Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa
File: 2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa (raw, json)
Hash identifier: 8KbfLqZ9S1kWBp+NjwDb4dzMjxjxxvebAECLlXRQMYw=
Subject key identifier: D9:DE:57:6B:AA:7B:41:84:F6:4C:7F:F8:3E:2A:2D:03:DE:D9:A5:1E
Certificate issuer: /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial: 03A92759
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa
Signing time: Sat 01 Jan 2022 12:02:05 +0000
ROA not before: Sat 01 Jan 2022 12:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 185.217.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61417305 (0x3a92759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
Validity
Not Before: Jan 1 12:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9de576baa7b4184f64c7ff83e2a2d03ded9a51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:50:e7:e5:3a:59:fc:c8:bc:f7:2a:ef:4f:
97:15:32:56:af:6b:69:8b:76:26:ce:e6:e1:f8:0b:
85:15:df:09:1f:2e:a0:bb:7c:29:6c:08:06:0c:fb:
1d:a7:8e:47:c5:35:b7:fb:85:9e:53:59:20:60:e7:
1e:d6:89:04:fe:35:a9:4b:c3:a4:39:91:f3:07:b5:
ad:bd:72:40:03:f4:b7:13:b3:d1:4d:50:27:52:b2:
af:39:26:86:5a:70:f6:6a:7d:a1:4c:1c:f1:3f:4c:
c0:13:06:fc:f6:d3:8c:38:3a:fb:2e:39:03:ca:25:
a4:01:1e:dd:d5:c7:13:d4:5c:63:82:5e:cb:38:1a:
75:44:71:94:92:ca:b0:6d:35:36:2e:13:c3:bb:51:
b2:ee:9f:af:4c:65:fb:56:ed:10:97:38:8c:6f:2f:
71:c3:e0:76:65:54:99:47:a5:b5:96:aa:b0:c1:12:
90:18:a9:15:eb:26:0a:c6:14:d7:c5:6a:88:6f:83:
e5:23:48:52:1e:c2:0f:39:ca:be:62:94:53:1b:f2:
7d:70:00:50:dd:88:9f:12:f8:2f:87:b0:0e:80:37:
ac:5e:9e:bf:bb:22:28:e6:53:42:b4:a6:f2:57:51:
0a:6e:ef:0b:ca:8e:6e:4d:df:ec:93:0d:e5:1b:51:
6a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:57:6B:AA:7B:41:84:F6:4C:7F:F8:3E:2A:2D:03:DE:D9:A5:1E
X509v3 Authority Key Identifier:
keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/2d5Xa6p7QYT2TH_4PiotA97ZpR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4b:d2:9e:89:4c:10:96:7e:93:22:7e:3c:8f:12:4b:89:e6:
64:51:d7:47:03:b4:0b:7f:b3:3c:89:7f:e9:52:e5:dd:c3:2b:
5e:70:41:dc:cd:1c:05:54:06:1f:09:b0:44:31:bf:45:9d:13:
46:d4:0b:b6:4b:03:58:b3:16:78:e2:d1:36:2b:40:7e:f2:ba:
9e:02:02:4f:1a:37:82:63:20:31:08:65:f6:34:59:05:d4:c8:
b0:c7:6a:fe:1c:73:0f:5c:23:9e:34:5c:08:07:fd:24:3d:06:
18:43:9f:6e:a2:c9:c9:c9:eb:81:0b:21:86:fb:30:20:f8:94:
21:6c:a6:bb:bc:57:65:1b:25:e6:9b:14:a1:e8:6b:c1:09:61:
ed:66:4b:73:75:1d:fa:c9:70:0c:22:14:4c:b6:74:7e:df:89:
67:f8:8e:1b:a1:ed:95:8d:f3:69:79:13:75:91:4a:24:4d:ff:
5b:2f:7b:57:ba:5c:8b:6f:a0:6b:4e:e8:81:5d:52:5f:7f:dc:
b8:ee:fe:7a:91:47:b0:c8:30:89:34:05:ee:d0:ec:d2:f5:3d:
84:ae:20:4b:cf:f0:b4:48:44:b4:43:c5:4b:f5:ca:87:68:0f:
19:e0:63:6e:54:17:2c:0a:12:5a:f6:3b:21:41:d1:f9:d2:b0:
81:5a:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-ams.rpki-client.org