Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/F1s63j3Rf746cgNU7ePQ1RvhVXI.roa
File: F1s63j3Rf746cgNU7ePQ1RvhVXI.roa (raw, json)
Hash identifier: MDBE6hQWAbqx1bZLOy7XsbDRmXMFeUoM+qkW41H/0Co=
Subject key identifier: 17:5B:3A:DE:3D:D1:7F:BE:3A:72:03:54:ED:E3:D0:D5:1B:E1:55:72
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10AA5A94
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/F1s63j3Rf746cgNU7ePQ1RvhVXI.roa
Signing time: Sat 01 Jan 2022 13:00:41 +0000
ROA not before: Sat 01 Jan 2022 13:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210331
IP address blocks: 185.126.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279599764 (0x10aa5a94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=175b3ade3dd17fbe3a720354ede3d0d51be15572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:8d:b4:aa:ca:85:33:52:d5:2e:fd:8c:95:
cf:bb:68:a1:21:da:b9:b4:a2:a8:44:cc:c3:41:ad:
af:3a:61:fa:3f:a3:a1:b1:7c:bf:37:6d:ce:dc:53:
c7:32:a1:ad:47:ad:62:51:93:f4:5d:08:73:4e:9c:
1b:a1:64:5b:4b:69:32:fc:25:6a:4c:a1:31:1e:a6:
d8:ac:55:c0:0a:f3:5f:dc:c0:0b:4b:b4:9d:b5:72:
d1:90:56:b2:d7:d2:c4:7b:3a:8c:ba:6b:02:70:ee:
2e:cd:ad:25:d2:d7:de:32:9f:b0:59:5b:55:79:3f:
08:b3:b4:ca:fb:75:a5:e5:b1:f4:be:9a:2f:e5:aa:
f4:b9:6a:fb:91:0b:f0:63:66:7a:62:c9:31:8a:a2:
72:d9:33:e8:a5:ca:f7:4c:ce:20:e6:31:69:cd:f8:
8d:98:b4:46:1e:60:55:7f:dc:bb:e6:e3:d1:b9:c7:
12:ad:f6:4a:ed:8f:1c:01:75:d8:56:87:28:ac:11:
0e:d5:ab:51:59:81:ed:eb:ab:42:5e:fc:34:41:52:
c1:b9:70:0a:4e:25:b3:76:99:ae:83:fc:0b:1f:56:
2c:dd:89:13:fc:30:85:fc:d8:28:69:d4:8a:9b:9e:
c2:57:49:31:3b:31:4a:17:f1:25:3d:9f:d9:24:53:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:3A:DE:3D:D1:7F:BE:3A:72:03:54:ED:E3:D0:D5:1B:E1:55:72
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/F1s63j3Rf746cgNU7ePQ1RvhVXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.93.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cb:1d:6a:e5:90:e8:2e:f1:b3:31:93:b7:ad:88:8d:e6:d6:
a9:c1:38:98:69:18:5e:e6:1c:6f:9e:90:89:69:2d:a7:fd:19:
76:40:af:db:4d:88:c5:6f:8c:91:97:76:4e:39:2c:3f:55:87:
bf:32:06:e6:0f:a2:56:69:71:40:1a:49:e6:6c:2b:6e:31:f6:
bd:70:e8:d4:c8:79:6c:64:2f:03:a9:45:14:d2:13:09:e3:37:
69:25:4a:d4:de:f9:26:a3:d0:bf:10:01:ba:05:3c:27:09:db:
84:1e:4d:09:e7:d4:59:70:87:49:66:77:12:5a:8c:fe:92:78:
71:34:c6:b5:f8:b3:af:40:ff:cd:ce:3c:5b:a7:2d:bc:46:74:
0a:9c:be:c4:58:05:99:89:f4:af:fb:21:50:86:c3:a8:67:2c:
45:73:2a:35:e9:91:02:44:fc:28:1a:42:c2:8d:9f:b2:7e:a6:
10:7e:97:bb:3c:be:e6:74:05:a6:47:a8:d7:96:36:e1:45:17:
15:fa:07:46:2b:ca:0a:8b:70:ca:81:da:3b:ae:fe:dc:84:ba:
93:8f:6a:90:81:6c:7d:b9:d5:eb:cb:38:e0:6c:b1:2b:63:35:
d8:b8:d0:34:61:7d:e8:6e:e8:d5:e8:00:58:8b:06:ba:1a:b4:
57:74:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org