Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4lSu99Kcpipi5CVQ7CGxDQTCA9o.roa
File: 4lSu99Kcpipi5CVQ7CGxDQTCA9o.roa (raw, json)
Hash identifier: JBucxpmozekZnQUnqIUoECmYgfC0nj4UPKjXTzoTEs0=
Subject key identifier: E2:54:AE:F7:D2:9C:A6:2A:62:E4:25:50:EC:21:B1:0D:04:C2:03:DA
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 0FE1F580
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4lSu99Kcpipi5CVQ7CGxDQTCA9o.roa
Signing time: Sat 01 Jan 2022 06:52:56 +0000
ROA not before: Sat 01 Jan 2022 06:52:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46562
IP address blocks: 185.114.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266466688 (0xfe1f580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Jan 1 06:52:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e254aef7d29ca62a62e42550ec21b10d04c203da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:c6:22:82:6f:0b:21:bb:b5:39:d5:01:1d:
58:8e:a9:cd:44:ee:4b:90:7a:77:70:ff:21:72:2b:
e7:3f:f8:ce:bf:bc:01:6a:36:a5:fa:1f:bc:b0:25:
e9:e2:16:14:b8:04:70:05:7c:aa:c3:16:39:f8:76:
ab:6e:ef:d5:a3:9c:06:99:67:08:fa:a8:e3:0d:ec:
fa:fa:84:30:29:04:2a:2a:1f:fb:d1:dc:ed:cf:cd:
bb:a9:ae:49:d1:49:70:80:5c:61:70:27:66:7d:06:
72:50:59:31:00:fb:81:6c:0b:4f:9f:75:a8:c6:e5:
d6:75:a4:57:67:19:7f:80:21:f5:58:67:68:00:77:
6d:f5:78:a4:ea:3e:1d:20:35:69:4b:b0:1f:86:15:
8d:44:fd:5f:e6:5c:80:3d:5f:31:e4:a3:55:20:eb:
c8:fd:c2:28:17:97:79:e4:f3:85:1e:a1:0f:5c:ee:
13:20:0a:69:49:76:19:ba:1e:91:04:fc:56:ae:82:
8c:aa:97:fb:bf:b0:df:08:c1:38:53:f7:f9:8a:39:
78:90:eb:ab:f2:80:da:e1:5f:81:9e:7d:c7:b8:ec:
ed:1d:65:d2:71:2e:57:bf:9c:f2:13:c0:9c:05:56:
2b:0e:d9:4a:70:ae:44:e7:19:e7:80:ab:53:02:c4:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:AE:F7:D2:9C:A6:2A:62:E4:25:50:EC:21:B1:0D:04:C2:03:DA
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4lSu99Kcpipi5CVQ7CGxDQTCA9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.35.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ef:59:92:46:db:a7:a4:f0:17:1e:7e:b8:73:25:eb:11:03:
e5:8f:a1:8d:e6:f4:a9:ba:12:ab:1f:90:73:34:43:eb:66:3f:
f0:b1:46:15:b0:cf:48:59:ea:b0:02:91:3b:7c:7b:a1:0a:24:
b6:7f:ca:82:c9:a1:67:94:fa:fb:d7:af:88:7b:f9:17:f3:b8:
de:47:62:65:f3:21:30:c2:1d:8e:91:7b:3c:0d:4e:5c:ee:d2:
87:c5:fd:63:52:63:a9:a9:01:1e:50:3a:d8:9a:1a:0e:64:03:
32:7e:79:ce:88:b9:8f:84:ef:eb:d5:3b:05:cd:ec:3f:2a:7f:
b7:6f:99:0c:e4:95:5a:5e:09:1c:bf:af:37:79:07:b7:1b:71:
04:de:a8:d3:28:ff:07:68:ad:cd:df:56:6a:8f:20:52:7a:24:
dd:c9:28:76:3a:d8:a9:05:63:88:a8:4a:f0:42:bb:fd:0f:a4:
b8:44:4c:a5:e7:d7:d1:33:a8:34:61:c8:ee:cb:e9:2e:49:6b:
ca:d3:b6:15:d6:34:67:d2:6d:e8:2a:e7:3d:6a:a1:e2:b2:64:
ac:1b:38:ac:20:11:91:40:aa:99:25:70:48:e4:ce:dc:e0:26:
60:a7:9c:4a:37:d4:f4:cb:61:a4:9f:b1:49:6f:7c:41:41:3e:
bf:c7:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-ams.rpki-client.org