Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7TnLX7Uqg5FHt4ak9PkBQXOwdvI.roa
File: 7TnLX7Uqg5FHt4ak9PkBQXOwdvI.roa (raw, json)
Hash identifier: SYLNvz12GcKAhCyJn8vt/Fwm/bAHIV1D4iZajoj9rRc=
Subject key identifier: ED:39:CB:5F:B5:2A:83:91:47:B7:86:A4:F4:F9:01:41:73:B0:76:F2
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0419ECA6
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7TnLX7Uqg5FHt4ak9PkBQXOwdvI.roa
Signing time: Fri 25 Feb 2022 20:09:42 +0000
ROA not before: Fri 25 Feb 2022 20:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60025
IP address blocks: 185.42.27.0/24 maxlen: 24
185.42.25.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68807846 (0x419eca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Feb 25 20:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed39cb5fb52a839147b786a4f4f9014173b076f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:1c:fd:e1:01:79:b7:fe:2a:60:db:a6:eb:
54:e8:5a:f5:e3:44:03:ea:ce:f4:30:37:0f:6c:ec:
1f:58:bd:f0:b6:e1:73:76:5f:a3:e9:90:8d:28:a1:
60:20:53:6c:af:90:0b:00:6b:43:7d:e4:e8:76:40:
88:e9:a7:4e:07:bb:cb:a3:90:00:77:88:3f:a1:52:
a8:4f:c4:d4:07:a3:bc:96:26:33:65:64:fc:7c:7d:
3a:38:58:48:06:6e:85:63:1a:d0:8b:d4:c9:01:1b:
fc:50:e8:ca:7b:0b:a0:23:d9:4a:ba:f1:8b:b2:9c:
b7:a3:fa:22:0e:86:5d:ea:52:03:21:32:9b:62:7c:
04:90:12:ef:e9:36:57:f4:5a:fd:15:cc:65:f0:79:
ea:84:3b:77:3b:b1:ce:4a:83:47:87:71:34:12:b7:
4f:2a:95:7e:8b:30:90:a0:95:f5:3f:2c:04:88:94:
39:3c:14:6e:7d:bd:2a:4f:54:6f:3b:10:77:3b:a5:
a9:66:63:d5:f4:36:73:6d:2b:89:e5:c1:dd:63:30:
2d:ce:b5:6c:6c:dd:31:54:5b:19:c8:2b:31:56:6f:
4f:56:12:64:11:06:25:91:06:11:d3:3d:50:44:a6:
40:5e:8e:94:82:19:b5:a4:18:e5:eb:8f:5a:00:df:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:CB:5F:B5:2A:83:91:47:B7:86:A4:F4:F9:01:41:73:B0:76:F2
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/7TnLX7Uqg5FHt4ak9PkBQXOwdvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0-185.42.27.255
Signature Algorithm: sha256WithRSAEncryption
7b:83:7b:ca:c3:46:66:93:5e:d8:1e:77:b6:25:c0:10:74:16:
97:42:b3:cd:ab:a5:e2:0b:9d:0d:67:0b:22:f3:95:37:cf:dc:
f9:66:43:43:cf:17:e9:ea:6a:b5:24:4d:69:9e:8a:2d:16:a8:
f0:0f:51:9e:1c:a1:96:38:8d:0b:b7:a3:39:26:4f:82:81:00:
56:62:51:7b:97:73:19:30:a1:8e:d4:0c:01:6a:28:1d:5e:7a:
6f:81:49:10:57:14:5d:ab:7f:c1:d9:8b:a1:10:35:a1:a4:f5:
ce:52:f2:3d:49:c5:aa:17:e5:6c:14:23:ac:e6:1b:40:fa:b4:
94:4d:1e:50:a9:32:ac:14:9f:f6:71:c7:76:9a:21:07:96:58:
3a:5a:4e:71:12:99:0f:f7:34:07:1c:1a:a7:7b:96:57:79:5b:
cb:f1:62:9c:c7:95:8d:e9:80:f2:ba:5d:77:6f:e9:b1:9d:3c:
70:4c:92:1d:27:dd:07:35:58:78:31:fd:e4:b1:8e:e7:9d:d8:
98:2b:df:fe:9a:48:e1:d1:6d:84:c2:c1:be:9d:e9:c3:0a:b7:
1e:8e:6f:80:63:9f:83:7c:ff:56:33:ba:58:58:b8:1f:db:f4:
2c:eb:30:87:5b:4e:20:ab:3d:28:e6:35:f4:58:a2:b2:6b:8f:
9c:f7:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:09 2024 by rpki-client on console-ams.rpki-client.org