Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/PwKz1lB1piPZe0GURRy6CARaQ3g.roa
File: PwKz1lB1piPZe0GURRy6CARaQ3g.roa (raw, json)
Hash identifier: 9WPd0ASff61oolu3Q+YiGUK+gL7uyZurcPz0Ii71ewA=
Subject key identifier: 3F:02:B3:D6:50:75:A6:23:D9:7B:41:94:45:1C:BA:08:04:5A:43:78
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 03684D
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/PwKz1lB1piPZe0GURRy6CARaQ3g.roa
Signing time: Sat 15 Jan 2022 15:50:46 +0000
ROA not before: Sat 15 Jan 2022 15:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223309 (0x3684d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 15 15:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f02b3d65075a623d97b4194451cba08045a4378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:74:a2:66:c4:09:b4:5f:09:e6:0e:dd:02:
3a:87:5d:24:3f:80:2c:4c:db:72:bd:1e:79:84:e1:
23:5f:36:d3:89:8e:46:dc:31:b9:84:87:3c:16:1c:
72:9a:04:73:50:7e:63:0f:48:a2:32:3c:1c:68:9f:
33:ae:c6:d3:3d:60:b5:c7:ae:ba:2c:bd:12:c9:54:
f8:db:aa:4b:61:27:62:7b:34:04:ac:fb:a7:5b:0e:
21:d6:cd:75:70:c1:51:5c:f4:14:9d:77:fd:48:6d:
6d:e8:2a:1a:76:49:6f:4f:5f:11:0f:00:90:e4:38:
fb:50:90:50:c9:26:ad:20:97:80:75:3e:2d:c4:b5:
11:f6:1d:75:0d:47:c0:01:b9:80:b5:45:b1:c4:e3:
03:19:f1:c2:d7:8a:c4:6e:02:49:c0:79:b8:a9:21:
de:e3:f2:62:b4:9a:c2:96:6d:a2:5c:38:b0:ec:94:
bf:f4:17:93:dd:c8:e7:bb:8f:34:27:07:68:ff:f9:
71:d9:ab:fb:d1:32:3e:d7:e5:1d:9b:27:2b:59:ef:
33:ac:0e:30:54:7f:e5:86:3d:af:34:09:f0:d8:67:
61:d4:f2:69:e0:19:fb:9e:9d:51:70:e5:69:01:69:
e6:24:a7:d3:7d:e2:10:a0:c8:11:75:cd:d6:9e:a8:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:02:B3:D6:50:75:A6:23:D9:7B:41:94:45:1C:BA:08:04:5A:43:78
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/PwKz1lB1piPZe0GURRy6CARaQ3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8f:c9:45:bb:0f:d7:9a:fb:83:68:57:4e:01:2a:76:a6:2e:
6b:60:a7:00:28:a8:b2:14:0c:f1:76:ce:00:5b:db:5d:c8:64:
4e:9a:f7:29:07:2f:4d:41:a9:c9:3e:8c:a4:9e:46:64:a2:a5:
97:ab:5d:0b:89:ed:f2:35:6d:1e:ef:6e:4b:03:d3:15:5a:7a:
d9:bc:1d:dd:d9:a5:18:80:61:1b:8f:b9:b7:18:72:40:6c:e6:
ec:eb:61:74:c0:16:6f:24:dc:f5:5e:8d:f4:45:df:22:f5:79:
2e:45:c4:6b:21:5e:74:7e:fb:0c:2c:98:14:e2:2f:70:f9:f6:
08:38:e5:6d:cb:ed:e6:38:68:4c:95:eb:3c:58:04:a8:99:65:
08:35:ee:a4:26:45:d4:85:89:8e:9d:89:db:a0:a3:4b:fa:94:
f1:09:e6:01:d2:1c:7c:c3:1b:0d:b2:aa:df:4f:ad:1e:f3:2f:
dc:75:85:74:f5:74:99:76:e9:af:18:bf:ab:87:d4:f1:22:30:
c5:7b:d0:c0:84:21:ac:fb:0f:de:f9:a1:50:dc:4a:6d:aa:0a:
42:a0:81:b4:33:70:41:00:ca:aa:16:b5:9d:fe:ac:79:8b:89:
68:84:d4:2a:10:bd:ca:f8:55:9f:b0:f2:10:02:9b:33:03:31:
3f:43:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:03 2023 by rpki-client on console-fra.rpki-client.org