Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/32GuIJpzqVBAVL69QpxFyK8wf7s.roa
File: 32GuIJpzqVBAVL69QpxFyK8wf7s.roa (raw, json)
Hash identifier: rP5tIsOUMVTIOSXzb1n/dvTngNylmruqlWdK/IN+A10=
Subject key identifier: DF:61:AE:20:9A:73:A9:50:40:54:BE:BD:42:9C:45:C8:AF:30:7F:BB
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 1B4F6019
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/32GuIJpzqVBAVL69QpxFyK8wf7s.roa
Signing time: Tue 12 Apr 2022 08:50:37 +0000
ROA not before: Tue 12 Apr 2022 08:50:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47187
IP address blocks: 185.29.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458186777 (0x1b4f6019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Apr 12 08:50:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df61ae209a73a9504054bebd429c45c8af307fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:2c:34:d3:5f:eb:0a:24:4d:81:47:a1:db:
c6:d0:ac:8b:28:b0:f4:3a:25:42:7c:d5:8c:89:49:
09:ee:86:c7:92:8b:29:00:af:70:01:b6:91:26:2a:
50:ec:b3:59:21:2c:03:aa:6b:e1:b8:3c:b7:52:c9:
b0:d6:75:22:98:27:e9:59:9a:43:0b:84:b4:af:b3:
7a:73:48:85:b3:ef:7c:aa:86:8a:e1:23:07:f7:93:
71:af:d1:b2:e1:24:39:6a:cd:23:9f:de:ae:f0:5f:
34:90:58:a5:cc:f8:9f:7f:52:5e:37:fc:fb:cf:71:
95:92:58:48:80:0f:9e:20:a3:f1:f6:83:fb:32:c9:
3e:5f:7b:49:91:ca:c6:d7:d4:60:47:cc:e2:69:a2:
bd:08:f2:f8:16:7a:73:44:3e:77:58:d3:2d:21:14:
a6:2d:e0:55:d5:f1:c1:ea:d8:74:1e:6d:3e:3b:92:
61:cf:0d:f9:e6:d0:e8:46:01:3d:2b:31:e6:94:b4:
0e:18:46:6e:e2:9a:c6:7f:f4:b2:5a:14:92:9c:9b:
0e:49:96:57:dd:e7:fd:27:ae:4a:eb:13:4d:b5:6f:
c5:7d:8a:b3:8c:99:08:a9:af:cc:54:c2:62:0c:56:
99:ec:dd:8b:b7:1b:08:30:e0:32:1c:39:a5:3b:6b:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:61:AE:20:9A:73:A9:50:40:54:BE:BD:42:9C:45:C8:AF:30:7F:BB
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/32GuIJpzqVBAVL69QpxFyK8wf7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.146.0/24
Signature Algorithm: sha256WithRSAEncryption
24:45:73:e4:70:81:c5:96:34:46:fa:e1:f1:bc:30:ae:b5:52:
09:81:6e:06:af:76:56:da:ed:94:e8:60:27:f1:67:e9:1f:7c:
25:da:2e:6e:18:0c:79:30:88:bb:1a:bd:f4:eb:d7:46:5f:a9:
22:be:96:0a:8f:6d:12:3c:35:ac:94:f9:24:6d:70:00:e3:7e:
48:29:9d:4e:a8:13:5d:fe:60:4c:18:51:d6:8c:a9:4b:9b:29:
ae:b8:c0:8b:e3:a0:35:a6:60:69:4d:74:f4:41:66:50:7c:fb:
33:70:07:0d:53:2e:9c:cc:aa:55:5d:28:f2:a7:eb:c6:36:10:
c0:a5:af:a0:a2:38:24:33:19:af:07:1a:cf:c4:4d:b0:a8:0a:
57:10:39:78:7f:1f:a8:c0:e8:5d:5b:f2:d9:b2:5e:c6:2c:e8:
3e:87:fd:4c:29:b2:00:31:17:5e:e3:70:fc:ce:8a:39:53:0c:
11:ad:65:c2:1e:78:55:46:03:3c:9c:7b:18:59:1c:20:a5:14:
a0:9b:31:3b:23:74:e2:11:1b:c5:23:c0:ed:16:aa:91:23:44:
34:52:3c:ee:e6:4b:b4:26:09:08:61:68:c6:17:ef:ac:53:2a:
1e:3d:8a:93:02:31:c6:32:e8:96:7c:ad:47:d6:20:27:73:5f:
d9:aa:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:15 2023 by rpki-client on console-fra.rpki-client.org