Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iqEToLWvpET0uTLpmJozTHYv4HM.roa
File: iqEToLWvpET0uTLpmJozTHYv4HM.roa (raw, json)
Hash identifier: HLPuQvFrcnk/l6X+GsFZpxklkY69N4rjfXQZp5BQL5E=
Subject key identifier: 8A:A1:13:A0:B5:AF:A4:44:F4:B9:32:E9:98:9A:33:4C:76:2F:E0:73
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0914011D
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iqEToLWvpET0uTLpmJozTHYv4HM.roa
Signing time: Sat 01 Jan 2022 16:00:35 +0000
ROA not before: Sat 01 Jan 2022 16:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138195
IP address blocks: 185.227.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152305949 (0x914011d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8aa113a0b5afa444f4b932e9989a334c762fe073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:46:02:a5:3c:94:dd:83:73:ab:4a:50:3d:
0d:88:c9:77:e0:91:b4:1a:d1:8b:b5:77:0c:85:c5:
de:b8:c2:bc:a7:4b:4e:d4:62:03:ef:a1:9a:69:a0:
29:a0:0a:9f:a7:3c:d3:70:d1:9a:09:e5:d9:ac:13:
c4:73:54:4c:de:bb:d5:a0:10:13:e8:2d:a6:50:36:
f8:ea:17:69:32:b6:1b:f8:06:48:a2:21:63:c0:dc:
1e:4e:94:26:4e:26:5b:e9:aa:77:1c:78:ad:3d:0c:
be:b5:16:58:2f:24:c1:46:3e:39:ae:38:72:02:37:
7c:5a:9d:7b:66:29:88:de:dd:91:93:a0:13:49:1d:
3c:f7:5a:df:10:57:4d:e1:df:0f:94:a5:1e:b1:6e:
34:75:b5:20:e1:c8:88:5e:5d:f0:2e:c5:5e:ea:81:
4b:53:52:49:8a:9a:e6:ed:f8:5a:40:db:c2:0a:b7:
4c:fd:95:8f:b4:3a:35:45:12:24:f5:1d:46:24:c4:
c9:b5:7b:08:7f:70:13:54:d0:ce:45:c5:bd:cb:d3:
97:f3:62:c8:eb:fa:ef:2b:1b:26:50:56:55:81:4f:
24:15:e6:13:98:99:f5:f7:3b:d8:5d:9d:87:db:4f:
e9:1f:61:b0:ef:1c:6a:d8:18:65:6d:54:23:76:db:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A1:13:A0:B5:AF:A4:44:F4:B9:32:E9:98:9A:33:4C:76:2F:E0:73
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iqEToLWvpET0uTLpmJozTHYv4HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:94:e1:01:1f:e7:06:05:9a:25:43:1a:b5:36:ff:fc:15:b7:
ca:53:47:97:a0:c6:d9:64:37:3b:d4:f2:80:08:a6:64:3e:7d:
44:e4:81:14:cc:c6:47:2d:8a:d7:c9:9f:c3:c7:30:36:6b:40:
dc:8f:4f:a1:55:42:46:8a:0b:0b:5f:c2:a7:df:52:ad:d7:03:
82:6e:65:b0:a2:1f:7a:2c:ee:03:44:94:d9:13:7f:42:a7:0b:
8e:09:15:6a:12:54:7a:4c:13:91:20:b0:c0:50:24:5b:12:08:
2a:18:fc:fa:70:ac:64:7f:58:b8:79:36:12:56:4c:4d:9e:65:
33:57:b8:27:3e:8e:e1:03:10:c1:62:54:15:3c:41:c1:6c:dc:
04:1f:77:df:55:7c:9c:14:cf:25:97:64:a9:3c:14:47:ec:4e:
3c:00:f6:e4:9e:c6:d8:19:e1:15:d5:4c:83:56:54:9f:02:b4:
9d:7d:7b:74:c3:11:60:ee:4c:8d:f3:f1:58:63:87:39:b8:93:
9e:b1:79:59:64:f5:f8:d6:fb:c9:d5:99:7c:0e:f1:17:89:13:
a2:fd:b8:24:8f:15:fe:5f:b4:6b:87:7a:bc:d5:2d:8a:9b:cd:
f2:68:50:61:20:af:e6:bf:ed:f3:76:6d:c2:ad:03:46:75:f4:
61:35:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org