Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/oiPkujUBRaVo0lYt8rUz9K2BpAI.roa
File: oiPkujUBRaVo0lYt8rUz9K2BpAI.roa (raw, json)
Hash identifier: m/X6+iC1Hw884LoHA+VJNjHklH9RQoRozlDW0gtxa0M=
Subject key identifier: A2:23:E4:BA:35:01:45:A5:68:D2:56:2D:F2:B5:33:F4:AD:81:A4:02
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 143DDA30
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/oiPkujUBRaVo0lYt8rUz9K2BpAI.roa
Signing time: Tue 15 Feb 2022 12:49:07 +0000
ROA not before: Tue 15 Feb 2022 12:49:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141618
IP address blocks: 185.120.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339597872 (0x143dda30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Feb 15 12:49:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a223e4ba350145a568d2562df2b533f4ad81a402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:5f:05:de:a4:1f:ea:61:48:76:ef:bb:8c:
d3:07:aa:74:4a:e4:80:1c:bc:a1:4b:12:4c:a7:1c:
e4:f5:24:2d:99:5b:20:54:cf:75:8e:7c:c0:1b:f5:
b8:41:87:1d:a1:06:61:c2:4d:07:f6:58:ff:f9:fc:
78:2f:5a:c5:a3:be:03:35:27:af:87:24:42:69:a6:
2b:b6:08:ac:73:38:18:18:61:8e:d7:da:a0:27:55:
dd:28:e8:bc:a5:c0:50:6b:1e:4a:58:c0:9c:a2:b4:
b9:af:9a:d5:2d:13:fd:af:0b:0d:36:f8:f7:b6:07:
0c:2a:cd:6d:63:fd:06:7a:e3:55:4d:60:60:48:bb:
be:34:da:25:2a:45:26:1b:a9:67:23:03:57:5c:8b:
6f:80:7b:3c:bf:1f:9b:13:fd:40:fc:ac:89:77:6e:
f8:e9:b6:b7:3b:f2:e9:8b:13:68:68:18:24:a3:6e:
30:eb:3f:63:04:f8:49:77:07:c7:92:a0:e7:13:f4:
5d:f0:8d:19:4f:55:af:dd:aa:f9:ee:1b:f9:dd:35:
9b:c4:57:81:41:02:8a:26:35:65:13:af:9d:8f:38:
ad:00:5d:d7:7c:dd:0d:b9:78:2a:b8:8d:1c:7e:89:
65:f7:a9:a6:0d:f3:f0:fc:aa:8f:1b:49:0a:6c:7c:
23:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:23:E4:BA:35:01:45:A5:68:D2:56:2D:F2:B5:33:F4:AD:81:A4:02
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/oiPkujUBRaVo0lYt8rUz9K2BpAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8e:10:91:bb:51:9d:39:13:9d:15:44:cd:c5:4c:56:e7:36:
ee:42:34:ff:8d:4e:18:5a:81:54:90:21:ae:90:83:12:d2:23:
7e:f8:ce:06:73:70:fd:a6:3f:17:7e:6f:e6:68:a9:07:18:9d:
1b:a8:fb:68:7d:d9:3d:82:e1:f1:bc:b2:fe:ad:92:47:f5:c6:
f3:79:c8:c8:6b:bc:2e:23:6f:21:f0:e3:1b:52:dd:e2:76:47:
7a:bf:05:6a:58:50:77:71:ac:8d:7c:34:8c:a5:5e:a1:f0:97:
f7:17:f0:03:17:1d:92:cb:41:1b:23:4a:eb:cf:7b:ef:f6:4b:
f5:a0:c0:d3:c7:ea:d7:d3:56:56:1d:ce:14:7a:cd:11:46:3d:
7f:95:6d:de:7f:c3:b3:9c:80:01:95:2e:4c:24:20:47:43:a9:
a0:29:ca:6a:56:64:c9:3b:8b:07:78:4e:bb:9f:f3:e7:ec:cc:
94:31:65:5c:5b:89:19:1c:8e:16:ad:62:67:82:6b:77:f6:e6:
6c:0a:4e:6c:00:70:3e:fd:5e:e8:b3:a8:a3:1b:8e:d0:38:3a:
da:78:85:a1:df:b0:5c:19:c6:4b:19:d5:89:6f:16:de:18:7c:
f5:5a:0b:ad:2a:01:bf:55:c7:5c:92:8a:d4:63:0a:40:07:b9:
ca:3b:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:33 2024 by rpki-client on console-ams.rpki-client.org