Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/T2MH8wHYxiedLfMIX_p35GTS5CQ.roa
File: T2MH8wHYxiedLfMIX_p35GTS5CQ.roa (raw, json)
Hash identifier: YpxY5/NUWtNuAH8vi7Thh2YOZP5JikNQZg7nqFgNf/I=
Subject key identifier: 4F:63:07:F3:01:D8:C6:27:9D:2D:F3:08:5F:FA:77:E4:64:D2:E4:24
Certificate issuer: /CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Certificate serial: 0646E786
Authority key identifier: 67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/T2MH8wHYxiedLfMIX_p35GTS5CQ.roa
Signing time: Sat 01 Jan 2022 13:58:26 +0000
ROA not before: Sat 01 Jan 2022 13:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62214
IP address blocks: 185.87.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105310086 (0x646e786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679d712b0ce66f4ed9b9340802cce29c2edb2b0d
Validity
Not Before: Jan 1 13:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f6307f301d8c6279d2df3085ffa77e464d2e424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:f8:4b:81:6e:b9:e4:49:05:1c:79:26:2c:
19:f2:dc:c6:c3:a6:bd:5c:13:18:ee:8c:a2:22:83:
5c:77:f4:57:8a:c2:e8:eb:af:d3:8c:66:71:82:de:
88:90:38:02:b0:a6:57:1c:86:c7:8d:b9:23:43:75:
26:77:ab:0d:35:23:ab:44:29:9d:32:93:07:57:d7:
b8:20:24:ce:88:38:9d:77:ec:d0:93:59:51:c6:e1:
63:63:f3:2a:98:11:34:1d:8b:d2:d3:61:55:1f:ca:
fe:74:5b:ac:25:59:5f:2b:04:34:60:72:27:81:b0:
e0:c7:14:7f:1b:d2:5a:ba:9d:6f:4d:b5:a7:a3:f8:
45:32:38:ce:90:71:1c:c9:be:4b:12:1c:d3:75:7d:
8d:58:bc:cd:95:4e:37:22:b2:b4:de:42:ee:d6:6c:
dd:28:bb:27:ae:59:6b:6e:a9:d8:bb:60:4d:57:9e:
e8:49:36:2d:96:8b:6b:52:3a:db:db:61:a5:fd:14:
3f:3f:93:d1:fe:f5:6a:81:60:33:90:d6:e7:fc:eb:
7b:83:d0:5b:81:ee:25:da:9d:0f:e2:1e:a3:15:ea:
d3:71:92:de:2f:01:da:72:9e:67:ce:5e:0d:89:94:
c9:7a:ac:2a:97:f3:77:f2:f0:db:71:30:d4:99:d5:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:07:F3:01:D8:C6:27:9D:2D:F3:08:5F:FA:77:E4:64:D2:E4:24
X509v3 Authority Key Identifier:
keyid:67:9D:71:2B:0C:E6:6F:4E:D9:B9:34:08:02:CC:E2:9C:2E:DB:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z51xKwzmb07ZuTQIAszinC7bKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/T2MH8wHYxiedLfMIX_p35GTS5CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/79d8dc-3172-41ab-aa57-46fa954f71f3/1/Z51xKwzmb07ZuTQIAszinC7bKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.60.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3b:79:98:78:7e:53:fe:1c:89:39:67:05:2d:df:24:40:a6:
0a:0a:e1:97:e9:f5:62:83:0f:21:86:c2:bb:e3:d5:78:b6:73:
ab:a9:ba:38:d7:1c:4d:e1:83:a3:24:5f:d1:10:9e:25:64:4d:
05:eb:ce:ca:de:4c:6f:5a:67:0a:3e:ca:56:7d:94:58:83:28:
0d:17:b2:2b:8c:b4:29:40:05:32:e6:8e:f9:be:e0:38:72:8d:
55:14:68:a8:d6:81:72:24:aa:e6:ae:f9:6b:85:19:a2:10:b7:
fc:38:27:c6:ba:21:55:18:bf:bc:d1:6f:0c:ee:09:95:75:d3:
72:8b:ec:44:b3:e6:30:19:f3:be:d4:c6:60:98:3e:f5:ab:e1:
cd:65:39:b0:2f:ea:40:c5:83:0c:c1:ab:a9:f5:ca:e4:0b:b9:
73:f4:51:c4:c7:b3:32:b4:af:63:f4:54:13:da:0b:ea:c9:68:
fa:b9:08:8a:fe:12:96:31:7a:a1:11:3c:49:55:c4:35:ac:8e:
75:09:93:23:fc:19:00:44:e7:bf:7b:1a:74:aa:8a:90:0f:2a:
fa:9c:fe:af:67:96:05:22:0f:f2:6e:12:df:a9:56:aa:d9:cc:
e3:2a:8d:f2:a7:36:21:80:cd:77:d8:01:18:45:a2:61:47:f5:
f3:5f:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org