Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/pxTz74i5Q8duIXmoynt3WIdvWTQ.roa
File: pxTz74i5Q8duIXmoynt3WIdvWTQ.roa (raw, json)
Hash identifier: OkppKDksTv2Hi2/Yxe2D6lU5UaMlPuOOGaVPSBwEbRg=
Subject key identifier: A7:14:F3:EF:88:B9:43:C7:6E:21:79:A8:CA:7B:77:58:87:6F:59:34
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 02421F5D
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/pxTz74i5Q8duIXmoynt3WIdvWTQ.roa
Signing time: Sat 01 Jan 2022 12:54:03 +0000
ROA not before: Sat 01 Jan 2022 12:54:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.244.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37887837 (0x2421f5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jan 1 12:54:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a714f3ef88b943c76e2179a8ca7b7758876f5934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:12:78:f6:d0:8f:6a:98:c5:8d:6c:58:72:
74:ad:90:62:d8:58:18:15:52:f7:cb:7d:88:ec:68:
74:15:39:a0:6f:e2:68:21:68:ac:df:eb:c6:bc:d1:
1a:53:64:4e:9d:20:54:75:4d:55:8f:89:5b:1a:ba:
f8:78:1d:02:7a:f8:c3:fd:ce:13:3d:ca:f1:ac:90:
49:3e:6d:5a:8c:a6:e7:2a:e8:fb:06:d1:0e:73:c5:
3a:47:ed:d4:52:cd:08:b5:98:0f:42:bf:66:1f:3a:
df:40:44:d5:cf:ca:cd:8b:08:8a:df:ab:8b:c6:bf:
66:05:08:fe:73:29:c7:50:fa:40:43:61:7a:d9:a4:
0e:3b:1f:6c:27:dc:86:32:b5:aa:8d:02:e3:f4:b9:
f9:ba:c7:c8:20:15:57:25:b2:83:0a:ca:b0:71:92:
1e:fa:52:f8:2e:c4:57:cf:50:49:1d:67:34:1f:05:
c8:99:86:00:41:89:05:91:a1:2f:0d:54:a8:93:6c:
63:21:d1:95:dc:8f:67:4e:ed:d5:73:a1:11:f4:03:
65:8e:28:e0:d5:54:55:db:83:a7:0b:7a:f3:c5:d4:
11:07:c2:e8:3b:04:97:b0:87:ff:be:c4:ae:3c:5a:
bf:c9:b6:49:7f:12:b4:aa:0b:bf:e7:f7:66:c7:02:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:F3:EF:88:B9:43:C7:6E:21:79:A8:CA:7B:77:58:87:6F:59:34
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/pxTz74i5Q8duIXmoynt3WIdvWTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:e4:5a:d4:4c:f9:92:8b:90:f5:06:c9:3c:a2:2e:a8:2c:8c:
15:52:8c:65:da:9f:6f:18:b9:4f:75:5f:4a:e0:6a:f8:c9:47:
3f:75:d7:38:7d:9e:fc:c2:fb:dd:6b:de:86:1c:f9:99:cf:61:
81:13:7d:d5:78:ef:3c:a1:74:cc:47:d3:e4:be:70:f3:b0:dc:
1f:35:29:a0:15:6e:59:08:f4:14:7f:18:d2:2f:8c:f2:8d:00:
5a:3c:0e:bb:42:a5:8e:1e:08:2c:3e:02:7c:ad:6e:23:0d:4a:
9b:ab:56:e2:fe:c9:ad:4e:cb:04:e1:59:d1:f7:ff:b8:e8:00:
68:cd:c5:75:1a:2a:aa:0b:bd:1a:6d:4e:7f:48:59:be:86:24:
f5:ce:0f:c9:22:0e:f7:c3:32:2d:c7:94:e2:e7:72:a8:a7:0a:
9a:8e:1c:1a:29:9f:2f:9c:ec:b1:ff:df:e9:f4:cb:75:a7:fa:
15:0a:9c:5e:9b:71:2c:e5:18:f1:d7:f5:63:9f:b0:ea:22:0d:
e5:b9:03:f8:c2:88:04:52:9c:43:1a:f9:33:18:47:25:af:4f:
f8:64:ad:61:ce:2b:4e:af:4a:20:01:81:63:be:c2:68:ef:27:
bd:3b:cc:0b:2b:87:72:72:df:d2:a0:1b:cb:1f:cb:7f:c7:df:
3b:3e:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org