Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4xpTTJRTAh0gNf40gcI5ImO5tPE.roa
File: 4xpTTJRTAh0gNf40gcI5ImO5tPE.roa (raw, json)
Hash identifier: fVO8Eb7879JSuqcqEBORbxNjlp/pe/0kE1dLRnGTZMk=
Subject key identifier: E3:1A:53:4C:94:53:02:1D:20:35:FE:34:81:C2:39:22:63:B9:B4:F1
Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial: 018326ED3B625BCFA940E4515A33BA65D011
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4xpTTJRTAh0gNf40gcI5ImO5tPE.roa
Signing time: Sat 10 Sep 2022 10:23:44 +0000
ROA not before: Sat 10 Sep 2022 10:23:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.114.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ed:3b:62:5b:cf:a9:40:e4:51:5a:33:ba:65:d0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Validity
Not Before: Sep 10 10:23:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e31a534c9453021d2035fe3481c2392263b9b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:17:ef:ae:3a:09:76:c8:e0:25:63:71:f4:
24:13:c6:d1:c5:bb:bc:5c:4f:10:96:82:e9:4c:41:
1b:39:70:7b:49:c7:73:66:e0:1c:63:1f:20:0c:f1:
d4:f9:90:09:cb:2b:87:12:cf:7e:96:55:a5:40:eb:
07:5a:4d:c2:f1:79:4c:6b:33:58:ca:00:98:65:c7:
35:78:2a:49:4e:f7:b7:59:ac:2c:6f:b3:c8:52:3d:
90:bf:80:05:36:5b:de:41:9a:b9:78:98:b7:02:9b:
df:de:87:74:d5:b2:a6:0d:a8:77:a1:19:11:7d:f7:
c2:fb:c9:4f:e8:46:f9:59:0a:8a:52:e9:52:ff:cc:
67:97:e1:d4:fd:e9:ae:eb:37:bb:10:43:e8:b2:05:
63:d1:9e:1c:d2:0b:37:07:46:09:2a:b7:7f:de:e0:
a4:37:47:b5:65:15:bd:6f:04:dc:32:c2:d4:e7:79:
b6:37:42:2e:5e:8b:ba:0d:4f:82:61:b4:8e:d2:1b:
42:dd:be:1c:fd:16:5c:0a:65:08:b0:6e:27:2a:2e:
2a:10:2f:3a:45:43:62:7c:75:74:0c:84:63:00:4a:
0b:fe:20:db:1b:5c:d0:a7:65:8d:8b:18:bf:97:f8:
9a:b6:47:0f:06:39:a9:73:cf:ef:36:ff:78:51:25:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:53:4C:94:53:02:1D:20:35:FE:34:81:C2:39:22:63:B9:B4:F1
X509v3 Authority Key Identifier:
keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/4xpTTJRTAh0gNf40gcI5ImO5tPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0c:05:11:61:2b:e0:59:1f:04:89:06:3e:bc:76:b5:4e:5f:
2b:c9:06:d1:ef:bf:d3:e4:97:0e:da:ac:f3:7f:af:22:99:c9:
e3:df:8b:fa:28:12:2e:9f:5d:1c:d3:82:9b:6f:68:97:fb:72:
69:12:38:59:b2:c4:62:82:6d:a7:ac:fe:dd:f8:0c:40:a7:c0:
1f:2e:d1:bf:b8:3f:de:89:f7:42:96:8f:9b:c4:6c:80:b6:f8:
4c:b1:fe:b0:08:b8:cf:1e:3c:a4:00:5a:6b:a4:d7:16:eb:98:
c7:f0:da:f6:cb:ce:d3:b3:7f:c8:3b:2a:eb:8c:71:f5:10:96:
9d:48:c2:b9:85:21:74:1c:02:4d:56:f0:13:da:50:10:4a:02:
02:42:46:d2:ec:c7:a9:90:05:2b:15:b1:60:8a:ea:74:66:6a:
72:21:0e:cd:93:43:af:6b:36:35:81:8c:e8:57:68:47:ed:5e:
84:30:61:e4:83:70:f8:8e:42:5a:ab:d3:ec:49:b3:c0:a6:7b:
b7:b7:a7:b2:6e:2e:68:a2:69:99:a0:9e:c5:9c:f7:3f:1a:2f:
90:6c:0c:9c:f9:e1:36:f1:18:64:0a:16:fb:72:96:20:77:fc:
ca:5a:60:ed:b5:7f:f6:77:25:1f:b2:04:d7:c2:2e:6d:db:6b:
77:32:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:54 2023 by rpki-client on console-fra.rpki-client.org