Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/DTXz-wIM19MBbSXsBzC_n7k1tH0.roa
File: DTXz-wIM19MBbSXsBzC_n7k1tH0.roa (raw, json)
Hash identifier: RM+m8NjFc9nCsQzQX3/XmNyvb+HyAqZ8T8raX5SfGOM=
Subject key identifier: 0D:35:F3:FB:02:0C:D7:D3:01:6D:25:EC:07:30:BF:9F:B9:35:B4:7D
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 051BCB
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/DTXz-wIM19MBbSXsBzC_n7k1tH0.roa
Signing time: Tue 21 Jun 2022 22:50:44 +0000
ROA not before: Tue 21 Jun 2022 22:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13127
IP address blocks: 185.222.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334795 (0x51bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jun 21 22:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d35f3fb020cd7d3016d25ec0730bf9fb935b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:f8:02:fe:d2:77:62:e4:99:c0:f1:4f:ae:
ae:cf:88:f4:c8:eb:90:74:62:6a:3e:dd:33:35:e2:
31:ca:e8:9f:e2:c1:d5:b3:53:98:64:8e:13:27:18:
eb:c5:53:f0:fc:28:0d:f3:66:d6:c2:a5:2d:88:02:
b7:9a:50:2b:0b:ce:10:51:c7:18:79:d9:ec:c0:66:
bf:a5:de:d7:24:99:f0:71:c8:dc:ec:d0:1e:9c:61:
21:7e:9a:09:7b:b8:67:03:61:0c:6b:42:32:50:03:
2d:80:f6:1f:d9:8f:14:e7:55:16:a1:0c:25:35:b0:
8f:27:6f:1a:b7:75:95:d0:7c:99:e6:a5:3d:24:a1:
b3:08:6e:b0:2c:00:cc:4f:ea:84:fc:f9:be:44:88:
5a:87:d7:d6:30:ac:a5:35:d1:9e:98:59:ee:dc:84:
5b:ec:8b:aa:f9:b5:d7:e3:57:89:c5:a1:cd:d9:73:
9b:8f:32:56:73:20:b2:66:b9:16:c2:77:c5:70:cc:
b8:a0:2e:6b:4c:9a:a5:0d:aa:16:0e:85:26:8f:97:
6b:82:a1:02:48:16:27:8f:0a:6b:ad:64:bb:5f:ea:
69:9e:d6:16:1b:dc:e9:a7:63:59:60:7c:1f:2e:22:
1a:fa:42:d0:61:71:b5:62:0d:3d:96:d6:91:21:f8:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:F3:FB:02:0C:D7:D3:01:6D:25:EC:07:30:BF:9F:B9:35:B4:7D
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/DTXz-wIM19MBbSXsBzC_n7k1tH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.232.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3c:32:93:c8:ec:e5:f8:4e:6e:55:9f:fc:87:10:68:3a:2f:
d5:88:7d:09:71:6a:f3:f7:34:a4:2e:36:00:f8:b6:82:6e:80:
2d:bf:4b:cf:e7:3b:ac:d2:91:6a:20:5d:c1:1a:fe:9f:e0:a1:
a6:80:8f:bf:e1:ea:ab:d0:ed:91:bb:b5:3f:ac:2e:0c:2a:67:
af:d1:59:e2:de:2f:8f:52:66:27:ab:11:9b:24:ac:55:6e:20:
ee:8e:69:90:c5:66:2a:fa:58:64:f7:9d:f9:8b:47:f0:44:dd:
7d:a9:b1:e2:0e:4f:42:ab:98:74:7a:7e:d1:31:ea:5a:b1:d7:
57:f3:f5:aa:41:b4:5b:b8:e2:d2:7d:fd:b9:a6:8d:51:c3:f0:
40:e5:98:db:b1:32:21:34:f5:aa:c4:db:0a:28:e7:c8:e3:4b:
c2:5c:ae:52:4e:2b:95:a7:b3:64:66:79:93:48:bb:64:d9:12:
0e:e5:f2:3e:09:d3:a2:c2:4c:bc:f6:85:7d:30:ab:2f:53:e6:
f1:1f:3b:49:99:7f:87:75:16:1c:9d:fa:cb:3b:85:51:ac:51:
6d:1e:33:51:51:44:68:fa:1b:49:94:f3:cb:c3:8b:44:b3:4f:
a1:a9:3e:91:ae:96:b7:db:54:55:a2:a3:13:c7:fd:7a:2c:13:
ae:9f:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-ams.rpki-client.org