Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/RJJbx7FthUGI9wxhS7n7mk-xmCQ.roa
File: RJJbx7FthUGI9wxhS7n7mk-xmCQ.roa (raw, json)
Hash identifier: +m8/iT0kJmyjdZvnsDWIQ9ubFSlfbY8zgCum3s58OtM=
Subject key identifier: 44:92:5B:C7:B1:6D:85:41:88:F7:0C:61:4B:B9:FB:9A:4F:B1:98:24
Certificate issuer: /CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Certificate serial: CDBA5F
Authority key identifier: D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/RJJbx7FthUGI9wxhS7n7mk-xmCQ.roa
Signing time: Mon 25 Apr 2022 17:53:00 +0000
ROA not before: Mon 25 Apr 2022 17:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13482591 (0xcdba5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Validity
Not Before: Apr 25 17:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44925bc7b16d854188f70c614bb9fb9a4fb19824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:1f:42:a9:08:14:4f:84:91:ee:71:2a:60:
bc:d7:9a:13:81:b7:2f:b8:eb:2c:b2:63:18:af:d2:
77:a1:08:68:05:4e:ad:3a:dd:78:0b:3b:8b:55:0a:
5a:24:03:9d:91:fb:0f:e2:e8:e5:21:27:1d:1d:66:
ac:b5:bd:1e:34:64:cc:27:cc:c4:6d:eb:32:4e:c2:
f9:1d:a3:9c:04:03:ae:7b:7e:14:5d:51:d4:08:56:
87:ee:cb:18:b7:0a:8b:7b:52:12:72:62:4d:db:a7:
69:02:d9:22:07:9f:59:42:8f:fb:ed:ed:cd:cf:6a:
47:3d:a5:57:cf:05:dd:fa:fd:83:1e:ef:84:0c:5e:
bc:78:6c:c2:73:08:dd:72:ab:7a:1d:87:a4:76:d1:
c0:59:b4:09:e1:4f:81:0d:8e:6c:89:78:fa:69:3b:
a8:a2:55:76:c4:60:5b:3c:de:a5:f3:64:24:b3:3f:
34:d6:c9:fc:fa:22:ec:eb:4e:56:8f:e2:70:70:35:
36:9b:56:26:7a:ae:f6:ab:8b:cf:95:5c:c2:6d:cd:
04:17:b7:6d:2f:32:3f:76:0e:76:31:3e:28:ea:be:
d5:ca:c2:55:49:b3:5d:b4:c3:4a:14:30:22:17:0d:
18:91:35:39:51:7d:60:f3:12:8c:1a:69:78:7d:31:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:5B:C7:B1:6D:85:41:88:F7:0C:61:4B:B9:FB:9A:4F:B1:98:24
X509v3 Authority Key Identifier:
keyid:D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/RJJbx7FthUGI9wxhS7n7mk-xmCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ae:55:cc:06:b9:32:76:53:4c:02:b5:9a:94:00:f1:5e:06:
a3:30:b9:a3:0e:e4:c4:e0:8f:17:8a:6d:c3:ad:06:3b:9a:53:
65:6d:70:5e:da:04:41:fd:3e:94:c0:f0:fa:e6:82:44:6a:10:
51:e1:81:ab:7f:b3:5b:7a:6f:4b:dd:a5:42:23:24:ad:33:30:
70:1c:89:0d:b9:4d:ac:a5:f0:ad:f9:f0:be:41:5f:b6:f6:01:
30:0e:3f:48:4b:ff:77:e9:e7:14:d4:da:ae:a2:6a:7e:74:64:
14:dd:e4:ca:4d:44:9c:c1:50:1e:c0:fb:d4:3e:29:a5:a8:1b:
d2:24:78:b1:c7:6b:df:7a:98:cb:2c:93:07:ff:5e:01:75:bc:
7d:6c:bc:29:c5:16:b3:d4:df:6a:00:41:dc:ed:cc:cc:dc:ec:
89:51:4d:df:53:13:c6:d8:96:f1:e4:05:cb:a9:1b:d9:94:fb:
41:ba:5e:ab:0d:a9:e0:5e:6f:0e:96:39:b4:f4:7c:eb:f8:d3:
6d:c3:90:05:f6:ca:d1:16:7e:9e:9d:c7:c5:22:04:fe:dc:1b:
a9:00:0c:c7:06:48:ba:13:9b:ef:e4:ab:26:ab:f8:d0:e8:68:
96:95:75:de:ae:65:c8:8a:ad:68:8a:93:80:6f:a2:aa:be:15:
f7:68:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:40 2023 by rpki-client on console-fra.rpki-client.org