Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/9oNVO8wVngerVDwECrEZvQNYeEo.roa
File: 9oNVO8wVngerVDwECrEZvQNYeEo.roa (raw, json)
Hash identifier: pY0CuWk2jzI7fLriT0lJw6Z7N/nu9D8886M5eF//HvQ=
Subject key identifier: F6:83:55:3B:CC:15:9E:07:AB:54:3C:04:0A:B1:19:BD:03:58:78:4A
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 0182CDDD687F9888EF1704BD2139B92D6CD9
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/9oNVO8wVngerVDwECrEZvQNYeEo.roa
Signing time: Wed 24 Aug 2022 03:20:15 +0000
ROA not before: Wed 24 Aug 2022 03:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 185.28.38.0/24 maxlen: 24
185.28.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cd:dd:68:7f:98:88:ef:17:04:bd:21:39:b9:2d:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Aug 24 03:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f683553bcc159e07ab543c040ab119bd0358784a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ca:41:8c:7e:e2:e0:a7:82:33:69:64:01:07:
d2:24:98:47:cb:c7:97:a8:65:cb:71:ff:8c:d1:b7:
fe:18:17:96:d7:6b:ce:91:b8:d3:86:ab:1d:fc:49:
06:6e:25:3e:5b:4e:50:b0:58:18:66:6f:26:e2:3f:
39:b4:3d:fb:23:ba:71:5c:4e:b7:94:bc:5c:46:52:
ef:e3:0e:7c:cd:60:27:67:49:3d:49:8b:c3:0d:7d:
81:a7:9b:cf:20:4e:85:b8:6c:7c:79:fd:fb:73:57:
ac:45:25:1d:ce:05:5d:7c:26:65:25:4c:aa:57:aa:
2b:b6:c1:bf:30:ab:81:9c:2f:c8:38:fb:a1:1b:b0:
d2:6e:f2:0f:49:1b:5f:c3:b0:24:3a:d3:c8:47:6c:
f3:f9:7c:d1:e7:02:e5:c8:16:e9:38:36:be:51:b5:
c6:d0:8a:74:e8:15:9f:16:79:a3:8a:19:50:15:a5:
5e:c2:3a:3f:60:12:91:a7:98:b6:51:9e:99:51:e9:
61:82:78:bc:f6:c6:df:bb:b9:24:72:55:17:c3:4d:
9d:b6:fe:6b:e8:23:e5:f3:69:6d:26:38:b7:a0:7b:
65:1f:eb:69:67:0b:88:43:5d:5e:b0:d1:46:a4:70:
7d:aa:67:0e:81:fa:d1:fe:cf:fa:de:2b:37:20:c0:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:83:55:3B:CC:15:9E:07:AB:54:3C:04:0A:B1:19:BD:03:58:78:4A
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/9oNVO8wVngerVDwECrEZvQNYeEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.36.0/24
185.28.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:60:f9:d1:69:3b:0f:0e:6d:c3:d7:f3:f0:67:f6:aa:f6:23:
98:1e:90:b9:85:29:a7:3d:49:47:b9:e9:29:11:2c:01:5d:0e:
25:6d:df:3f:03:91:56:81:f4:0f:43:d3:02:25:30:78:66:29:
78:f5:ea:9c:68:4d:77:ed:5b:96:e8:4c:aa:14:86:f3:84:2f:
c8:e3:5c:eb:8a:56:a7:91:e2:9a:eb:9b:73:92:21:82:5a:00:
c7:7e:f2:38:2c:46:d8:b8:ab:28:ab:fd:48:19:20:54:82:18:
f0:06:21:e2:d0:97:ec:c1:12:3d:e4:ab:dc:af:ec:47:6d:95:
ff:58:24:b5:93:27:e4:e8:1e:be:08:eb:33:41:83:e0:e4:d4:
23:05:45:58:5c:6a:06:d1:23:fa:ab:9c:8e:c0:32:4f:d2:42:
66:81:a3:2f:20:d0:d2:2b:9c:61:9e:ea:6f:c8:12:89:3c:5c:
f7:5f:fe:e4:db:5f:c6:2f:b5:d6:34:d4:9b:39:96:4f:63:6c:
3f:9b:54:83:0a:22:40:54:75:db:d3:78:87:81:72:a1:c0:7f:
24:a4:40:43:d4:14:fa:57:3c:db:8a:05:98:c4:7b:9c:32:2f:
5c:e3:8b:52:b0:33:b9:64:73:2a:df:6c:a3:ba:95:0f:00:3b:
f5:b6:bf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:32 2023 by rpki-client on console-ams.rpki-client.org