Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TDceiCoMh1kAE2_Yua9aczYrwkI.roa
File: TDceiCoMh1kAE2_Yua9aczYrwkI.roa (raw, json)
Hash identifier: 9wEs5SImUVIR2YlhASWf/uOuFcfW/eUN/JLuQgFRVyc=
Subject key identifier: 4C:37:1E:88:2A:0C:87:59:00:13:6F:D8:B9:AF:5A:73:36:2B:C2:42
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 138D71E1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TDceiCoMh1kAE2_Yua9aczYrwkI.roa
Signing time: Sat 01 Jan 2022 05:56:21 +0000
ROA not before: Sat 01 Jan 2022 05:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203019
IP address blocks: 185.147.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328036833 (0x138d71e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c371e882a0c875900136fd8b9af5a73362bc242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:63:cd:2c:62:c2:cd:97:ed:fb:bb:45:20:
2b:9b:c0:88:f5:92:8c:2b:76:bd:f5:c2:32:85:db:
86:c4:1f:cb:be:3a:19:f8:59:04:79:82:a1:bf:16:
c3:1f:a9:27:88:48:33:0e:fd:bc:c4:c5:59:56:a0:
ff:77:21:9f:18:95:02:a6:01:1f:ca:5d:41:2d:c1:
02:f4:a1:a4:cf:c6:1c:19:38:7b:08:c1:68:52:fb:
ce:c8:7a:fd:02:20:ad:a6:bb:e2:37:b4:a9:4e:0a:
17:2c:24:9c:b9:88:11:ab:fc:12:8b:e5:52:af:8c:
22:a7:44:7d:ab:81:66:72:9e:ab:96:89:44:71:3b:
df:96:dd:5f:16:60:4c:84:97:83:dc:1c:81:e7:96:
e9:16:d0:7c:6e:b5:de:78:dc:83:31:17:ac:3c:75:
cc:a2:fe:7c:21:86:24:4c:74:a2:6b:8d:b3:e8:45:
8a:a9:3b:37:9f:e9:18:41:bd:61:20:24:77:6e:05:
8c:1b:f6:cf:8a:86:4a:8f:4f:99:af:f4:d1:4b:e1:
5f:0e:6e:6a:30:c3:f9:13:5e:da:24:fb:80:8c:0b:
88:0a:f5:a8:21:ee:d7:68:e2:d2:64:b9:b0:a1:a5:
91:df:7f:4e:66:bb:04:a6:a2:41:fb:27:84:f5:49:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:1E:88:2A:0C:87:59:00:13:6F:D8:B9:AF:5A:73:36:2B:C2:42
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TDceiCoMh1kAE2_Yua9aczYrwkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.48.0/24
Signature Algorithm: sha256WithRSAEncryption
89:53:5f:4b:c0:a0:8d:df:0b:22:cc:d5:39:6c:91:63:3c:32:
14:6b:52:9e:c8:ec:52:34:b4:bb:3e:33:16:1f:14:ad:30:b9:
c6:ba:97:d4:ce:6b:52:7a:9f:4a:64:36:5e:3c:7a:f3:15:d0:
13:0e:f7:89:a1:bd:dc:4d:c9:0e:66:9d:91:5a:cf:92:28:90:
85:c5:96:6d:ee:b1:84:77:2e:52:47:24:77:b6:8b:25:8f:9f:
01:ed:e7:cb:7e:d2:30:60:df:15:9e:4f:89:5b:a4:1b:00:67:
63:c9:93:62:a9:84:ea:e6:e9:1c:74:c7:bd:85:e4:81:1a:59:
7f:a4:6b:ad:78:c0:10:ed:56:6c:69:12:bd:35:dd:85:d5:8b:
f7:dc:73:c0:c0:82:2a:c9:19:ff:2e:66:33:6f:66:8d:62:6f:
24:80:f9:87:ee:18:14:c9:58:4b:ab:b8:cf:9e:6a:66:aa:f4:
d3:44:20:a4:51:bb:8b:2e:76:d8:1c:83:3b:85:42:4f:4c:fd:
9b:d1:56:e4:2f:cb:3e:38:d9:00:1d:00:67:c8:ee:90:20:0c:
b0:38:6d:1e:80:5c:b8:c2:6c:92:90:34:2f:d1:56:f8:1c:41:
2e:54:37:5f:19:8e:cf:9d:a3:f7:6d:28:84:af:89:76:7c:1d:
e6:44:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org