Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/y2JN2LQhQTo7uwLkrPhHaf_Q75A.roa
File: y2JN2LQhQTo7uwLkrPhHaf_Q75A.roa (raw, json)
Hash identifier: 9MjY66DDX/47DrtqN1a1vX33Qf2Zj2M9uUtAP95ftqU=
Subject key identifier: CB:62:4D:D8:B4:21:41:3A:3B:BB:02:E4:AC:F8:47:69:FF:D0:EF:90
Certificate issuer: /CN=03090fac3cc42f1997455a12e643064637c69dc3
Certificate serial: 018355000E298D7D4D043D23EE206F4252FC
Authority key identifier: 03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/y2JN2LQhQTo7uwLkrPhHaf_Q75A.roa
Signing time: Mon 19 Sep 2022 09:06:50 +0000
ROA not before: Mon 19 Sep 2022 09:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34593
IP address blocks: 185.96.112.0/24 maxlen: 24
185.96.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:00:0e:29:8d:7d:4d:04:3d:23:ee:20:6f:42:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03090fac3cc42f1997455a12e643064637c69dc3
Validity
Not Before: Sep 19 09:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb624dd8b421413a3bbb02e4acf84769ffd0ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:ef:b8:85:fa:f5:92:63:0b:a7:21:47:f5:
17:9a:5b:fe:d4:a1:b8:be:c5:5f:87:d4:2a:59:72:
56:ed:10:b0:b3:58:6c:41:86:e9:a7:3c:ff:d5:6c:
bd:b8:4a:75:88:3b:73:aa:f9:8f:f3:b9:95:7b:92:
f2:76:99:89:b2:a4:55:27:aa:a5:86:ee:ca:db:81:
02:45:a5:78:ae:51:2a:08:20:3d:82:3f:61:cf:73:
76:f7:2b:f3:9d:97:23:40:9c:13:61:2e:25:2d:59:
5d:0f:d1:3a:0d:c1:d8:eb:54:53:8d:c4:79:71:73:
e3:9f:8e:9b:4e:c2:4c:92:0b:9c:be:8b:b8:f9:e6:
19:ac:dc:29:e6:eb:8d:c4:d8:76:7f:42:84:ad:61:
cd:16:a0:26:18:a0:0f:89:a2:8e:8a:e9:f5:4d:36:
39:d1:99:31:ff:6c:54:6f:eb:6d:3f:88:0a:c5:24:
29:7c:c8:c9:7c:68:2a:5b:88:01:aa:06:50:06:14:
2a:d6:79:89:99:df:00:d0:d4:29:a7:6f:c1:e6:c6:
f8:f5:61:bd:50:03:30:e2:23:9e:39:0a:ce:31:90:
54:66:5b:4a:ed:c1:a2:ef:db:92:af:b2:02:bc:7d:
5c:de:e6:57:47:85:ea:72:8a:69:cc:f5:2b:e6:68:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:4D:D8:B4:21:41:3A:3B:BB:02:E4:AC:F8:47:69:FF:D0:EF:90
X509v3 Authority Key Identifier:
keyid:03:09:0F:AC:3C:C4:2F:19:97:45:5A:12:E6:43:06:46:37:C6:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwkPrDzELxmXRVoS5kMGRjfGncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/y2JN2LQhQTo7uwLkrPhHaf_Q75A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/5c2868-3a27-4df4-8f00-fdd23b43c52e/1/AwkPrDzELxmXRVoS5kMGRjfGncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.112.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:0e:9f:3d:c3:db:d8:a1:3e:15:dd:c3:cd:00:6a:a0:77:69:
f3:58:ad:02:f3:1b:07:4e:5a:a9:98:a5:25:30:91:14:8c:f2:
94:4f:6d:88:b8:54:26:18:c1:af:f6:ba:5e:da:d0:6d:b1:c5:
87:f0:b7:31:46:9c:40:7e:b3:ac:38:b5:5a:25:c2:98:3e:60:
dc:93:4f:20:98:4b:f3:23:26:4d:6a:2e:70:3a:53:91:0e:e3:
d0:eb:ce:14:26:53:f6:5b:8c:14:4b:a7:35:b5:9a:38:b9:b0:
bf:c8:42:72:b5:b4:82:29:0b:e3:c4:0f:df:06:df:f0:83:5d:
c1:d2:ea:a1:2f:af:f6:5b:90:3d:58:f0:9a:c0:34:ac:bb:ff:
e5:ed:6c:44:10:23:3e:87:af:08:7f:9e:91:6a:bd:6d:bc:68:
7f:55:82:30:21:0c:41:86:4d:ec:eb:5d:e7:67:71:a5:a2:3f:
37:45:21:d5:8b:29:34:fd:08:7e:76:a7:0f:e9:c4:c5:84:28:
74:06:f1:97:78:2c:ce:32:52:53:cf:e7:21:59:13:ca:21:5c:
a2:b1:ce:05:38:b1:50:a0:11:0a:60:87:8d:f2:63:68:ef:f2:
bf:41:36:66:e1:08:41:9b:34:3e:86:40:da:2b:1a:2c:a0:78:
71:78:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:51 2023 by rpki-client on console-fra.rpki-client.org