Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/frqQ1TBP_vSWu43je9rAB67E-Vg.roa
File: frqQ1TBP_vSWu43je9rAB67E-Vg.roa (raw, json)
Hash identifier: ot33nHSUuSMKUGQwjoSv5WWduTcyUyIcpOXZRMLkH0I=
Subject key identifier: 7E:BA:90:D5:30:4F:FE:F4:96:BB:8D:E3:7B:DA:C0:07:AE:C4:F9:58
Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa
Certificate serial: 08A28D56
Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/frqQ1TBP_vSWu43je9rAB67E-Vg.roa
Signing time: Sat 01 Jan 2022 03:55:07 +0000
ROA not before: Sat 01 Jan 2022 03:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202341
IP address blocks: 185.229.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144870742 (0x8a28d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa
Validity
Not Before: Jan 1 03:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eba90d5304ffef496bb8de37bdac007aec4f958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:e8:85:7f:57:e9:07:8a:ad:d0:fd:71:86:
43:31:89:3d:8c:f6:62:e3:b5:52:bd:a1:21:40:5a:
0d:01:88:03:80:ff:ce:67:99:53:67:14:1f:76:05:
ff:7a:bf:86:50:e1:27:45:4e:93:68:4f:1d:7a:32:
d7:81:f3:da:cb:e0:76:d1:b6:30:5f:fa:37:93:f6:
d8:cb:5d:33:5c:84:14:ef:18:ad:4d:23:bd:38:72:
b8:ad:30:e0:28:e1:20:8a:85:49:16:d2:c1:72:ad:
f3:f3:cf:39:3d:2a:fc:a6:df:77:a8:bc:1e:e3:68:
8d:58:77:96:d5:39:00:72:88:1d:fa:f1:6d:2b:e3:
e7:9f:38:02:40:3d:6f:bc:02:25:66:6b:9c:c9:c8:
e1:e2:63:44:34:81:a5:f7:dd:e1:56:ec:f5:29:6f:
09:16:bd:d2:a3:30:c9:3f:15:b9:07:b1:79:1e:56:
4a:d7:8e:2b:b2:93:12:ad:aa:52:57:e4:92:28:fb:
3a:e8:21:26:41:1a:e3:9e:f0:81:3a:8c:13:28:7a:
ed:66:6c:e4:b8:d5:a5:d0:50:eb:44:0d:b3:bd:3c:
1a:15:4d:2a:ed:8a:17:88:7b:99:2c:48:4b:4f:2e:
ca:b1:1c:4a:6c:da:8d:99:b8:12:bb:dc:7d:3a:55:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:90:D5:30:4F:FE:F4:96:BB:8D:E3:7B:DA:C0:07:AE:C4:F9:58
X509v3 Authority Key Identifier:
keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/frqQ1TBP_vSWu43je9rAB67E-Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.60.0/22
Signature Algorithm: sha256WithRSAEncryption
17:26:3b:9e:ae:b5:44:b5:66:37:b5:29:ad:37:cf:c1:bd:47:
33:33:20:9a:07:46:14:3a:2b:8c:28:79:af:e4:f2:22:7a:44:
f1:ac:d7:02:07:39:15:5e:c1:4c:2a:b6:84:78:39:10:95:99:
b6:db:0c:1d:58:26:fe:b0:7e:0f:f8:b0:03:2e:f2:23:4d:49:
e3:c0:3b:03:b6:dd:5f:fb:e0:5b:75:7d:7a:6e:93:03:87:f4:
62:96:e2:d1:5b:9b:2d:6a:cf:ca:fb:70:e2:24:44:1a:75:a4:
d8:c0:52:a9:c5:66:43:47:8d:8e:a5:9e:5a:dc:08:74:7a:76:
25:47:29:fa:4b:77:68:3c:de:e8:6d:dc:7e:6b:77:32:1a:13:
6f:d6:38:f2:ae:9b:84:b0:c3:ee:77:e2:16:e6:c5:91:57:cb:
2e:49:2e:25:af:ef:d5:27:7e:66:f9:f2:5f:1d:a2:dc:30:66:
89:3d:88:f1:aa:92:30:fb:2d:d9:2f:bb:29:86:79:04:a2:49:
de:33:3b:82:3d:cb:2d:e5:0c:ce:38:57:77:52:d0:a6:59:64:
78:12:a7:a6:33:1c:87:ef:34:bd:c5:5c:7e:e7:07:b0:3a:05:
2f:ed:4a:06:f6:1f:84:b5:c5:b7:4a:e9:55:93:55:3d:dd:f3:
02:0f:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:37 2024 by rpki-client on console-fra.rpki-client.org