Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/pK4rndJ3I6kJvARdORGs6mwYV1c.roa
File: pK4rndJ3I6kJvARdORGs6mwYV1c.roa (raw, json)
Hash identifier: OFpifPRlikoUSEAE4+zRao5oY2Oa3tUWeDBIekh3aRg=
Subject key identifier: A4:AE:2B:9D:D2:77:23:A9:09:BC:04:5D:39:11:AC:EA:6C:18:57:57
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 0E31B892
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/pK4rndJ3I6kJvARdORGs6mwYV1c.roa
Signing time: Sat 01 Jan 2022 00:51:58 +0000
ROA not before: Sat 01 Jan 2022 00:51:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205892
IP address blocks: 185.190.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238139538 (0xe31b892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jan 1 00:51:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4ae2b9dd27723a909bc045d3911acea6c185757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:44:f2:9e:37:b1:a1:0f:fd:37:d3:92:65:76:
ce:7f:33:74:13:dc:5c:a2:c8:5d:8a:61:12:a6:f0:
b3:8f:2e:e2:a2:bb:ed:1b:e9:7b:ad:a7:00:bc:bc:
dd:51:df:f4:d0:52:c1:22:2d:b6:03:95:31:82:93:
f0:fc:d9:6d:25:4d:31:fd:27:ff:18:ba:71:74:39:
2a:1d:e6:18:18:e8:f7:78:9c:65:ac:44:2b:ef:38:
18:9f:8e:55:01:9b:e7:d1:c1:d9:48:80:d9:9d:a3:
76:f9:48:bc:8e:dc:51:56:d2:c3:f6:cf:e3:93:ab:
c0:83:8b:2f:d6:6a:d5:c5:58:e9:3a:f7:5a:9b:a6:
ec:06:74:1d:b2:a5:fb:15:b2:a1:1d:5d:03:43:02:
22:95:dd:c3:af:00:00:b7:3b:c5:20:02:21:ae:46:
f2:e6:34:74:3e:e3:a6:25:e4:91:4c:bd:d7:4f:ad:
95:56:d2:2a:df:e8:7b:fe:33:fd:4a:25:97:76:18:
44:4e:59:9b:8c:42:eb:ce:b8:6f:ef:59:f6:be:82:
ab:4a:c8:98:10:19:36:e6:3b:7e:83:ab:35:8d:5b:
0c:9b:f0:ab:ea:11:56:f3:ad:89:45:b6:23:15:55:
ab:37:b6:51:4d:39:5d:d2:01:88:41:96:ef:35:4f:
92:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AE:2B:9D:D2:77:23:A9:09:BC:04:5D:39:11:AC:EA:6C:18:57:57
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/pK4rndJ3I6kJvARdORGs6mwYV1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ee:83:2d:69:42:ab:b0:5a:77:ca:32:4f:83:3b:02:f0:33:
0f:89:83:7e:1e:20:0f:0e:37:f1:f8:4e:c0:bd:03:94:31:5e:
d2:22:19:29:f7:07:0b:93:51:bf:c4:44:73:b6:7c:c7:4f:31:
c7:e9:40:08:f2:73:d9:90:71:58:ea:e9:60:d2:58:32:02:93:
82:49:39:c2:6d:46:31:ac:99:08:de:54:49:f1:9a:21:c8:73:
e6:25:4c:3a:93:1a:93:58:ed:cd:1e:6c:1b:7a:7a:2e:80:7c:
49:c7:47:6a:39:cd:c5:70:b0:c2:ad:8b:bf:10:35:b4:cf:f4:
9f:d8:3d:6d:04:61:1f:c1:f2:77:31:d7:b6:e0:bb:23:70:0a:
35:5c:34:41:94:f4:32:21:d1:f5:5d:24:6a:4b:75:2c:d9:af:
be:2b:b2:a3:6a:50:ef:ec:ea:0c:8d:c4:e5:9d:3a:66:c2:3a:
af:0b:b6:30:59:52:d1:3d:9e:ac:51:55:ac:97:f0:bc:76:99:
53:d5:50:a0:50:ba:ea:e8:ed:c5:8f:34:65:6a:0b:87:54:0b:
26:7e:84:ae:ad:f5:8e:30:57:dc:69:4e:7b:75:28:53:3b:a9:
75:f1:59:37:4f:af:c3:c8:78:3e:a6:13:93:c6:e7:21:2c:e8:
af:9c:0c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:00 2024 by rpki-client on console-ams.rpki-client.org