Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7sAVLRsYjT4oC0INDx8M3yVsjwQ.roa
File: 7sAVLRsYjT4oC0INDx8M3yVsjwQ.roa (raw, json)
Hash identifier: zjTAR544vLGmVQ7/cQ7DdtZvJRVfqP4ZGeruL21uVO8=
Subject key identifier: EE:C0:15:2D:1B:18:8D:3E:28:0B:42:0D:0F:1F:0C:DF:25:6C:8F:04
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01849A35EE44773534AFC2C472D328023FDA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7sAVLRsYjT4oC0INDx8M3yVsjwQ.roa
Signing time: Mon 21 Nov 2022 12:42:16 +0000
ROA not before: Mon 21 Nov 2022 12:42:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51859
IP address blocks: 185.167.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:35:ee:44:77:35:34:af:c2:c4:72:d3:28:02:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Nov 21 12:42:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eec0152d1b188d3e280b420d0f1f0cdf256c8f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:38:5d:f1:e7:01:f0:73:6e:0c:cf:0c:9b:
51:c0:a1:31:65:ef:31:ee:48:d4:35:be:14:03:53:
b9:0e:a1:e4:cf:07:79:b7:39:ae:99:d0:f6:8a:b1:
29:cc:71:39:56:d0:bb:fc:9d:94:3e:f4:9f:ad:9e:
8b:30:98:05:6e:c1:a8:f3:ab:9b:2e:cc:6c:0f:31:
2b:a4:af:7b:ea:d5:79:b6:60:87:8c:82:53:75:75:
f7:bb:0c:27:18:ea:71:71:8a:3d:3a:07:8c:74:ff:
7a:97:bd:ab:79:2b:b8:85:b3:40:7e:24:74:9a:ca:
b5:ac:3f:f5:f9:e6:58:b6:68:48:e0:c4:17:60:6b:
06:81:c6:93:2f:ef:74:a4:1a:46:02:b7:e7:ce:57:
38:1f:2c:1d:cf:b1:db:81:f4:06:b1:38:be:c7:b9:
fc:ee:76:19:72:0e:4c:fd:d3:b0:35:5b:bb:b1:13:
83:8b:3d:48:d2:e0:fb:81:c0:57:12:b0:ca:78:26:
42:45:65:1f:f7:cc:20:60:33:09:61:de:2a:11:b8:
8e:22:f1:be:9c:9c:64:98:8c:ac:12:08:0c:a2:f8:
fc:e5:ca:86:47:83:71:d7:3f:26:c2:4d:8c:8a:5a:
2a:aa:d3:83:29:6c:38:cf:d0:08:8b:2c:f9:5a:47:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:15:2D:1B:18:8D:3E:28:0B:42:0D:0F:1F:0C:DF:25:6C:8F:04
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/7sAVLRsYjT4oC0INDx8M3yVsjwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:ff:61:4f:16:33:99:c8:9a:99:10:0b:6a:80:3d:7c:97:39:
84:0d:87:99:94:ec:98:10:97:f0:7d:dd:1d:c2:8b:d6:ef:91:
24:84:54:d1:92:b2:4f:47:27:7d:91:61:70:52:e9:79:e8:f0:
3e:d9:fa:ba:d8:10:cb:f6:1c:19:64:f0:4c:98:29:9a:57:c4:
01:12:31:4b:68:36:9e:df:4d:73:09:c0:81:7a:ab:7c:1d:00:
8b:86:25:c3:e2:39:3e:39:ce:49:e7:46:83:00:2f:9d:5f:03:
24:ac:97:85:f3:36:e7:9c:c1:09:0b:23:eb:f4:3b:0c:64:44:
07:df:0e:44:dd:4a:66:83:9b:51:38:18:5c:5b:6f:48:64:4b:
c2:43:a2:de:3f:9a:af:89:77:20:35:e3:b2:50:4d:89:0e:01:
32:37:ad:63:3f:13:75:46:b8:68:7a:80:1b:3e:01:a4:3c:40:
ea:b7:57:54:86:00:c3:2d:a1:6b:4c:c5:fc:a9:7c:a9:64:08:
3c:db:a3:76:f1:9f:50:c6:a3:fc:7f:29:ec:66:02:31:ec:1d:
c7:1a:cf:9f:ff:f4:6f:b5:d3:0f:e5:12:b1:25:2d:ec:00:ad:
f3:37:3a:dd:bd:d1:4f:c3:d2:2c:c8:01:0d:bd:6a:8b:c6:de:
e2:45:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org