Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aztXCQ6lNAqcSGPoyrl-pPxV6sQ.roa
File: aztXCQ6lNAqcSGPoyrl-pPxV6sQ.roa (raw, json)
Hash identifier: Ec7Ltm20Ry0/4Klal/ZHGX2xVYyVSNQb2j+WNfJFGVg=
Subject key identifier: 6B:3B:57:09:0E:A5:34:0A:9C:48:63:E8:CA:B9:7E:A4:FC:55:EA:C4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185057E9BDD427D71F2C1CEFD78D36685A1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aztXCQ6lNAqcSGPoyrl-pPxV6sQ.roa
Signing time: Mon 12 Dec 2022 08:41:01 +0000
ROA not before: Mon 12 Dec 2022 08:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39368
IP address blocks: 185.218.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:7e:9b:dd:42:7d:71:f2:c1:ce:fd:78:d3:66:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 12 08:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b3b57090ea5340a9c4863e8cab97ea4fc55eac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:92:a4:c6:fc:8c:c4:23:7e:97:c5:08:be:
da:95:b8:fe:25:28:9b:d9:bb:11:e8:9e:3e:6e:3a:
ac:e5:c7:33:cc:d4:d2:8c:ab:65:90:3a:3f:56:a3:
b1:e9:cf:77:a7:7c:0e:9f:d2:eb:8c:a1:b0:b2:04:
12:d9:16:8e:6a:87:01:0b:ce:ba:31:71:df:57:8c:
08:de:13:61:dd:87:a9:b8:12:ce:39:74:87:92:fe:
f1:60:0e:9e:73:c6:fb:55:f5:b3:12:e3:d0:a1:0a:
41:9d:ba:60:af:0a:f0:68:dd:e7:f5:85:72:cf:4e:
72:a9:25:66:62:b9:a9:66:db:cb:a0:c4:c4:72:0e:
80:f7:59:6c:9d:78:6d:73:e2:6b:6b:9e:d9:f6:f7:
4d:8a:10:4d:07:a0:d1:5f:29:96:8c:d0:9b:2b:9d:
b0:07:47:60:5f:c7:ef:a7:35:71:34:0b:50:88:b6:
4b:75:44:4a:ae:ec:0f:61:18:86:e1:0b:f1:15:0c:
97:19:63:5b:4c:07:4f:87:58:39:db:cf:0f:02:77:
ad:b2:ff:2b:9e:15:ac:92:34:96:9f:5e:df:66:bd:
bd:89:e7:78:1f:e5:29:ab:29:3f:1c:d6:c9:5e:23:
84:21:3f:30:a5:a2:e0:cc:b3:49:b7:64:d3:bf:fe:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:57:09:0E:A5:34:0A:9C:48:63:E8:CA:B9:7E:A4:FC:55:EA:C4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aztXCQ6lNAqcSGPoyrl-pPxV6sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3c:b0:44:a0:87:37:ba:75:68:d9:fe:90:76:f5:d9:fe:3c:
15:73:6f:e1:4a:41:5c:c4:44:22:72:18:c4:93:ff:32:b3:05:
3a:8e:3c:8c:fb:bd:2e:31:fd:48:67:fc:da:5a:7a:ba:86:5c:
16:ed:83:a2:29:f8:49:68:ca:fd:4d:e1:39:5b:54:60:80:d9:
c7:9b:69:7a:c4:7a:56:47:4c:c9:56:82:fb:ff:9e:21:83:58:
eb:14:fd:5f:4d:ff:c0:24:13:7d:ba:46:d5:b6:10:5a:c0:0d:
b2:e6:0a:2b:f3:6e:da:87:19:a7:72:aa:34:da:e4:43:1b:4b:
47:30:40:57:62:a5:7e:b8:39:3f:f9:9d:e1:58:ca:0b:07:ac:
2c:71:43:89:5a:43:3e:2b:e6:d4:4d:37:c3:30:b6:8d:82:60:
42:de:c6:71:bc:12:f2:a5:83:92:42:e4:6b:d9:1f:d8:15:e4:
0c:65:1a:ed:7c:83:9c:fe:44:0b:9a:76:33:da:f6:ae:89:fa:
83:20:b7:aa:00:ab:90:da:e0:08:4e:fa:44:bc:1b:d2:4b:33:
13:e9:5f:3b:7b:a6:fc:ab:b9:1e:07:e4:5f:f1:85:4a:fe:b8:
4c:08:1b:46:e9:59:bc:a1:4c:a0:01:58:dd:eb:5a:21:fd:82:
67:70:b0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org