Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/79KwPd-OwH11SvE54ToNOqrJhr4.roa
File: 79KwPd-OwH11SvE54ToNOqrJhr4.roa (raw, json)
Hash identifier: nAKTYflrpo8h9kTVWVlqGTtyG+uC290YAQ6v/CNVHzI=
Subject key identifier: EF:D2:B0:3D:DF:8E:C0:7D:75:4A:F1:39:E1:3A:0D:3A:AA:C9:86:BE
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0F7902D8
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/79KwPd-OwH11SvE54ToNOqrJhr4.roa
Signing time: Sat 01 Jan 2022 05:00:16 +0000
ROA not before: Sat 01 Jan 2022 05:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39378
IP address blocks: 185.197.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259588824 (0xf7902d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Jan 1 05:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd2b03ddf8ec07d754af139e13a0d3aaac986be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:57:9d:95:9a:cb:8f:68:40:77:10:94:2b:
62:36:2b:a3:56:af:20:03:57:22:1c:10:a3:47:d7:
24:1c:fc:fc:2e:85:97:0a:1a:1a:59:cc:ce:0b:c2:
7c:48:f6:e1:e1:35:36:aa:39:33:87:76:ea:cf:7a:
cc:aa:7c:b6:0f:ec:aa:0e:51:e5:c1:63:0e:bd:24:
fc:20:96:59:fc:34:aa:c6:c1:26:d9:62:12:76:e4:
dd:ff:5e:9f:c5:a5:41:58:6a:6d:99:e3:e9:3c:fe:
6b:39:bb:63:5a:f9:4c:27:27:2e:ac:20:37:7e:f0:
5a:6e:26:73:b3:84:59:31:07:44:43:17:75:3e:c1:
24:ff:7a:af:fe:1d:82:6c:f9:08:21:40:6a:ae:61:
f9:fb:b0:ff:51:23:31:e4:bd:72:2a:8b:f3:f7:54:
c3:85:1c:89:a7:c0:d4:60:14:0d:cd:27:3b:92:bb:
25:ef:f8:d0:94:48:c9:5b:68:de:02:85:71:2a:b8:
7f:a8:5a:6d:50:e3:b8:6b:d1:04:9a:23:9c:79:70:
61:16:7e:16:76:3e:a7:1e:61:90:56:13:90:8a:6b:
80:f8:03:e0:4a:01:bf:e8:2c:84:61:a8:47:db:59:
0f:64:f3:2a:5a:a8:bf:20:85:dd:a4:5f:7d:e0:d0:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D2:B0:3D:DF:8E:C0:7D:75:4A:F1:39:E1:3A:0D:3A:AA:C9:86:BE
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/79KwPd-OwH11SvE54ToNOqrJhr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.164.0/24
Signature Algorithm: sha256WithRSAEncryption
59:46:56:35:42:1b:1c:b0:05:61:f2:b4:77:73:b1:7d:15:da:
cf:3d:09:45:77:72:c9:2b:df:96:8c:85:8f:77:7c:0e:2c:97:
5c:35:6b:e4:2c:14:52:9f:d3:99:e2:04:96:d6:fc:11:95:91:
56:a9:25:00:82:63:fc:7d:2d:59:f4:d3:03:04:49:93:91:3b:
aa:34:c8:c0:35:e7:23:bf:63:6f:a4:73:3f:85:33:29:de:1a:
82:1d:66:ea:1c:04:e5:d4:b7:42:82:d7:f3:6a:70:6d:d4:69:
78:03:3c:74:0f:4b:7f:36:0b:91:87:a1:e3:c1:f6:89:cb:a6:
5e:d7:84:20:23:60:4a:c9:aa:21:e2:f2:4a:7b:79:66:4f:b8:
38:ee:49:6e:c3:8d:d0:10:c3:7e:e0:3d:89:9f:b8:46:ca:27:
47:7f:86:62:03:ac:7a:dd:91:2e:fd:7b:6c:fc:5f:7b:c0:df:
63:e4:e2:fa:c0:7b:03:a6:fa:64:61:04:d2:3a:d7:f7:ba:d7:
84:b3:be:9c:1f:d4:8c:6f:59:c3:19:a5:c2:8c:c9:01:4c:ab:
57:39:c7:60:3e:98:7f:5e:e1:5e:f7:b0:96:ce:f6:00:d1:ca:
05:4e:18:de:2a:12:18:59:83:9b:f9:c2:fa:eb:fe:4f:63:0d:
ef:b2:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org