Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/s9xxEMDtaqbJW-jG20XFMUHeqDw.roa
File: s9xxEMDtaqbJW-jG20XFMUHeqDw.roa (raw, json)
Hash identifier: PoYycRYwNw5tVJkvHR65LU6chSyzd4rSgL09NdB82Qk=
Subject key identifier: B3:DC:71:10:C0:ED:6A:A6:C9:5B:E8:C6:DB:45:C5:31:41:DE:A8:3C
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 175A460B
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/s9xxEMDtaqbJW-jG20XFMUHeqDw.roa
Signing time: Sat 01 Jan 2022 02:50:53 +0000
ROA not before: Sat 01 Jan 2022 02:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 185.70.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391792139 (0x175a460b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jan 1 02:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3dc7110c0ed6aa6c95be8c6db45c53141dea83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:6e:f4:93:25:f2:ba:9e:4f:17:b5:c1:8f:
3d:8c:a5:1f:73:2a:fa:24:93:6c:c7:e7:d9:8b:d4:
48:e7:9b:75:4e:cc:d4:1b:cf:01:d3:d3:29:9e:7a:
16:8c:98:b5:87:5f:5c:50:2a:64:2c:89:90:df:7c:
d3:43:81:62:50:78:53:43:1f:77:a8:84:ab:40:e0:
b3:5f:57:62:28:d0:f9:55:96:9f:87:be:f6:c0:cb:
91:ac:0f:32:9f:76:bd:51:5d:c6:01:b7:8a:45:39:
e8:66:5d:64:52:2b:f0:8f:39:1e:db:d9:4a:a9:81:
a1:ca:06:f5:11:f6:c7:76:d1:80:dd:e0:47:c4:51:
20:71:2b:e0:d3:f0:fc:4e:93:d7:1a:6d:1e:47:3b:
9c:65:4e:c7:a1:80:4e:0b:d7:28:63:05:68:9a:b9:
20:b0:7d:9a:e1:d8:3a:95:94:45:0e:9a:71:fa:6b:
d7:e5:70:84:f1:d6:44:e0:c3:09:7e:bf:70:b8:ed:
f9:40:cd:8f:3b:9e:ad:35:56:b6:cb:08:ed:f3:59:
74:65:7f:2c:b0:5d:1e:80:b8:c1:6a:89:89:34:34:
d6:11:5f:57:27:22:0b:a0:2b:76:38:1e:7d:c4:15:
0b:aa:9e:f7:a3:31:b6:52:dd:1e:a6:b1:47:6d:6a:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DC:71:10:C0:ED:6A:A6:C9:5B:E8:C6:DB:45:C5:31:41:DE:A8:3C
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/s9xxEMDtaqbJW-jG20XFMUHeqDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
03:12:e2:90:21:17:c9:70:d9:49:9f:82:6a:0f:aa:ea:c6:e4:
19:20:54:84:2e:8a:1d:a2:f3:42:c4:35:69:dd:8f:0f:2b:94:
69:5b:9d:ce:ce:fd:94:0c:de:d0:8f:c6:39:12:63:94:3f:84:
10:e2:40:00:d3:b8:c5:25:de:04:22:ec:b3:10:4d:1a:f9:c2:
bc:ee:a9:8a:49:c2:c8:f3:4b:be:7e:3a:f1:67:b4:81:d2:15:
64:73:e2:c9:42:f6:80:a7:d5:9a:dc:b3:e2:a4:b5:6e:a4:6e:
fc:88:9f:b5:65:37:cb:e5:78:bd:36:66:ab:ac:63:73:86:2f:
52:a7:25:19:c9:af:80:09:aa:11:ae:50:e3:6a:89:1a:96:89:
51:2a:44:66:f9:1b:10:e8:a3:56:6d:97:3b:b7:15:42:c7:91:
7a:4b:e7:48:9d:19:c6:09:b7:a5:5c:0e:80:52:7d:fa:8c:37:
8b:a3:eb:0d:20:a1:83:3e:3a:4a:1f:ee:a7:ab:f1:f2:91:86:
07:93:15:1d:96:37:e4:22:58:ff:89:2c:d3:d8:41:61:b1:e8:
73:24:76:d7:21:f4:f1:b9:78:8c:bd:57:07:e1:c1:fb:f6:4b:
01:33:6d:a8:c3:b5:7f:6e:d6:ed:15:39:47:e1:3b:c8:c6:a2:
7d:9e:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-ams.rpki-client.org