Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/Vd0C9leH4HHX3sSo0YpWqlGX2J0.roa
File: Vd0C9leH4HHX3sSo0YpWqlGX2J0.roa (raw, json)
Hash identifier: t8oEq83lgKNRJiQmPZ3Kji4WF92eSAbA3/jnfFdAbYQ=
Subject key identifier: 55:DD:02:F6:57:87:E0:71:D7:DE:C4:A8:D1:8A:56:AA:51:97:D8:9D
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: BD8B6C
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/Vd0C9leH4HHX3sSo0YpWqlGX2J0.roa
Signing time: Sat 01 Jan 2022 10:03:48 +0000
ROA not before: Sat 01 Jan 2022 10:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29099
IP address blocks: 185.99.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12421996 (0xbd8b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Jan 1 10:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55dd02f65787e071d7dec4a8d18a56aa5197d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:15:06:f4:92:ea:3a:e6:8e:f8:68:06:82:
26:04:4e:66:5e:67:db:37:4f:45:b3:a4:b7:35:df:
86:62:dd:64:d9:7b:22:14:50:0c:d6:cd:d3:01:57:
c1:9c:01:92:7a:e5:07:dd:9b:a7:5f:fd:8e:db:e5:
9e:cd:02:43:ab:90:3e:96:07:30:42:d2:97:ab:f4:
7a:5a:9a:cb:0c:57:19:a3:a7:0c:06:e9:7a:a1:3c:
bb:22:d9:7e:44:52:2c:a2:73:cd:8c:15:fb:51:d2:
ae:40:aa:6b:8d:91:6b:63:79:47:3b:54:ac:23:28:
95:37:92:63:ff:d9:68:af:d4:fa:50:56:95:e1:da:
9b:06:6f:3b:12:cd:75:b0:ed:04:d6:f9:27:f2:0e:
00:37:63:e0:33:5c:42:f2:cd:0e:53:20:09:9c:b1:
01:f4:c3:dd:e6:ee:5a:f2:b7:be:5c:ae:ce:93:42:
57:9f:e6:db:be:58:4c:77:16:1f:ef:84:b3:55:54:
87:b8:93:73:ac:01:86:2f:a5:10:24:a3:d8:bf:21:
06:68:3a:96:4b:89:6e:e1:e2:1a:82:25:82:cd:51:
2f:49:23:4c:51:d3:43:80:18:84:5c:30:f8:6f:2d:
54:33:5b:f6:67:97:ed:e2:fd:a8:b4:c4:e4:1e:50:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DD:02:F6:57:87:E0:71:D7:DE:C4:A8:D1:8A:56:AA:51:97:D8:9D
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/Vd0C9leH4HHX3sSo0YpWqlGX2J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a8:f6:64:a7:bc:18:a9:a6:98:68:de:0a:d7:37:3e:f4:da:
95:fb:36:ff:be:6b:47:66:38:ec:6d:bd:ad:d8:18:9b:67:5a:
9f:05:4d:cc:73:91:04:0a:42:a1:fb:11:85:eb:42:1a:7a:d8:
5c:d7:90:a6:a8:4a:92:ca:ba:0f:91:89:b8:af:65:61:a3:c4:
29:4b:31:aa:3b:6e:07:83:8e:30:47:a8:c3:74:eb:d8:31:e4:
fe:b2:a2:5e:c3:40:c4:1c:d3:7e:97:e1:76:14:27:f2:8a:eb:
11:b3:0b:4d:88:ed:49:f0:8b:d2:4a:f6:dd:6d:10:e3:13:21:
da:83:c1:a6:ef:bf:da:7d:91:3b:22:fd:f4:cb:c3:ab:95:ed:
39:4f:fb:3b:83:fe:44:7a:87:1e:c0:4c:a1:a3:32:28:34:36:
ff:24:97:ad:b9:d8:3c:78:80:d6:91:20:cf:e9:0a:4c:51:a8:
b6:a7:37:f9:0d:22:32:c1:12:56:a2:9b:cf:f2:37:c7:fe:20:
a9:91:09:53:02:0f:39:09:2c:0a:b6:de:8a:51:8c:61:be:ea:
3a:d9:ea:52:ae:6e:41:11:2e:63:e2:ae:cf:13:d4:8c:c4:57:
d7:8f:3a:19:4a:2c:7a:fc:7b:4d:d3:02:f1:40:94:d9:33:f1:
c4:ef:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org