Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7elAnDH8cwCC5gmo_cfDKGon_Hs.roa
File: 7elAnDH8cwCC5gmo_cfDKGon_Hs.roa (raw, json)
Hash identifier: wvEtra5PgsL2KFUp6CG9fNxE6pX+6KR++Fh/W4AsToQ=
Subject key identifier: ED:E9:40:9C:31:FC:73:00:82:E6:09:A8:FD:C7:C3:28:6A:27:FC:7B
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 0184CD51336A74118109629EDBCBE8AE4223
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7elAnDH8cwCC5gmo_cfDKGon_Hs.roa
Signing time: Thu 01 Dec 2022 10:52:41 +0000
ROA not before: Thu 01 Dec 2022 10:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:51:33:6a:74:11:81:09:62:9e:db:cb:e8:ae:42:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Dec 1 10:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ede9409c31fc730082e609a8fdc7c3286a27fc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:5f:9c:c3:72:23:6b:da:de:04:e6:ed:c8:
5c:c6:6a:34:71:c3:af:3a:6a:7f:dd:84:68:32:22:
2a:3f:d4:ab:10:bf:4e:e1:9f:3f:20:2b:e2:c0:16:
35:7e:fd:ac:7b:18:36:55:52:e4:13:8b:a6:07:be:
4a:f8:a1:93:d8:82:8a:4c:d2:83:ae:91:89:2b:71:
64:34:fb:e2:e0:38:b0:5c:94:b4:65:7a:69:df:39:
11:44:24:ab:be:53:e4:cd:a5:b5:aa:0b:f2:f7:29:
cc:74:11:d7:e5:1f:73:c6:95:58:c1:4e:14:91:90:
f2:d4:18:77:fa:39:a8:a0:fd:99:8e:ab:20:ff:46:
a1:6f:09:d4:4b:96:6f:4b:09:c8:69:e0:bd:5d:b9:
03:ca:89:ac:fd:f6:f6:90:fe:7f:bf:e5:c4:49:c1:
69:67:b7:af:4c:9f:87:cb:42:a0:be:a1:c7:e9:e2:
5a:59:63:43:bd:11:88:c5:5e:09:a8:22:0e:10:96:
1c:25:37:dc:7c:06:ab:7d:e3:63:71:a7:7b:aa:c0:
76:0c:c5:73:96:db:d8:33:46:42:09:23:17:a7:36:
c8:27:9b:16:90:2f:6c:41:d6:c3:a8:4d:1a:92:88:
c5:42:b6:ee:77:d7:58:ae:c5:86:68:90:79:43:06:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:40:9C:31:FC:73:00:82:E6:09:A8:FD:C7:C3:28:6A:27:FC:7B
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7elAnDH8cwCC5gmo_cfDKGon_Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b7:c6:2e:1e:32:05:f1:38:15:2f:a2:15:58:d9:7b:ec:2d:
ad:d8:57:5e:02:d5:98:54:df:22:c3:99:17:43:f4:f8:1f:80:
0d:ee:ae:b0:49:7d:eb:70:6d:8c:ee:a6:07:72:05:a4:55:25:
ec:12:81:bc:3e:f4:56:0a:60:ae:70:4f:14:0e:d9:a4:a3:36:
fc:80:9e:21:d9:18:73:8e:fe:73:ad:fe:49:dc:ba:27:f6:ce:
bf:6c:81:e2:20:ce:5d:39:27:b1:81:87:b0:f1:5d:a1:ca:9a:
db:4f:9d:d1:9f:fa:02:e2:b1:f4:5c:d6:f6:d5:ab:7f:d5:64:
f5:88:5d:08:93:e4:f4:53:c0:49:55:70:b3:49:11:01:97:4a:
11:c7:e4:2b:91:29:e3:87:b2:60:20:e0:4f:2b:51:fb:0a:05:
0c:b6:4b:98:c2:cf:73:cf:18:53:47:fd:54:09:24:5b:5b:44:
11:ed:3e:4e:7b:34:ca:60:da:04:da:06:76:a5:f3:42:18:ce:
d8:eb:b5:51:53:41:5c:c4:62:79:61:48:ff:36:0e:b6:46:08:
7f:b3:eb:50:44:6b:30:66:0e:d5:80:43:63:25:e6:14:cf:3e:
e3:17:62:07:8f:35:c4:97:cc:db:fe:0d:84:a1:6c:cc:81:c4:
e0:e1:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org