Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/yjB0WnYr4lvFKzlkytFlTxbbeEQ.roa
File: yjB0WnYr4lvFKzlkytFlTxbbeEQ.roa (raw, json)
Hash identifier: t2Uzp6xDdnuCJBNCh1VG5BsCH+Dgb65UjAl0Uruo93o=
Subject key identifier: CA:30:74:5A:76:2B:E2:5B:C5:2B:39:64:CA:D1:65:4F:16:DB:78:44
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 1A68BF26
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/yjB0WnYr4lvFKzlkytFlTxbbeEQ.roa
Signing time: Mon 10 Jan 2022 17:11:45 +0000
ROA not before: Mon 10 Jan 2022 17:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.18.122.0/24 maxlen: 24
185.18.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443072294 (0x1a68bf26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 10 17:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca30745a762be25bc52b3964cad1654f16db7844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:67:cd:bb:ed:a8:d3:6b:0d:18:df:31:6c:
e4:54:e7:a2:d9:55:90:99:11:5e:dc:ea:56:8d:51:
05:be:85:54:e3:b4:5f:c1:db:96:21:15:23:bf:3b:
f6:95:ae:09:5d:de:da:30:57:d2:59:00:4f:77:f7:
cc:e2:3a:81:f1:d8:e1:1d:b2:cf:79:92:15:89:cb:
17:a0:94:24:68:f6:a0:31:70:d3:ee:af:37:e6:e0:
3d:e0:7f:23:e9:d3:fe:63:5a:f5:10:97:ef:42:6b:
59:87:22:ea:e3:20:f1:8d:c6:62:eb:e5:8b:e7:c5:
40:8c:23:69:ff:b8:c3:08:14:66:99:8f:42:c0:4a:
9c:7f:d3:12:47:97:09:bd:86:65:44:0b:47:ce:18:
9c:20:c0:d6:db:f6:9b:0c:7d:16:ef:44:c0:be:58:
e7:5b:6c:98:2a:84:45:fa:3a:e7:90:d8:a9:9e:b3:
15:d6:20:26:25:82:85:46:fa:a5:dd:8f:2e:f0:54:
ee:02:9e:4f:e3:f7:59:a6:f6:11:a5:35:66:db:9a:
93:38:c3:f1:46:31:15:38:d4:b3:ec:31:69:49:76:
2b:61:20:a5:81:c9:a5:72:da:8f:87:f0:d2:79:29:
c9:eb:f4:ee:b6:67:f2:34:5e:c5:43:85:a8:9f:e5:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:30:74:5A:76:2B:E2:5B:C5:2B:39:64:CA:D1:65:4F:16:DB:78:44
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/yjB0WnYr4lvFKzlkytFlTxbbeEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.122.0/23
Signature Algorithm: sha256WithRSAEncryption
71:3c:9a:2c:b7:d8:93:7b:1a:af:82:16:c3:47:41:4e:4c:0d:
2b:dc:cb:bc:4b:88:d5:7b:16:03:0d:8f:92:f6:9a:b9:57:0f:
b3:a1:dd:fb:aa:aa:f8:ae:e4:17:a7:45:b5:11:9d:e6:4b:5e:
c5:8a:5b:72:94:d2:11:ca:c3:d1:28:b2:f4:3c:5c:a6:51:79:
eb:b8:36:a0:44:f8:8e:b0:cd:f0:06:e4:9a:83:1f:ee:f1:00:
7e:9c:f0:7a:15:8b:2d:f0:c0:fc:05:25:e7:5e:a0:81:14:55:
8a:ed:c2:d1:30:01:de:9e:50:66:d2:6a:ae:80:9f:34:f2:f4:
cf:2a:ec:b4:98:2f:4c:7a:58:0a:e7:21:4a:20:dd:7b:34:ff:
a2:9a:87:ac:5e:d1:fd:52:c0:44:0e:72:36:42:0e:ab:e1:a8:
04:4a:05:d5:c8:21:3c:5d:67:1d:e9:e8:d5:53:0d:e6:59:34:
ea:06:b0:95:d7:87:e1:30:c5:e9:a2:9e:ae:62:74:38:48:cc:
9f:e0:1f:86:64:41:ac:fe:e8:14:67:ce:50:57:26:8b:1d:80:
45:12:97:f3:fb:d2:45:eb:04:94:4d:67:dd:c1:62:eb:de:3d:
44:3c:72:00:69:88:d1:36:7f:7f:51:eb:d5:da:b0:67:47:6f:
fe:80:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org