Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/S-elqh0ge13uVX7YD0Aedm7iNk0.roa
File: S-elqh0ge13uVX7YD0Aedm7iNk0.roa (raw, json)
Hash identifier: BVDozEpb7LBToqGFbRTYf6KtAfi84p0WQ/fzbnU/z4M=
Subject key identifier: 4B:E7:A5:AA:1D:20:7B:5D:EE:55:7E:D8:0F:40:1E:76:6E:E2:36:4D
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 017475DC
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/S-elqh0ge13uVX7YD0Aedm7iNk0.roa
Signing time: Sat 01 Jan 2022 07:58:26 +0000
ROA not before: Sat 01 Jan 2022 07:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60245
IP address blocks: 185.54.238.0/23 maxlen: 23
185.54.237.0/24 maxlen: 24
185.54.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24409564 (0x17475dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Jan 1 07:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be7a5aa1d207b5dee557ed80f401e766ee2364d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:88:25:02:f3:d6:c0:bc:22:5c:09:75:09:
2b:9f:86:6c:43:ef:ac:7e:58:b0:0d:fd:c0:f5:e4:
70:bc:c4:34:bd:1a:1e:c6:0f:ba:7b:39:f4:65:6e:
76:25:94:ed:da:ca:33:0d:d3:d8:11:9d:9e:68:1c:
7a:c5:4e:8c:44:0a:1c:f3:e5:26:af:ff:f6:97:39:
6e:09:18:24:c3:6e:b3:7b:4b:f6:33:d4:aa:8b:a4:
a9:4e:30:69:ea:c4:e6:20:82:79:9e:7d:09:e6:97:
4d:0d:17:10:23:c1:95:09:88:d3:39:20:2a:20:f4:
c2:32:34:9b:0a:19:c7:7a:45:ed:81:22:38:ab:60:
b1:3a:5d:a0:19:d2:5e:c2:1b:32:77:13:9d:31:7c:
aa:c2:68:78:7a:b7:fe:f1:61:06:b9:1d:70:64:0f:
bc:22:a5:d0:34:ae:4c:9d:3f:07:94:9a:70:7a:af:
e5:a5:f0:3e:5a:ac:c9:37:23:c8:c5:b0:dd:90:de:
e8:ef:98:c5:9c:42:67:78:43:92:5c:85:01:c4:37:
32:67:c6:df:53:58:7d:4f:ec:a0:e0:b6:af:c8:86:
65:41:af:ae:ad:9f:4c:75:40:b1:bd:fc:e7:95:5c:
cb:8e:62:84:a5:64:0d:6a:b1:db:77:14:81:a0:d6:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:A5:AA:1D:20:7B:5D:EE:55:7E:D8:0F:40:1E:76:6E:E2:36:4D
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/S-elqh0ge13uVX7YD0Aedm7iNk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.236.0/22
Signature Algorithm: sha256WithRSAEncryption
03:6c:dc:85:17:be:89:ce:73:15:b6:22:08:07:49:8d:1b:d2:
85:c1:9c:81:04:3a:1e:b8:5c:a3:30:3b:32:b0:ef:85:62:2b:
6d:27:a5:be:8c:c6:78:9e:fd:3b:cb:2d:34:98:63:6c:12:a7:
b8:b0:60:b9:40:3a:8b:f6:c8:01:65:87:05:12:c5:61:bd:10:
3c:20:1b:11:bb:10:c3:81:f8:e1:0c:0e:1c:6a:fd:28:0a:e8:
70:3e:6a:c5:41:4f:42:3b:ab:67:8e:22:c2:98:11:bf:aa:8a:
df:81:62:48:53:7d:17:a6:0f:79:0d:87:96:04:63:97:cf:a4:
ae:25:77:06:c7:09:ed:f0:70:9f:53:e6:e7:8e:f2:7e:2e:b2:
1f:11:cb:d6:1f:67:e8:53:4b:a5:d2:aa:89:34:be:5e:4f:08:
df:d7:44:df:6d:6f:bb:3a:cd:99:bd:66:17:95:f9:50:ff:e2:
15:16:87:92:18:ba:22:93:e8:62:63:3a:a2:4f:ec:cb:21:d0:
ea:17:86:79:a2:7a:b2:48:f6:2f:07:5b:79:93:c2:53:99:73:
d1:a2:38:e2:94:9d:aa:72:de:28:fe:90:a8:21:70:2c:21:64:
bf:ea:37:27:ce:bc:88:bd:1b:23:6a:a1:df:72:a6:ac:39:c7:
b2:44:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:02 2023 by rpki-client on console-fra.rpki-client.org