Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/ebeCSacMgFzQTgWhWzthA62fmn0.roa
File: ebeCSacMgFzQTgWhWzthA62fmn0.roa (raw, json)
Hash identifier: TRL3aGo7v1QqhQVgzCBBINpcH6OGFWfRXSlN6YR59eo=
Subject key identifier: 79:B7:82:49:A7:0C:80:5C:D0:4E:05:A1:5B:3B:61:03:AD:9F:9A:7D
Certificate issuer: /CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Certificate serial: 0AE57FD0
Authority key identifier: 15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/ebeCSacMgFzQTgWhWzthA62fmn0.roa
Signing time: Sat 01 Jan 2022 08:55:58 +0000
ROA not before: Sat 01 Jan 2022 08:55:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43012
IP address blocks: 160.20.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182812624 (0xae57fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1582eec4b34738df718da9e0143a9d0e9241a85c
Validity
Not Before: Jan 1 08:55:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79b78249a70c805cd04e05a15b3b6103ad9f9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3c:f0:46:2a:54:aa:51:f6:16:20:b5:75:70:
8c:b3:1a:dd:73:83:68:cb:6f:2b:a3:dd:fc:92:06:
a4:28:58:9e:52:ec:09:38:cf:1e:c1:3a:6c:21:86:
5a:1e:45:4e:6f:c2:d6:c8:e8:77:55:7c:75:2a:48:
34:aa:5e:5c:63:35:67:74:e3:b9:b7:36:0e:45:80:
87:02:ee:03:88:79:a0:40:b7:1c:29:62:f7:58:b0:
2f:bf:b1:bc:61:89:08:e9:c6:c2:fb:1e:ba:60:c3:
fb:9a:f3:50:46:08:6e:06:6c:30:25:b6:59:97:98:
71:08:01:ac:2a:28:58:f0:0f:c6:1c:2f:a7:f1:93:
ca:ed:52:22:d6:3a:3c:be:76:16:f5:65:d0:4a:2d:
01:37:ec:4e:df:58:0f:db:2c:b2:a0:12:51:b4:e3:
40:ca:31:72:40:1f:34:0b:60:db:a0:6c:dd:54:4d:
7e:9a:62:a0:90:00:89:f9:76:41:da:1d:26:be:2d:
da:4f:55:38:7d:83:ca:0c:76:49:ff:df:b0:c9:f8:
f0:e2:9b:87:bb:0e:8a:3f:17:9c:b8:83:f7:d4:bd:
7f:d9:6b:d1:0a:41:88:5e:ff:67:aa:97:e9:9e:58:
85:ad:a4:90:51:e2:5c:d1:33:c7:ed:d8:a8:f1:94:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:82:49:A7:0C:80:5C:D0:4E:05:A1:5B:3B:61:03:AD:9F:9A:7D
X509v3 Authority Key Identifier:
keyid:15:82:EE:C4:B3:47:38:DF:71:8D:A9:E0:14:3A:9D:0E:92:41:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYLuxLNHON9xjangFDqdDpJBqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/ebeCSacMgFzQTgWhWzthA62fmn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7719c9-5d08-4b0e-afdf-1d0e6e981178/1/FYLuxLNHON9xjangFDqdDpJBqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.96.0/22
Signature Algorithm: sha256WithRSAEncryption
83:a7:c0:9c:c3:47:ca:71:fd:8e:18:aa:a2:06:96:68:31:b6:
c4:40:c0:71:1c:d0:b5:c3:35:a1:8e:5f:82:9e:b8:e4:b5:23:
2d:7c:13:8d:a9:20:73:28:da:44:15:de:ca:ee:39:e1:03:81:
26:8b:b0:43:3a:5f:a7:86:87:96:0d:7a:5b:f2:23:dc:6a:4f:
e0:9e:cf:b9:6c:87:3b:8f:cf:dc:ba:63:c3:52:fa:c2:4d:24:
ce:0f:cb:df:0b:7d:32:8f:a2:79:26:72:9d:26:f6:01:1f:86:
c5:2e:bc:e9:0f:d0:45:41:55:8c:b6:91:03:0e:f0:26:c0:75:
3f:68:c6:cd:96:ce:b5:f9:d8:8a:be:6b:ce:e3:85:78:d0:8b:
6d:40:0c:f3:80:bd:2b:4b:90:a0:13:e2:cd:14:35:d2:87:8a:
a7:e2:e2:72:c6:32:07:cf:dd:78:fa:ab:7d:6d:04:48:40:0f:
42:4f:6a:66:af:14:28:3a:89:78:89:2c:ee:89:df:99:ec:ed:
39:ad:20:63:cf:08:83:cf:49:7b:6f:06:49:bc:70:b9:0e:ff:
40:04:b4:2c:28:26:2c:60:d3:bf:5e:03:44:94:81:6a:93:87:
5b:14:15:2b:fe:4c:e8:3b:cd:84:b1:04:69:3c:23:3d:aa:77:
08:af:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org