Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa
File: sjkA8BXAzs-hT2s6AwO8HLqcd98.roa (raw, json)
Hash identifier: kv3Wm2CvbvMinYWi4xO2mvC0Ks7GuV+oDX/w8Kk2u8c=
Subject key identifier: B2:39:00:F0:15:C0:CE:CF:A1:4F:6B:3A:03:03:BC:1C:BA:9C:77:DF
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 058C08B2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa
Signing time: Sat 01 Jan 2022 05:01:24 +0000
ROA not before: Sat 01 Jan 2022 05:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 185.244.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93063346 (0x58c08b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b23900f015c0cecfa14f6b3a0303bc1cba9c77df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:d5:19:20:d1:01:cd:81:d9:0b:2d:8d:76:
0f:5f:25:54:d9:94:91:19:0f:de:1a:1b:cd:01:84:
c5:16:01:14:23:81:29:3f:f9:86:5e:b6:9b:c9:fd:
07:24:02:68:f2:50:ae:7b:ad:56:19:08:ab:af:6e:
b0:9e:d0:75:65:4f:70:69:71:97:de:7b:37:5a:82:
83:6f:ab:a4:9b:79:32:58:4d:17:8f:7a:40:df:9c:
03:8d:d3:ea:cb:d0:1e:84:b3:dd:1a:6e:6b:de:ad:
42:7e:81:0c:dc:a2:e2:7b:30:ce:9b:32:ba:ef:09:
a7:86:22:87:d6:b9:a4:e5:dc:73:d9:0e:69:51:9f:
d6:3c:5e:1b:3a:62:fe:29:0a:9e:ee:48:01:56:e6:
24:70:e6:50:79:52:e4:f1:62:53:cb:1f:ad:c4:48:
9a:af:0f:c2:5a:41:14:13:7a:0b:4e:5f:b1:be:c1:
d7:19:f5:14:1d:c8:00:c2:e7:40:d1:fb:4e:85:9b:
0d:23:32:da:13:4b:3b:3f:ce:49:c3:fc:52:3c:19:
54:69:c0:91:6f:60:13:49:9c:35:0b:b6:ec:bb:3d:
fb:a8:cd:b9:18:96:36:15:c0:f3:c1:c6:0e:04:42:
07:da:b8:ea:cb:de:b1:c5:51:43:23:e9:c8:c8:59:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:39:00:F0:15:C0:CE:CF:A1:4F:6B:3A:03:03:BC:1C:BA:9C:77:DF
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sjkA8BXAzs-hT2s6AwO8HLqcd98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8a:47:95:16:da:77:13:93:fb:26:23:37:89:ce:1e:a1:6d:
21:94:0a:80:b0:ed:d2:7e:26:7d:e6:bf:2b:1f:f6:44:40:2d:
be:69:2a:57:58:7d:d9:9a:76:4d:59:06:2e:03:bf:36:12:87:
db:6a:31:6f:d5:c2:28:b6:90:8f:ae:e4:53:b4:89:6e:5e:15:
86:52:fb:ad:fe:b6:31:df:31:d0:68:15:40:b3:f6:62:b5:98:
2b:a6:a5:39:3f:c4:46:f6:48:a4:56:1e:96:41:d8:54:81:76:
0a:a6:84:aa:2b:8e:42:0a:78:89:25:55:d3:cc:d1:33:a9:0e:
ac:5e:ae:f2:8b:20:ed:1d:a8:1a:c5:ff:c1:83:3a:14:39:a9:
86:20:46:46:03:2c:2c:3e:bd:81:ab:79:4b:8b:35:e7:41:6a:
6b:e4:79:3a:18:77:84:8d:0f:ed:81:a5:9c:19:cd:dc:5f:5e:
c5:d7:ee:53:6d:bc:83:51:a4:10:1b:62:b6:34:56:5e:88:e6:
40:2b:52:59:61:81:83:48:12:a0:cb:e2:87:07:b1:42:f5:58:
b1:42:5e:20:ee:08:25:0c:96:8a:6b:82:76:60:00:57:a9:d3:
1a:71:1a:2d:64:d9:74:40:8c:9d:09:6c:13:5a:60:f5:66:ee:
04:fc:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:47 2023 by rpki-client on console-ams.rpki-client.org