Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/46dUO-9UJsmMuPrkGKzLOmv5Neo.roa
File: 46dUO-9UJsmMuPrkGKzLOmv5Neo.roa (raw, json)
Hash identifier: NLTLfLyGVa81Thzkco1r/ptwe4/sgcDrozdIkj/bAb4=
Subject key identifier: E3:A7:54:3B:EF:54:26:C9:8C:B8:FA:E4:18:AC:CB:3A:6B:F9:35:EA
Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399
Certificate serial: 03411664
Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/46dUO-9UJsmMuPrkGKzLOmv5Neo.roa
Signing time: Sat 01 Jan 2022 09:00:25 +0000
ROA not before: Sat 01 Jan 2022 09:00:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42293
IP address blocks: 185.253.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54597220 (0x3411664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=193743467b4da41c6295e9351153309586ba2399
Validity
Not Before: Jan 1 09:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3a7543bef5426c98cb8fae418accb3a6bf935ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:95:fa:9b:e6:49:38:0e:6f:b7:1c:f1:cf:
e6:cf:db:f5:b0:04:af:5c:0d:3c:01:e3:82:63:37:
d4:e5:f8:b7:d9:9b:4f:e8:f5:64:c3:56:46:7f:65:
5f:10:25:54:e2:56:95:ce:b1:a5:f3:c6:9a:82:52:
0c:5d:d8:d0:21:89:fe:17:5e:f3:34:44:ab:c8:ac:
92:ca:08:61:ef:c4:3b:e7:93:cb:72:57:a0:e3:38:
79:95:5d:af:b1:34:12:5f:c3:90:ce:75:ff:f6:f5:
af:e5:7b:c3:5c:62:a9:41:7e:92:38:58:cc:7b:36:
05:4c:f4:5f:03:73:a4:6e:68:6e:ac:55:e2:1b:6a:
ef:1b:cc:e5:a9:12:89:a3:92:23:0d:8a:30:33:c3:
7f:12:84:d2:f3:e7:43:d1:dd:ef:2f:7e:cb:65:0e:
79:63:4d:27:8e:f2:15:bf:60:75:8a:6a:77:3b:41:
15:77:de:26:8f:a6:bd:01:1e:24:d9:9b:e0:ae:44:
b0:41:4f:d4:0b:65:bf:1d:51:38:49:c0:c8:c7:0b:
e2:39:63:ac:26:a6:ff:a8:14:a6:cd:b0:fd:dd:20:
06:1d:70:8b:55:2d:4e:65:46:47:13:2b:f5:4c:b4:
82:fd:99:7f:c8:b0:49:be:c5:6c:ca:15:d3:e5:36:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:54:3B:EF:54:26:C9:8C:B8:FA:E4:18:AC:CB:3A:6B:F9:35:EA
X509v3 Authority Key Identifier:
keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/46dUO-9UJsmMuPrkGKzLOmv5Neo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.159.0/24
Signature Algorithm: sha256WithRSAEncryption
31:11:cc:d8:cb:a5:30:66:44:fc:12:f5:db:4d:f5:87:c5:5f:
ad:b7:b5:3e:48:3b:72:e1:45:0f:33:20:57:8a:c6:92:45:70:
dd:42:07:50:d9:5c:b9:4e:38:b7:36:16:9e:7c:88:57:92:41:
65:dd:9b:e9:75:54:5a:ed:9d:f4:e7:c3:36:cc:29:df:a8:0a:
51:89:8a:c1:59:d7:97:5f:2e:4f:9c:f3:47:b5:ce:e1:99:d7:
4a:00:29:2b:f5:00:e9:17:eb:4a:91:ac:ac:73:2d:0b:54:3b:
b0:71:f7:ac:0c:da:7b:68:1b:db:8d:a7:98:7d:80:fd:58:b2:
d4:0a:d2:4e:1c:ef:82:a8:0b:29:54:11:c4:9c:e8:a6:bf:9f:
d7:d9:c9:5b:d3:5b:a5:f2:0d:8f:4e:8a:62:fe:42:05:75:96:
34:3e:3a:76:6a:25:f2:1e:c9:9a:91:3a:f9:50:f5:00:2c:77:
ae:99:77:58:1f:31:82:6f:2b:1e:33:f3:d9:e8:17:c5:87:62:
8f:2f:69:9d:06:b3:2f:ed:83:55:a8:6c:49:5d:ce:87:2c:18:
42:ad:5d:e1:ba:bd:fd:2c:31:3a:3c:73:51:88:9e:fe:c8:42:
70:b6:a8:ce:f4:f5:5c:96:8c:bf:a8:18:cb:a3:51:dd:52:c0:
e6:63:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:25 2023 by rpki-client on console-ams.rpki-client.org