Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/O3VeCVEx56YNOtrUMWptDl4ND78.roa
File: O3VeCVEx56YNOtrUMWptDl4ND78.roa (raw, json)
Hash identifier: qhG/j7U6NGD7vMT2TI2UyPQQZT4DnHusdCjuvvTXDeU=
Subject key identifier: 3B:75:5E:09:51:31:E7:A6:0D:3A:DA:D4:31:6A:6D:0E:5E:0D:0F:BF
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 16B6219C
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/O3VeCVEx56YNOtrUMWptDl4ND78.roa
Signing time: Sat 01 Jan 2022 01:51:09 +0000
ROA not before: Sat 01 Jan 2022 01:51:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.33.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381034908 (0x16b6219c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jan 1 01:51:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b755e095131e7a60d3adad4316a6d0e5e0d0fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:59:44:48:fa:0a:68:fa:a9:3d:85:d3:68:
2d:f3:8a:1f:d8:d2:25:03:f0:af:e4:80:14:85:3b:
6d:48:87:3b:ee:47:60:6c:a8:54:b7:49:43:63:ce:
6e:24:68:70:90:55:b3:ee:85:b4:5a:7a:29:61:2c:
0d:6d:50:ed:6a:fe:b6:10:d3:34:29:14:d6:88:1d:
48:f9:32:91:18:6a:1c:22:7b:b0:e9:f3:18:a7:39:
7d:60:ee:07:56:63:72:7e:7d:b4:cf:9a:4d:8a:86:
bf:d5:d3:f8:0c:f6:34:b5:70:38:85:2d:22:a0:67:
2c:54:21:46:db:e3:a7:65:aa:1d:e9:24:a1:fd:e8:
83:80:29:12:49:4e:20:3e:3d:8a:86:89:cf:90:3d:
25:1e:a2:d7:89:38:86:bf:e4:93:25:38:1f:a3:3e:
84:ca:85:9f:5c:82:12:06:2f:80:8f:01:49:3d:41:
8e:58:c8:61:ce:82:56:9d:44:9d:38:88:6c:ff:c7:
c6:32:e0:6b:8b:54:48:2c:aa:e9:e5:24:ac:0a:47:
01:7b:95:93:79:7c:b7:2a:9d:01:1b:56:1f:27:10:
99:6c:27:05:48:21:07:9e:ac:b9:b0:f8:69:f7:f1:
77:95:52:2a:d6:8e:09:7c:36:c2:ba:ee:b3:df:3b:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:5E:09:51:31:E7:A6:0D:3A:DA:D4:31:6A:6D:0E:5E:0D:0F:BF
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/O3VeCVEx56YNOtrUMWptDl4ND78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a0:54:f5:75:7e:c8:48:5f:9a:5c:44:1d:01:8e:91:33:a1:
00:1f:ad:b4:d2:5e:77:99:02:69:5b:34:af:00:35:0b:99:6c:
27:bb:96:49:3c:20:07:f2:9e:b2:64:d6:4f:60:f6:68:ff:83:
82:d4:86:d9:2a:37:c6:7d:2d:73:95:7d:78:5b:e6:53:8b:65:
6f:dd:5f:46:57:2c:2b:63:17:0f:bc:97:19:c6:68:b6:27:df:
fd:f4:a0:a2:5f:15:3b:78:e6:07:6a:c8:d1:0b:ec:44:89:e4:
38:03:8b:76:ee:93:90:2a:86:1d:0d:6f:f5:34:a3:69:bd:a9:
a3:81:12:0a:36:fb:42:b5:7d:9e:af:3e:de:1b:4d:92:52:6c:
a6:db:35:f9:b0:b5:c3:2a:d4:78:35:7a:3f:ad:22:91:d4:14:
7b:75:07:8e:07:5a:1b:f8:3b:ac:de:ac:dc:6a:19:40:92:5f:
9a:c4:56:fb:1a:14:c9:2b:15:78:cd:e4:c0:de:3b:37:31:fd:
68:a1:57:f0:c4:21:a4:ff:d8:2f:51:53:31:42:de:57:3b:f1:
b5:51:f1:7a:a1:5b:12:04:f2:c9:bb:c4:a3:86:90:16:d0:0b:
ec:e3:d0:94:29:ca:0f:4f:50:43:03:34:78:85:3e:72:cb:c2:
68:b8:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:04 2023 by rpki-client on console-ams.rpki-client.org