Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/V7kuxzA6ZQmTDGwWcFYxPhORG5s.roa
File: V7kuxzA6ZQmTDGwWcFYxPhORG5s.roa (raw, json)
Hash identifier: ywiEB8Of6YFtgXEYKUs6lel0zKxNFZxrOzGSV0eLZys=
Subject key identifier: 57:B9:2E:C7:30:3A:65:09:93:0C:6C:16:70:56:31:3E:13:91:1B:9B
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 03D44D3E
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/V7kuxzA6ZQmTDGwWcFYxPhORG5s.roa
Signing time: Wed 13 Apr 2022 12:39:04 +0000
ROA not before: Wed 13 Apr 2022 12:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30762
IP address blocks: 185.236.125.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64245054 (0x3d44d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Apr 13 12:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57b92ec7303a6509930c6c167056313e13911b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:95:e3:1c:42:86:b8:dc:d0:a1:ee:5a:a1:
61:67:3e:7b:85:70:bc:e1:8f:19:f7:55:5f:2f:df:
cd:2b:9a:aa:50:0e:6f:19:3f:a7:e3:b0:a1:5f:16:
b6:0b:02:b8:d5:b0:a8:1e:e2:1a:59:6a:64:03:7b:
b1:f6:57:c5:4b:d3:3f:74:b3:28:1a:30:c4:40:78:
9b:51:d7:21:75:67:bc:e1:1b:62:6b:cb:38:14:2b:
f2:d0:d4:fd:d5:6b:87:40:01:79:f6:de:12:e0:1d:
69:22:57:3d:1e:87:d1:76:41:1e:f5:75:76:76:7b:
49:8f:72:9d:79:e0:7a:c9:36:54:67:45:75:0c:64:
52:38:de:b3:53:b7:e2:7e:8a:ff:b5:da:55:50:5f:
78:dc:55:a7:96:cd:e4:d6:32:bb:f1:57:cf:8e:4c:
a5:82:06:e5:2a:2c:7b:4a:20:c5:ba:00:c7:90:2c:
bc:6f:ff:3d:a0:6d:f2:b7:b7:1e:56:f4:5d:8c:18:
93:5b:2d:ed:eb:fb:35:1b:cc:a1:10:fb:0a:3b:aa:
8d:c5:c1:d5:8b:fe:65:63:a6:d3:2f:b2:a1:f3:a8:
2c:f4:10:24:33:f6:90:fb:f8:e5:15:68:95:ab:d6:
4b:63:52:b4:d8:40:1b:52:ec:05:cf:11:b3:5c:53:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:2E:C7:30:3A:65:09:93:0C:6C:16:70:56:31:3E:13:91:1B:9B
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/V7kuxzA6ZQmTDGwWcFYxPhORG5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.125.0-185.236.126.255
Signature Algorithm: sha256WithRSAEncryption
2a:fb:39:f4:14:2b:12:aa:37:4a:10:75:e8:cf:97:04:f4:c4:
c5:91:fe:d4:b2:bb:6c:46:36:65:91:85:95:ee:01:7f:41:dc:
80:a2:d0:36:68:1c:61:f1:e6:ca:7a:43:4a:43:d4:3b:e2:f3:
8b:57:c6:3c:2c:e3:30:e0:bc:fa:4b:eb:c7:4e:9d:13:51:f8:
c1:74:00:9e:23:9e:d2:1f:8f:eb:10:96:82:94:10:fd:3e:c3:
e6:ff:4d:5c:8c:60:45:13:4b:b3:03:a8:92:75:41:fb:5c:86:
dc:5a:27:3c:a4:23:a9:9c:76:39:2c:31:68:7d:47:e8:c6:16:
f7:4a:10:22:05:69:12:a3:85:ec:59:0b:d0:df:50:1b:62:db:
6b:2f:f0:cc:cb:99:da:60:55:63:92:d3:a4:34:39:fe:1f:9b:
37:7a:d5:d0:4d:22:74:cd:e0:90:c4:f8:7c:a8:52:84:c3:37:
34:9f:84:e9:f5:04:a4:6c:1f:6b:b5:97:b0:71:64:e5:3b:b2:
a9:3a:14:7c:56:99:f5:8f:ea:fe:f2:45:04:03:da:42:07:83:
f8:c8:c6:cf:06:42:9f:bd:9b:8f:82:aa:db:cc:9d:04:cc:15:
fd:e8:cc:d6:75:c0:93:66:0b:d5:03:97:e7:e7:ce:2c:64:e3:
61:d8:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-ams.rpki-client.org