Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/v7AWhf1dpWwSHawWccsc6keaJsc.roa
File: v7AWhf1dpWwSHawWccsc6keaJsc.roa (raw, json)
Hash identifier: LVb/mTY9s1P9xZyChz0BJkOL99+TQf4y/JdPSbFNagw=
Subject key identifier: BF:B0:16:85:FD:5D:A5:6C:12:1D:AC:16:71:CB:1C:EA:47:9A:26:C7
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 0257A8
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/v7AWhf1dpWwSHawWccsc6keaJsc.roa
Signing time: Wed 11 May 2022 15:16:03 +0000
ROA not before: Wed 11 May 2022 15:16:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.38.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153512 (0x257a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: May 11 15:16:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfb01685fd5da56c121dac1671cb1cea479a26c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:bf:b2:8b:88:d9:63:b2:c9:69:08:a7:60:
45:38:c6:88:42:f9:1f:0e:d6:af:c5:a1:34:13:d4:
f4:be:e4:9e:de:4c:8b:61:15:a6:76:a7:cd:9b:f0:
43:93:28:ee:85:de:6e:57:b4:22:64:e0:56:fc:d2:
dd:f6:e7:ae:7f:d0:7f:67:0e:f3:e4:ca:74:b7:73:
ca:b9:36:ab:44:4f:53:92:0b:6a:e4:cc:5c:80:93:
07:fc:18:da:de:a8:7f:cb:c7:57:0f:51:3a:2f:db:
7b:e7:aa:47:4d:16:27:db:ee:32:83:31:e7:17:b6:
67:7f:d8:3f:f4:72:3a:87:ca:b2:cb:45:1b:e5:c3:
f0:52:d8:79:e1:8d:f9:91:b5:0c:b1:58:b6:11:f9:
17:f1:46:94:64:72:67:48:10:5b:6c:22:40:4c:ec:
a3:00:4a:bc:4e:9a:e5:5c:7e:f8:6f:23:45:00:df:
06:32:59:27:29:a9:0d:9b:4c:9f:94:8e:87:cc:2a:
14:fb:00:b8:dc:2b:da:11:87:a3:be:8f:e4:d2:7c:
d1:a2:a7:e9:27:4e:7b:2f:cd:8b:9c:a2:f4:a4:7c:
59:40:52:ef:67:08:9b:2d:d2:54:4c:c6:a9:f5:c2:
90:8d:35:97:89:e4:89:d4:ef:a1:05:71:8a:54:58:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:16:85:FD:5D:A5:6C:12:1D:AC:16:71:CB:1C:EA:47:9A:26:C7
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/v7AWhf1dpWwSHawWccsc6keaJsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.134.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ec:a6:81:80:6f:f4:5c:d8:8c:33:cb:82:2a:9b:15:97:07:
44:07:8e:df:31:45:c1:b6:e3:df:92:64:38:dc:f5:fd:4e:d9:
db:01:c2:d5:ef:8d:c2:09:57:c2:96:eb:35:79:9d:06:c5:e5:
8c:ce:50:fb:d5:d0:31:50:b6:97:39:1c:aa:ad:e3:28:32:90:
c5:3f:65:21:ce:66:b0:ee:8c:cc:a7:db:a6:28:ea:56:c2:01:
20:a6:15:18:01:3d:df:e9:68:36:06:96:b4:63:72:7b:0d:7b:
d7:fe:b1:33:7a:ad:81:1f:63:c9:f3:c5:59:8d:ac:50:63:df:
90:fa:06:6e:ce:6a:30:6e:c3:b3:b2:c1:b1:4f:c9:35:8b:11:
d0:df:a6:fc:60:29:45:4d:8f:4d:93:23:ae:91:07:08:65:8f:
c7:68:a0:4d:a3:e2:7e:91:b1:9c:ec:a9:3e:b3:9b:c0:82:28:
f4:37:04:90:ca:e1:31:16:2b:5e:5a:66:9c:e8:77:52:e6:98:
2d:fc:2f:8b:b2:0c:3e:23:bc:c2:52:ec:dd:b5:e5:51:86:10:
57:89:3a:11:4c:ab:17:b1:08:75:1d:d1:1e:55:09:15:a2:28:
cd:ab:87:7c:49:8a:b2:f8:9a:2f:f7:23:0f:a5:f2:00:bd:9a:
9e:3b:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:24 2024 by rpki-client on console-fra.rpki-client.org