Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tDSUyUZ2M1VqrCp_3A-EBAS8-dw.roa
File: tDSUyUZ2M1VqrCp_3A-EBAS8-dw.roa (raw, json)
Hash identifier: 9Nkqzi2yRPI//Z9ZhT+k2kkFBVbmEQhyaJnALNkWivU=
Subject key identifier: B4:34:94:C9:46:76:33:55:6A:AC:2A:7F:DC:0F:84:04:04:BC:F9:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F0FE056
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tDSUyUZ2M1VqrCp_3A-EBAS8-dw.roa
Signing time: Fri 17 Jun 2022 11:02:45 +0000
ROA not before: Fri 17 Jun 2022 11:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210838
IP address blocks: 185.225.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521134166 (0x1f0fe056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 17 11:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b43494c9467633556aac2a7fdc0f840404bcf9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:cb:58:ec:e2:44:5e:c9:3a:71:79:8a:0a:
e8:58:55:2e:3a:f8:ee:72:e9:f2:e6:03:71:af:0e:
90:8f:b5:b7:0d:54:4f:d0:5d:5e:c3:9f:af:4e:c5:
63:2f:be:da:b7:30:66:0a:83:46:e9:47:d1:f2:6e:
4a:32:e6:87:38:46:f9:33:ce:a2:bc:2a:b5:37:66:
bc:04:95:ba:6f:f4:90:f9:1c:01:1b:ff:ff:46:da:
cd:b5:a9:a2:0d:07:39:77:91:49:28:a8:67:09:e9:
a7:6a:23:a6:f8:df:30:f6:e7:6d:26:e9:ac:ba:a1:
28:5e:94:39:11:dd:9b:66:44:6e:cc:73:dc:10:65:
d7:a2:5d:8b:c1:8f:98:63:e1:7e:6a:6b:07:0e:59:
de:be:3a:03:c9:da:2a:9f:a5:8c:dd:07:6f:e1:4b:
65:e0:06:cf:5b:62:b9:19:39:1e:0e:0b:60:40:09:
04:c9:ad:83:9c:a0:68:7d:d5:1e:db:dd:85:69:e8:
6a:f7:13:21:ec:80:a1:b8:d9:2c:f7:f7:3f:56:70:
fa:3b:8a:33:31:a3:27:ea:c8:e0:96:1e:db:f7:d0:
45:f3:12:bb:5c:82:8e:9b:17:e7:02:6b:ff:20:a5:
71:c1:1e:44:ce:42:a3:8a:39:95:16:01:2d:98:60:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:94:C9:46:76:33:55:6A:AC:2A:7F:DC:0F:84:04:04:BC:F9:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tDSUyUZ2M1VqrCp_3A-EBAS8-dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:79:3c:26:8c:18:8e:db:fb:4e:58:07:d9:72:20:a8:9a:1e:
96:eb:ee:c2:f3:b5:57:fa:01:73:df:9a:b9:db:6a:a1:d1:9d:
68:5b:6e:4f:5d:73:73:c7:b0:26:f4:4b:0e:0c:c7:db:54:dc:
4d:92:ed:6f:51:c4:ec:15:3b:d2:c0:57:56:fc:52:79:d3:16:
02:1b:15:f5:7c:44:9b:8a:02:44:82:d9:fa:c2:cd:00:96:7f:
ff:fb:39:df:04:f1:83:29:67:f3:6e:f3:8b:a4:08:a6:74:4b:
16:f8:5a:ed:4d:d6:25:1c:8b:80:0e:b6:56:16:54:9f:37:d9:
55:d8:9b:30:7c:66:77:27:b2:8e:d9:7f:b6:24:d2:cf:63:41:
d7:f3:5f:5e:c4:34:ac:79:28:12:d8:5a:f5:1d:5c:99:fd:35:
2f:17:2d:fe:a9:e1:71:ea:9d:71:15:7f:41:8f:a8:df:32:4f:
fd:33:ce:a2:44:aa:e0:8e:bb:51:01:68:9c:db:13:f0:c7:2b:
10:5b:24:9d:f0:d5:c5:29:8a:17:aa:d2:81:b0:90:6a:4b:36:
1e:5e:47:c7:31:4a:69:cf:32:e2:94:5a:4f:60:b7:ed:4d:7f:
9d:b3:f6:f6:b0:04:74:f3:b8:be:65:d3:9a:8b:a4:fe:be:f8:
ee:22:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org