Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SNtV4_ONcklGurK-AR2sWviXBNo.roa
File: SNtV4_ONcklGurK-AR2sWviXBNo.roa (raw, json)
Hash identifier: BpCOPpil6ggVIGYCIf6H3yoJi6t4ZPzCNUc+MGLie20=
Subject key identifier: 48:DB:55:E3:F3:8D:72:49:46:BA:B2:BE:01:1D:AC:5A:F8:97:04:DA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 3888DE11
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SNtV4_ONcklGurK-AR2sWviXBNo.roa
Signing time: Sat 01 Jan 2022 05:54:22 +0000
ROA not before: Sat 01 Jan 2022 05:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56938
IP address blocks: 85.254.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948493841 (0x3888de11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48db55e3f38d724946bab2be011dac5af89704da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:b2:bc:05:21:9e:52:01:4d:86:2c:2d:bc:
55:0e:8e:f9:be:6a:00:8a:dd:10:04:e5:10:47:f9:
3b:5c:e1:7c:65:f7:51:a9:ab:dc:e5:94:af:ca:a0:
8a:6f:7a:2c:72:45:b1:89:03:b8:d9:0f:c0:67:7f:
ab:e7:f1:46:3a:9d:bf:66:0c:ee:03:be:16:ec:aa:
15:4d:cb:38:f9:57:f7:56:5f:fa:07:46:ad:c8:06:
ac:8c:32:2e:3b:57:d9:c1:68:90:97:27:36:97:e1:
7d:eb:cf:98:23:97:cb:06:5f:10:d2:6e:5d:77:76:
76:df:d7:97:23:2d:8c:b6:97:aa:ad:d5:76:f2:3c:
60:53:71:26:42:4f:b5:11:8a:8a:27:30:da:88:2d:
42:2d:b4:5b:71:19:38:4d:a9:aa:6d:a6:f7:a9:21:
d8:cf:ca:13:87:4b:99:66:09:01:91:88:6f:8d:ac:
1b:0d:ff:0c:cb:e4:b6:eb:d3:96:db:ad:38:9d:3c:
4c:11:a6:ea:84:b7:40:32:a8:1d:36:68:65:38:b7:
30:7b:aa:bb:b4:00:72:cf:6b:16:05:90:4a:34:ed:
e8:87:c7:fd:9c:ad:2c:f4:47:9d:75:43:89:31:ac:
0c:55:cb:02:ab:26:30:7d:a1:d6:10:39:73:8a:96:
4f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DB:55:E3:F3:8D:72:49:46:BA:B2:BE:01:1D:AC:5A:F8:97:04:DA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SNtV4_ONcklGurK-AR2sWviXBNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e4:7c:18:d6:25:7d:ab:80:d0:e6:09:e9:ba:69:ef:01:5d:
63:e1:69:7b:d0:08:59:d7:9c:f9:86:7d:6f:46:2c:10:9a:38:
94:1b:16:f2:84:1c:59:9c:04:7b:86:28:87:41:c7:89:f6:1d:
d1:c4:49:c6:70:54:f4:24:be:1a:e8:cf:19:75:ef:9d:f4:5f:
20:e2:b7:e4:66:f3:ea:97:89:47:5c:58:ac:0f:a8:88:35:9d:
88:c3:38:e2:4c:3b:a4:3f:62:7b:ac:e1:b7:23:db:1c:fa:fc:
f6:c3:4e:a2:3b:2f:44:3c:85:53:0a:6a:5d:03:95:1f:30:54:
e4:3b:ea:94:25:67:20:08:2a:9e:f0:1e:87:20:4f:bb:13:0f:
4b:19:c5:2b:a2:1f:33:4c:21:ed:c0:d8:60:18:a4:25:2d:e6:
fa:fe:91:b5:7a:37:e0:99:f5:be:20:b0:15:24:91:70:79:4e:
a9:33:27:c3:8f:26:4c:a1:68:e2:d4:45:a6:25:8a:87:67:f4:
7d:ac:f9:22:fa:13:c7:ad:10:79:00:56:7a:9d:56:d1:1b:62:
0e:78:f5:e7:a6:56:36:3c:48:97:4f:a7:ea:ad:92:85:57:0c:
a0:8b:31:60:34:fc:63:3e:f2:45:7f:c3:b6:a8:f4:33:60:5e:
be:2f:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org