Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/doGh3bkfZwOVyZbE9PrsGwodZNA.roa
File: doGh3bkfZwOVyZbE9PrsGwodZNA.roa (raw, json)
Hash identifier: Mfg2y7dvw9D3gD+HYPYhFtoncbXEmEoWolK+M0jYmMQ=
Subject key identifier: 76:81:A1:DD:B9:1F:67:03:95:C9:96:C4:F4:FA:EC:1B:0A:1D:64:D0
Certificate issuer: /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial: 18EC94E5
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/doGh3bkfZwOVyZbE9PrsGwodZNA.roa
Signing time: Sat 01 Jan 2022 13:00:48 +0000
ROA not before: Sat 01 Jan 2022 13:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60232
IP address blocks: 185.40.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418157797 (0x18ec94e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
Validity
Not Before: Jan 1 13:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7681a1ddb91f670395c996c4f4faec1b0a1d64d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:0d:87:ae:a4:e6:23:83:a0:b0:0c:99:02:
9f:8f:6c:f0:14:41:78:fe:b2:77:0d:6d:2a:23:63:
20:13:60:bb:4a:64:fa:e9:b4:7b:9c:17:c4:ae:fb:
f4:fc:0a:31:bc:2b:f6:fb:c6:0c:15:3b:91:df:f6:
dd:ad:bd:f7:8f:26:96:d0:6f:6a:9b:0c:87:f0:94:
ab:c5:42:84:e9:07:37:1f:1d:31:2c:e8:0b:b8:dd:
80:95:84:f8:d6:fd:d8:7e:c4:df:65:a3:f5:bc:68:
de:bf:46:fe:17:7f:6c:78:38:ae:a8:e9:04:1a:74:
af:26:1c:37:3f:84:65:d9:fe:b2:cc:af:25:82:cd:
31:67:90:40:64:47:79:30:0b:24:f3:45:05:b3:61:
2e:a7:81:1d:92:52:f1:c9:3e:f4:f7:21:2d:29:17:
ed:fb:fc:f4:f1:78:dc:2e:76:70:0c:a4:3e:d5:4c:
59:1d:60:16:0a:fe:0e:8c:98:e5:c1:5a:c8:40:98:
fc:50:c5:63:6a:22:16:a1:da:7a:72:ac:3d:77:1c:
c7:77:87:40:83:4f:2b:f3:28:db:de:f1:e7:c3:38:
6c:be:48:71:95:72:39:04:5f:0d:96:07:8d:19:0b:
a2:c0:44:55:7a:67:d8:6d:d8:7f:e0:75:f7:43:83:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:81:A1:DD:B9:1F:67:03:95:C9:96:C4:F4:FA:EC:1B:0A:1D:64:D0
X509v3 Authority Key Identifier:
keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/doGh3bkfZwOVyZbE9PrsGwodZNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.72.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c8:2a:f3:78:07:6a:6d:8b:b3:da:87:d4:37:ad:91:a3:c0:
60:74:19:88:f6:db:e4:46:51:37:d3:46:3d:08:17:39:8b:87:
4e:fc:53:c4:22:6c:96:4c:32:c5:c1:d1:fd:1c:36:cc:87:54:
bb:c6:e1:0c:b7:99:e1:2f:0c:0a:70:8a:40:0d:d1:9c:35:e8:
72:24:57:da:ce:94:03:30:71:fd:1c:ea:ce:bb:0a:22:43:41:
3a:9b:9b:61:6e:fa:53:79:34:03:57:67:9f:e1:05:9a:1d:2e:
fa:59:12:b4:61:a8:54:63:ce:f5:5c:d5:8f:7a:91:f6:b3:7b:
a7:d8:7e:f1:31:ff:c7:f0:4c:48:eb:6e:20:1c:23:06:e1:5d:
a4:7c:99:f5:59:e6:2e:71:09:da:b0:72:41:e3:97:8b:c9:42:
be:9f:9b:8a:be:68:57:18:2e:dc:42:ee:95:0f:bc:d3:1d:19:
c5:6d:de:14:5a:2d:5a:bc:27:4c:51:0b:52:3f:88:f5:5d:39:
35:13:b4:74:19:ad:de:28:93:ab:bd:8f:4d:3a:0a:c1:5d:64:
1c:9f:cc:13:d9:50:93:ea:6a:cc:43:68:3c:8d:ad:b3:9e:01:
a6:ae:b3:40:f5:6f:6d:b5:55:5b:84:f5:1c:0f:79:63:f2:3b:
d2:1a:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:13 2024 by rpki-client on console-ams.rpki-client.org