Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/sv3-Ie70rs5n3v5SI5LocHShAH8.roa
File: sv3-Ie70rs5n3v5SI5LocHShAH8.roa (raw, json)
Hash identifier: ntw2jdn8/BqM5whTuxeVxvavpCzbYK09bM4xwnOy9jg=
Subject key identifier: B2:FD:FE:21:EE:F4:AE:CE:67:DE:FE:52:23:92:E8:70:74:A1:00:7F
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 1473D973
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/sv3-Ie70rs5n3v5SI5LocHShAH8.roa
Signing time: Sat 01 Jan 2022 09:58:54 +0000
ROA not before: Sat 01 Jan 2022 09:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209504
IP address blocks: 185.125.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343136627 (0x1473d973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 09:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2fdfe21eef4aece67defe522392e87074a1007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:90:0e:be:85:7d:84:b3:31:a2:f2:34:8f:
bc:34:94:a6:90:05:55:7d:cf:e5:c9:4d:42:b0:a2:
71:14:95:51:ed:48:4d:b2:d6:83:a9:c8:de:ba:ce:
e8:af:aa:53:51:99:21:d1:54:a3:ed:65:4b:60:22:
91:c6:6c:80:ca:4f:31:c0:4a:18:fa:57:79:f2:07:
4b:fb:c8:ee:a2:e6:d2:62:67:73:08:52:0b:3f:df:
dc:66:e5:ac:9e:2b:df:fa:c1:94:e0:04:3a:cc:b0:
54:6f:ca:d7:12:7b:1d:7c:d9:13:e3:ea:ad:e2:40:
9c:3e:42:4a:8b:76:f5:5e:d1:73:cb:44:1c:12:d5:
5f:17:55:10:c0:6a:c7:7d:20:fb:fb:59:12:3d:da:
94:7c:8b:72:a6:a2:fa:ed:11:62:6e:33:43:41:05:
0c:67:48:bc:49:ba:30:07:3f:06:b4:a0:0b:90:5c:
c4:0f:9b:eb:b7:1e:7f:57:8d:85:0e:d1:61:16:bb:
4c:a5:84:b0:e2:f1:ad:82:85:63:a4:f1:66:f7:da:
72:7d:ef:bd:21:f4:0e:91:77:64:58:ab:55:27:32:
f3:66:9f:17:a8:b6:ba:40:5c:57:8d:af:c7:50:28:
58:43:8a:0e:1f:4f:27:9e:fe:58:90:97:26:1b:cc:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FD:FE:21:EE:F4:AE:CE:67:DE:FE:52:23:92:E8:70:74:A1:00:7F
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/sv3-Ie70rs5n3v5SI5LocHShAH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:58:7b:f9:3e:6f:ea:d3:69:c6:c6:7d:fa:1e:5a:ff:99:68:
f6:dd:ef:db:35:18:7e:47:e3:d4:fa:ee:1f:d5:2e:c0:8c:14:
35:94:0b:8c:b7:53:21:69:5a:e7:73:d4:f5:a1:9d:39:07:49:
c5:4d:ad:08:75:dc:47:5b:36:1c:25:de:8f:39:26:70:24:03:
b7:e1:68:f4:03:e9:12:4d:e4:3a:e9:bd:94:00:ca:5b:9f:2f:
e5:6b:c2:bf:73:a6:8c:4a:0e:03:58:79:54:bf:b7:9c:a4:58:
09:3a:b6:8d:b6:a8:8f:84:da:f1:13:a3:00:31:3a:eb:2d:61:
73:1f:1b:40:a9:ff:86:4c:34:fc:4c:50:2e:1c:03:72:46:4f:
46:88:4f:8b:ae:1c:c8:09:89:84:9a:15:7f:89:cc:8e:97:16:
1d:ec:d0:44:4d:01:fc:34:47:8b:73:9d:1b:46:92:14:89:ba:
34:a6:38:71:ce:31:42:85:f5:f5:a4:ff:71:f7:b9:96:aa:e8:
20:27:72:35:66:96:4f:ad:87:98:e4:bd:e3:ca:4a:e1:28:3d:
41:40:c1:07:e3:19:0b:63:d3:6e:24:35:47:23:af:9e:b0:00:
31:24:d1:54:06:b4:b2:3b:1f:3c:5e:24:6f:dc:6f:03:e7:e8:
e3:a3:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-fra.rpki-client.org