Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cp6WRmjO88-1sMQq8QaqoCXo5cc.roa
File: cp6WRmjO88-1sMQq8QaqoCXo5cc.roa (raw, json)
Hash identifier: TmLGRkItAQ+nwa3jWKVsI8dPGNPLo4Mq/Sg5WhEEjdA=
Subject key identifier: 72:9E:96:46:68:CE:F3:CF:B5:B0:C4:2A:F1:06:AA:A0:25:E8:E5:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181DCB661D9EEE178E11F7B5CA07A06A979
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cp6WRmjO88-1sMQq8QaqoCXo5cc.roa
Signing time: Fri 08 Jul 2022 07:29:08 +0000
ROA not before: Fri 08 Jul 2022 07:29:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 185.216.68.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:b6:61:d9:ee:e1:78:e1:1f:7b:5c:a0:7a:06:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 07:29:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=729e964668cef3cfb5b0c42af106aaa025e8e5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:0c:f9:9f:f4:7c:b3:98:31:3d:6d:ec:36:
52:dc:a6:95:a3:0a:0f:67:73:4e:f1:1e:7f:a7:f2:
02:3e:4c:b6:b7:f7:7d:53:91:1f:a3:00:1d:f4:ce:
be:2e:28:95:b5:37:c6:b8:be:0f:c0:9e:f4:89:d8:
8f:8e:f1:d5:cb:87:06:71:f1:71:e3:af:8d:fa:ad:
59:ed:48:47:31:6e:f7:1e:3b:14:47:6b:f9:46:36:
a9:d3:79:0f:63:7e:0c:ba:98:49:57:6e:c1:f8:c1:
db:3e:a6:b4:8d:60:91:9a:cb:37:a0:ee:a9:c8:72:
f4:fd:f3:d0:82:71:66:f7:8a:53:f2:a2:61:8c:f9:
71:ce:0a:cd:b3:19:dd:7a:a6:4c:68:f3:9b:6f:e6:
a0:ef:6f:f3:79:79:fb:dc:82:6c:b0:eb:63:ee:e8:
17:33:72:af:bc:7c:23:80:6e:b0:a9:0b:5e:56:0a:
71:b6:a2:ec:77:54:9a:20:c9:e5:b3:46:d4:9c:53:
d1:3c:36:2b:99:63:6b:ae:ec:4f:b3:6b:bb:7b:db:
45:4f:5a:83:bb:72:41:52:99:35:5d:17:b2:da:f1:
95:0b:56:c1:df:bc:ba:66:dd:5d:a8:64:36:a8:14:
ed:c7:23:f6:9d:11:dc:87:ad:93:df:02:a3:3c:48:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:96:46:68:CE:F3:CF:B5:B0:C4:2A:F1:06:AA:A0:25:E8:E5:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cp6WRmjO88-1sMQq8QaqoCXo5cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.51.0/24
185.216.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:07:60:90:9b:b7:20:43:e1:40:93:5a:a9:53:2c:86:74:66:
a7:d0:06:bb:80:9d:d9:54:08:29:a8:2a:da:df:80:00:f8:04:
36:62:a8:fa:82:f9:21:72:5e:2d:b8:59:16:d3:84:2e:7f:7e:
64:e9:3a:4b:c4:9c:77:1f:c7:28:45:df:de:37:18:24:4f:16:
b2:de:60:54:46:c8:a8:78:c4:f3:64:62:60:03:04:0e:6f:07:
00:d9:21:2d:7c:64:4d:b8:96:d3:a7:04:d7:a7:86:56:f4:f4:
9a:20:ac:de:11:01:0f:3e:49:d7:3d:3e:7c:1a:94:d2:0b:b8:
3e:3d:5b:c0:f9:1e:31:24:b8:d3:44:77:21:ca:25:61:e5:f7:
b3:13:17:10:bf:50:28:47:8d:ac:bf:4b:45:dd:e4:1e:3f:74:
b4:52:3c:85:75:ee:f8:35:fa:ab:31:53:e5:90:7b:d1:b3:b0:
ae:2a:4b:c7:bf:b4:ef:b9:06:32:30:f1:47:15:37:d1:b7:60:
37:62:f2:16:61:2b:5b:26:4f:ec:35:aa:bd:5a:c3:f9:af:8b:
58:c5:2a:07:65:43:a1:57:98:1a:e1:10:05:90:6e:6b:4c:d2:
78:b4:9f:63:a8:da:1e:f5:5e:ab:a8:bb:df:c6:09:94:35:92:
3e:15:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org