Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2JGv9rAP66vB3emTEzC3d1xr9jw.roa
File: 2JGv9rAP66vB3emTEzC3d1xr9jw.roa (raw, json)
Hash identifier: O5NtGYLP114/ZpagpNAQ6PCJU7cyZjAmdVSDFu0/rfw=
Subject key identifier: D8:91:AF:F6:B0:0F:EB:AB:C1:DD:E9:93:13:30:B7:77:5C:6B:F6:3C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1DC2E7FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2JGv9rAP66vB3emTEzC3d1xr9jw.roa
Signing time: Wed 06 Apr 2022 16:29:48 +0000
ROA not before: Wed 06 Apr 2022 16:29:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 185.221.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499312636 (0x1dc2e7fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 16:29:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d891aff6b00febabc1dde9931330b7775c6bf63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:ac:71:8c:2e:52:f7:e5:62:a8:58:1f:33:
f9:b3:0b:1b:3c:44:ce:e4:30:b4:f0:5b:f2:4d:7e:
45:e1:74:3d:fd:95:0c:16:d5:42:74:bb:77:e9:8d:
0c:5d:c4:1d:cc:4a:a4:ad:88:ed:4d:1f:98:95:b5:
94:47:7f:53:36:8a:f6:ae:76:22:2f:2f:aa:4e:3e:
45:07:a3:c7:22:5e:81:89:bf:8f:ab:5e:c6:1e:de:
00:c5:46:96:b0:c9:8d:02:78:cc:af:58:db:07:53:
0f:ec:82:7c:bd:a8:35:0c:66:88:da:77:eb:26:54:
a2:1f:ea:eb:f2:12:32:3a:eb:01:73:5c:ad:10:2a:
66:81:79:89:6b:5b:94:6b:38:53:59:22:8e:fc:0a:
1b:9e:3a:31:9b:12:7b:17:c3:79:95:27:00:9c:3e:
91:7a:ec:8f:eb:c2:9b:ca:b5:98:54:bf:36:8a:b5:
b4:97:55:ff:22:d4:5b:3d:0d:4f:df:c7:50:25:81:
57:f1:c8:c1:10:9d:86:8e:da:80:d0:51:5e:77:2b:
30:ca:bb:bb:d8:46:fc:56:c9:0d:e3:d9:86:03:31:
6c:ce:ef:b4:fc:38:54:f7:55:4b:e7:3b:f3:bb:24:
fa:ad:e9:2a:ba:e5:f2:b9:ab:b8:98:17:54:08:01:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:91:AF:F6:B0:0F:EB:AB:C1:DD:E9:93:13:30:B7:77:5C:6B:F6:3C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2JGv9rAP66vB3emTEzC3d1xr9jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.64.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9a:b0:f1:d3:36:5e:98:bf:85:4b:d4:3e:fd:76:63:88:d9:
c0:b5:ce:c8:3d:43:c8:8c:d3:2a:ac:f0:d9:8e:1e:0b:fc:10:
c8:da:94:5b:ff:81:c3:76:b7:e1:d0:08:d4:58:89:cf:b5:47:
56:40:77:71:cd:f2:bf:01:92:fc:f7:30:57:54:29:21:ca:72:
79:0d:04:79:9a:19:82:47:ce:f4:6f:de:52:d7:67:8c:20:36:
dd:fd:4e:de:b8:9c:67:10:5a:11:d4:cd:1f:89:90:da:6a:81:
d0:b3:0f:78:a5:fb:be:72:03:a4:bd:46:ed:29:da:0a:b0:1d:
6d:db:9f:57:61:b8:c9:0f:0f:06:2d:be:9f:6c:b9:01:2b:f2:
93:98:49:f9:db:41:f0:f9:49:bd:c5:30:34:c0:ff:ca:4f:db:
5e:0e:3e:7f:6c:cc:66:78:23:bb:53:06:90:a2:00:18:f1:67:
f4:24:18:5f:ad:20:d4:33:2b:8e:4e:45:1f:49:51:00:d2:d0:
1e:00:57:1e:d0:0d:9f:15:67:35:ba:6d:57:98:a0:43:98:ba:
d3:63:e7:90:c9:87:49:1c:a1:36:64:8a:73:bd:71:6d:6f:7b:
2e:c8:e1:52:a6:a4:38:bc:80:ff:67:44:c5:ec:bd:f7:f5:56:
af:14:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org