DdPVfWJR/bjxekHwIsFax4gKmSla8yhhMgULyy80Fsu4OTiupM2Fmt6ZZ
CAUstPAgY1R1DukmgxlumKpTICS0zrwQ6IjaqP1co7TtxDw4Et7SWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org