Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/AseUH18aHH2Y8OlG6S0X2r_wPzk.roa
File: AseUH18aHH2Y8OlG6S0X2r_wPzk.roa (raw, json)
Hash identifier: uRJhyrFG46/NyJvmqTRO+iFqsXqkXekupaFeUeemNt4=
Subject key identifier: 02:C7:94:1F:5F:1A:1C:7D:98:F0:E9:46:E9:2D:17:DA:BF:F0:3F:39
Certificate issuer: /CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Certificate serial: 02D86D11
Authority key identifier: 4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/AseUH18aHH2Y8OlG6S0X2r_wPzk.roa
Signing time: Sat 01 Jan 2022 05:01:39 +0000
ROA not before: Sat 01 Jan 2022 05:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395800
IP address blocks: 185.55.57.0/24 maxlen: 24
185.55.58.0/24 maxlen: 24
185.55.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47738129 (0x2d86d11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1e3770e71e6ee68b4e16f4eec6b1909f1d6686
Validity
Not Before: Jan 1 05:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02c7941f5f1a1c7d98f0e946e92d17dabff03f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:ca:f7:cf:31:3e:3b:de:a8:ab:4e:7e:9e:
04:d9:e0:fc:a2:45:da:8a:5e:96:e7:4c:49:ba:ec:
07:47:e2:6a:26:d8:b9:ed:64:42:5d:68:ed:fb:56:
fd:4b:fb:5f:2e:2f:13:ed:c9:06:1a:e2:ef:e2:e6:
f6:a8:5f:05:ce:74:e0:2c:84:8d:a1:cc:4a:95:b9:
ee:57:14:05:d5:d0:86:2a:18:c2:82:a8:95:a4:ca:
27:91:c5:77:2c:b7:96:fa:d8:71:64:f0:30:4c:64:
44:70:66:a8:c5:e4:ec:99:58:7a:66:fd:6d:c0:d3:
74:8b:93:da:b4:73:9b:1e:bf:42:c3:5c:ba:61:56:
e8:59:3e:27:55:44:03:65:a2:20:e8:08:39:71:38:
9e:57:9b:db:43:0a:10:a4:43:d7:8f:49:08:be:e8:
7e:16:59:2b:34:34:05:d2:4a:6a:94:58:e6:f7:bd:
b2:ee:f0:56:67:b9:98:15:01:a9:6a:f3:ce:fb:5c:
75:21:34:87:c9:91:86:f2:6d:0a:a2:6d:0b:61:8c:
c7:18:a8:9e:13:ce:db:7a:ae:88:f5:8a:98:fe:6d:
b4:57:27:1b:7c:33:08:8a:9e:88:87:a8:8b:23:16:
01:af:e0:18:af:89:23:87:2b:89:f2:bb:88:f8:e3:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:94:1F:5F:1A:1C:7D:98:F0:E9:46:E9:2D:17:DA:BF:F0:3F:39
X509v3 Authority Key Identifier:
keyid:4F:1E:37:70:E7:1E:6E:E6:8B:4E:16:F4:EE:C6:B1:90:9F:1D:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx43cOcebuaLThb07saxkJ8dZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/AseUH18aHH2Y8OlG6S0X2r_wPzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/76d0d1-2b41-4118-9e60-f9288d80315b/1/Tx43cOcebuaLThb07saxkJ8dZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.57.0-185.55.59.255
Signature Algorithm: sha256WithRSAEncryption
71:75:8c:18:c2:74:1a:7d:1b:8a:fb:b5:02:04:d5:75:06:5f:
a7:e2:3e:90:96:53:fc:f5:b1:46:fc:bb:3f:81:db:55:68:56:
3e:ff:c3:10:ba:5e:4d:0e:8e:67:f2:7b:fe:bb:8a:0e:27:9e:
43:5e:ed:61:65:02:2a:9d:84:e4:3a:2a:ca:4d:44:2f:ba:f6:
94:cd:38:5a:e3:4f:a4:88:10:06:9d:54:01:27:cd:54:0a:c2:
62:ce:e8:3c:9a:99:b6:37:8c:3a:69:ef:90:78:72:21:3d:b6:
7e:52:66:07:ea:a2:d3:19:35:94:54:fb:e6:02:12:f7:9c:47:
cb:1d:10:50:aa:a6:5b:e4:84:72:b7:58:88:0d:7a:ba:00:3d:
e2:d6:fb:78:ae:66:48:5e:a8:62:5d:19:19:e6:e5:6a:ca:d2:
d7:e7:5a:04:cb:fa:c5:f6:84:3c:cb:b8:02:4d:59:25:34:a9:
72:0b:4f:0f:3c:13:93:4d:6f:41:ab:df:ad:37:eb:5e:c2:a5:
32:a2:34:be:35:07:37:5a:9e:da:e8:8e:dc:03:f6:5d:3e:e9:
59:a9:0a:82:91:7a:17:2e:ed:b9:b6:96:31:a6:5f:4a:13:28:
22:3d:92:ef:d2:cf:25:ca:51:32:a9:00:7b:b2:2c:57:de:e0:
6d:39:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:59 2023 by rpki-client on console-ams.rpki-client.org