Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/15daPel_mG89d6JVpl_LLQ3qaYY.roa
File: 15daPel_mG89d6JVpl_LLQ3qaYY.roa (raw, json)
Hash identifier: v0cHPL/yOoiSptKNBJ1sJ1xwhfw2OczHtMSn9RApbxg=
Subject key identifier: D7:97:5A:3D:E9:7F:98:6F:3D:77:A2:55:A6:5F:CB:2D:0D:EA:69:86
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 018400D72C0438049FD75B3F662152E5B631
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/15daPel_mG89d6JVpl_LLQ3qaYY.roa
Signing time: Sat 22 Oct 2022 17:56:52 +0000
ROA not before: Sat 22 Oct 2022 17:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 185.224.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:d7:2c:04:38:04:9f:d7:5b:3f:66:21:52:e5:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Oct 22 17:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7975a3de97f986f3d77a255a65fcb2d0dea6986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:b4:47:95:5c:92:45:5d:07:21:da:9b:da:
c1:91:89:2e:fd:bc:13:b1:5b:3c:21:e3:1e:66:77:
de:dc:8d:c9:33:f8:bc:87:a2:4b:aa:f4:a3:d5:79:
0d:95:90:1b:fa:70:ba:52:80:20:03:2f:02:48:d7:
93:70:a0:b8:a1:5f:8c:03:cc:76:89:e5:d7:d0:5e:
79:e5:04:ec:8e:d1:b1:a8:19:11:0d:ef:3c:b7:85:
4b:0e:8c:51:22:34:24:41:0d:11:2d:96:96:25:75:
49:90:50:8e:87:8e:65:66:d0:cf:1d:64:a0:1a:c9:
a8:56:1f:66:7a:cd:00:58:10:33:74:72:6e:18:3b:
c5:63:bd:47:84:9a:a6:cc:cb:ef:84:95:c6:f2:f6:
db:2f:24:56:e8:36:b8:89:b6:5d:3b:62:4b:c2:b7:
09:69:0e:3e:8a:7e:1f:67:f2:ae:8d:f7:70:d7:8b:
31:0f:4d:2b:a6:3c:15:ce:31:2e:6b:1e:2c:bf:92:
5a:04:fc:15:1f:0a:5c:15:06:6f:0f:0b:8b:37:3e:
05:82:f9:c4:ed:0f:77:be:f6:79:3f:eb:f4:8d:f6:
87:aa:d2:c9:00:d8:d9:ec:e9:e8:13:d5:25:d8:38:
4f:34:f0:5e:37:45:dc:fc:56:34:64:b6:26:96:63:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:5A:3D:E9:7F:98:6F:3D:77:A2:55:A6:5F:CB:2D:0D:EA:69:86
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/15daPel_mG89d6JVpl_LLQ3qaYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:fe:61:29:fb:68:05:68:09:13:46:11:80:59:eb:67:ef:b3:
a3:54:32:07:b3:fa:eb:31:81:f4:6c:3d:a5:81:31:58:58:13:
fa:d2:d4:b2:d2:c6:3c:ca:7d:57:c6:14:8a:cd:40:a6:cb:06:
bd:b7:de:75:0f:a9:ba:ab:95:1e:23:27:da:5e:fc:52:fb:f2:
d4:6b:08:80:3e:4a:c0:0f:39:2b:7e:d1:4a:94:ee:a0:02:10:
ee:de:e2:1e:fb:51:49:ec:1a:48:4c:7d:88:99:fc:53:a3:15:
11:98:4c:93:49:e9:d8:c0:a8:0b:a9:30:30:af:ad:20:ad:2e:
de:be:ab:ed:05:0d:4d:ec:a7:03:4f:a1:70:04:86:5b:39:37:
8a:6f:be:45:6f:87:53:f6:ed:ef:ba:d1:a3:3a:fb:a5:d2:d4:
5c:02:fa:03:40:34:e3:82:62:21:8d:ff:8f:4c:6c:24:69:a0:
71:1f:46:71:82:d6:b6:64:4e:e6:0e:d2:ae:f7:3c:78:4a:aa:
1c:9a:2c:52:47:e3:2d:a9:c3:7e:a6:58:2f:a1:ea:36:fd:23:
88:5a:8b:dc:76:c2:bd:07:37:7c:af:74:17:b0:cd:1b:20:5b:
b1:ef:af:a9:0d:70:c1:82:f1:7e:fd:ad:ff:b6:52:b0:b7:11:
80:24:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:18 2024 by rpki-client on console-fra.rpki-client.org