Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_AahPLFTVlf2aJxaWMAyu-S5MXk.roa
File: _AahPLFTVlf2aJxaWMAyu-S5MXk.roa (raw, json)
Hash identifier: VL0WmrlxEDAxD3WREIhhXfIQdXGPbpyXavbAB0hSCNA=
Subject key identifier: FC:06:A1:3C:B1:53:56:57:F6:68:9C:5A:58:C0:32:BB:E4:B9:31:79
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 09309F15
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_AahPLFTVlf2aJxaWMAyu-S5MXk.roa
Signing time: Sat 01 Jan 2022 05:55:29 +0000
ROA not before: Sat 01 Jan 2022 05:55:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199163
IP address blocks: 185.121.68.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154181397 (0x9309f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc06a13cb1535657f6689c5a58c032bbe4b93179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:c4:53:d8:e3:a4:17:7d:36:44:13:1b:41:
f1:36:2d:45:7d:f8:62:c5:41:3e:71:45:f9:d3:a2:
c8:d1:29:19:0a:c9:ae:6f:e2:b1:2c:0e:aa:32:59:
2e:34:ab:df:52:a6:b8:6d:0c:e3:7a:4c:a4:54:96:
b4:9f:ab:c3:2e:51:45:4a:9c:d2:70:29:4c:76:e6:
46:6c:8d:9d:7b:d6:d9:67:bf:56:20:e3:01:db:89:
39:d5:35:ba:ce:e7:03:9f:3a:24:55:4b:15:6c:09:
07:ef:38:21:72:fe:08:60:45:21:4e:00:76:f8:9c:
8a:b9:2a:ba:fd:6e:77:51:ae:ae:d4:57:59:61:8a:
8b:07:2b:89:f5:e2:c8:e1:84:df:5c:c8:22:7f:e5:
d0:7b:9f:59:48:ad:c8:85:5c:f0:ee:a4:e6:a6:5a:
9d:71:65:0a:e7:3d:79:db:7d:e2:a6:9d:8a:14:91:
9e:cf:e8:82:66:ec:c1:0d:a9:ab:ec:30:20:96:3a:
be:67:b8:42:bb:16:64:2b:f8:06:18:ab:a4:f4:58:
f6:39:84:b6:03:7e:ee:c1:ff:20:d2:43:5f:72:fa:
0a:3f:e8:84:52:33:90:a1:71:ca:0f:0e:55:2a:5e:
e6:de:8a:eb:c4:cd:60:17:1e:59:d8:fe:26:d3:8b:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:06:A1:3C:B1:53:56:57:F6:68:9C:5A:58:C0:32:BB:E4:B9:31:79
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_AahPLFTVlf2aJxaWMAyu-S5MXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:89:b8:d6:4f:ca:95:ec:9b:c5:18:60:11:13:b0:0c:9a:ba:
9f:f9:c7:9c:66:26:13:f3:c5:6c:10:93:7b:96:c3:a2:63:4c:
98:52:23:bf:be:74:70:0e:36:09:e5:d1:b7:0e:18:5e:ca:6b:
0d:18:53:ef:c6:4b:03:75:05:97:93:3c:57:d5:55:34:4e:6c:
69:e5:48:d8:19:e7:3a:52:d5:df:da:fe:4a:96:c8:6d:b6:7a:
f3:2a:e0:72:c5:b2:96:9e:ef:b7:1e:cb:fa:2f:98:50:14:aa:
af:e5:be:e6:ea:56:27:91:7f:b2:c8:94:9d:60:0a:ff:c8:ec:
28:6f:cc:7a:7b:fd:c3:8c:85:da:23:a8:28:c5:36:af:9f:49:
d3:f0:35:65:b7:e7:6c:14:f0:92:88:67:81:ea:cb:34:78:67:
0b:c5:ec:25:43:02:2d:a8:5c:b9:88:69:fb:13:84:e2:39:db:
39:57:47:88:f2:40:60:e6:4c:4a:41:01:e7:5b:74:76:8c:68:
d7:c0:b8:a2:f9:9c:25:8c:c7:bc:8e:b5:ae:d2:a3:46:cd:06:
91:9f:ff:35:d5:0e:ee:3c:89:72:84:66:d4:e4:90:57:4f:e4:
61:f2:8f:b6:a1:2a:30:67:ee:48:c2:52:36:ee:7e:04:b5:f8:
87:c0:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org