Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ASutu62BK9G-EgH6k-K3yVkMeMg.roa
File: ASutu62BK9G-EgH6k-K3yVkMeMg.roa (raw, json)
Hash identifier: CPk40GFZh+dUpUFOpn4Pdr7B1hbAN+9BR3JfNzkqxuQ=
Subject key identifier: 01:2B:AD:BB:AD:81:2B:D1:BE:12:01:FA:93:E2:B7:C9:59:0C:78:C8
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0184D90B03C04C92F2BF14E7244B4A618C81
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ASutu62BK9G-EgH6k-K3yVkMeMg.roa
Signing time: Sat 03 Dec 2022 17:31:28 +0000
ROA not before: Sat 03 Dec 2022 17:31:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d9:0b:03:c0:4c:92:f2:bf:14:e7:24:4b:4a:61:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Dec 3 17:31:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=012badbbad812bd1be1201fa93e2b7c9590c78c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:ae:28:53:df:81:18:3a:70:85:96:e1:ad:
a1:d9:00:a8:11:5e:5a:e8:c8:20:40:82:79:24:72:
7a:76:6f:e4:aa:2f:d3:00:df:6e:33:d2:05:c8:14:
7f:4c:47:c4:fc:16:11:1d:89:34:51:12:17:fa:bb:
09:7b:9c:82:6a:7f:ab:94:bb:e1:bb:e7:6a:80:5e:
44:b1:fe:ca:bc:45:ee:8b:75:23:d6:fd:34:42:10:
6c:9a:43:2b:7f:4a:12:b0:d7:f8:a1:dc:8b:39:99:
87:65:e9:88:9c:6c:56:90:73:e4:65:6b:50:c7:34:
fd:ae:02:66:4d:4c:ff:20:31:2f:93:7c:2c:28:fa:
8e:93:61:6f:be:12:c6:f8:fd:2b:cd:94:99:9b:a7:
4f:1d:a3:0a:46:08:81:5c:ce:03:76:ca:d7:8f:12:
cb:2c:f5:b0:28:e7:28:3a:ba:bb:6e:3d:4a:6d:ee:
c5:e6:80:66:90:71:d2:07:b2:4e:87:60:bc:69:21:
34:cc:5c:d4:93:76:e6:8e:9f:6d:3d:0a:a3:91:7e:
d0:94:9e:1e:af:80:d4:6e:0b:8f:ac:75:12:6d:e1:
84:b8:66:12:96:1d:e3:5f:06:51:bf:0a:5d:25:d1:
85:ed:48:46:7f:b2:31:ed:99:49:04:62:29:86:60:
af:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2B:AD:BB:AD:81:2B:D1:BE:12:01:FA:93:E2:B7:C9:59:0C:78:C8
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ASutu62BK9G-EgH6k-K3yVkMeMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
69:84:7c:f0:ad:ad:96:7b:62:c0:ef:62:dc:49:b1:c3:07:b1:
1b:a3:65:75:bd:d1:e4:05:b3:c8:b0:a2:ab:bf:6d:6d:ec:8b:
56:17:44:58:28:5a:7f:a9:a6:bc:52:b0:a0:06:14:41:06:55:
2f:39:64:80:90:df:e8:4b:31:5e:3c:5b:e9:03:67:b8:d2:18:
25:f2:8e:20:00:a1:fc:c4:c4:7c:8b:46:60:5e:ad:aa:81:71:
d7:32:00:b2:cd:d5:e5:97:9f:7a:29:06:87:d3:91:04:7f:55:
36:a3:62:a4:3a:2e:6b:ba:90:18:e1:52:0f:0e:e0:8f:39:69:
55:4e:2d:ca:17:ea:6f:07:9a:ac:94:e9:03:ee:03:21:3a:3c:
94:dc:50:91:4b:69:21:76:a9:8d:8c:4a:86:63:6f:50:93:a9:
4d:75:b4:d2:1b:ff:ef:84:10:d5:4e:0c:ce:12:c7:5c:e4:ce:
48:8e:d3:dc:25:be:64:12:cd:35:5e:3d:27:73:15:eb:60:07:
3a:b4:51:b5:5c:97:ba:ef:5a:24:dc:7a:50:be:8a:1f:81:e8:
56:7b:f0:b3:c3:4f:18:7e:6a:62:df:c6:e7:d2:73:4c:56:7e:
8a:65:d3:f2:17:09:5f:77:f2:bf:72:93:8e:36:30:3c:a8:c2:
fc:12:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org