Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eWYmYntjCOpG158_IiEvSi9wcKI.roa
File: eWYmYntjCOpG158_IiEvSi9wcKI.roa (raw, json)
Hash identifier: NZmCtqwzIdtQ+uuliaSgjDdgc6sa+mr+w21MRFZK6L4=
Subject key identifier: 79:66:26:62:7B:63:08:EA:46:D7:9F:3F:22:21:2F:4A:2F:70:70:A2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01851BA6CF35D9BC1D7C8DA583E33ED7313A
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eWYmYntjCOpG158_IiEvSi9wcKI.roa
Signing time: Fri 16 Dec 2022 15:56:34 +0000
ROA not before: Fri 16 Dec 2022 15:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 94.177.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:a6:cf:35:d9:bc:1d:7c:8d:a5:83:e3:3e:d7:31:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Dec 16 15:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=796626627b6308ea46d79f3f22212f4a2f7070a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:8b:d2:9b:4f:47:e6:ad:9e:01:6b:a4:a4:
f8:ef:70:25:03:fd:8c:f5:44:91:ee:fe:33:d5:7b:
86:b2:b8:dd:78:ab:70:c4:30:52:f3:d2:6b:d4:59:
8d:1c:ea:b2:f0:3c:5d:03:a4:0b:ce:ef:49:88:f3:
1a:28:c5:e7:0b:32:92:9f:3f:3d:fa:65:30:16:49:
8a:fa:a3:37:df:80:a7:86:5c:e8:2d:73:78:c3:f3:
b1:fd:6e:94:7a:b9:2d:e5:0c:99:2d:5f:3b:23:5f:
56:9d:be:74:fc:65:f5:6c:37:99:c8:a4:35:04:67:
8a:2b:a8:05:5e:42:8c:1e:fa:c4:02:31:bb:5e:22:
26:a5:54:66:da:6d:e5:cd:08:1c:9b:67:0c:62:65:
20:6a:2f:ed:df:f5:a6:2e:ec:fb:41:3e:40:24:ef:
eb:57:e9:7c:97:eb:0d:a9:11:b1:f0:66:d6:b1:81:
7b:71:2f:dd:00:93:93:74:c6:ce:1c:f4:83:79:88:
2a:b8:b3:3c:ec:63:ae:41:cb:32:32:c9:5e:3f:df:
b8:31:8e:df:30:94:cf:2e:8c:df:73:6e:80:04:b0:
81:24:91:4c:67:78:fb:a4:74:a3:4e:04:ae:39:e8:
2c:6f:a2:4c:83:9f:95:13:03:b3:2c:10:49:17:5d:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:66:26:62:7B:63:08:EA:46:D7:9F:3F:22:21:2F:4A:2F:70:70:A2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eWYmYntjCOpG158_IiEvSi9wcKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
60:be:d3:b6:bc:25:4b:31:ff:cb:4b:df:24:d2:f1:29:ae:b4:
63:bd:d8:63:11:3e:99:e1:4f:d9:5c:80:59:b9:e1:f5:db:59:
bc:ea:4a:ca:56:e3:8c:86:8b:f8:19:db:a0:a8:2a:52:e9:17:
43:18:de:a9:bd:41:4a:64:06:b7:bb:ad:ba:35:42:7c:46:61:
8d:bd:0e:8f:15:e5:78:0b:79:9f:8b:da:88:e0:d5:7d:8f:09:
06:45:e0:62:66:5f:e7:72:da:df:7f:ac:44:b2:39:4f:39:db:
70:7c:c0:2c:70:59:4c:dc:00:18:ad:6e:38:91:aa:de:e0:4c:
f4:ec:75:b5:ca:07:80:0a:da:7a:1f:8a:df:b5:10:4a:cb:f3:
90:47:32:0c:f3:0f:c3:a3:f8:4b:c3:ed:21:75:83:1d:46:30:
da:a5:e4:19:3a:43:7c:71:c5:b2:90:8b:a2:fd:8a:4a:77:eb:
b6:80:e0:1f:30:47:2b:6e:fa:1a:13:34:37:bc:02:5f:27:91:
04:3a:b3:26:19:9d:0f:c7:51:88:6e:de:52:8e:68:3d:0d:d8:
e0:16:34:59:b6:d9:7a:7b:c6:f8:05:36:db:65:d6:70:bb:7e:
c0:40:1d:18:ba:6c:cd:b7:8e:b2:05:9c:f7:fc:0e:8d:4d:44:
de:8a:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org