Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6l0KXi0mMFgXMGplhG-QGOnrmXI.roa
File: 6l0KXi0mMFgXMGplhG-QGOnrmXI.roa (raw, json)
Hash identifier: ZaW0qlfjnfLwEdYmZI8Av/vxOURV1iuO60FfZUHcAyU=
Subject key identifier: EA:5D:0A:5E:2D:26:30:58:17:30:6A:65:84:6F:90:18:E9:EB:99:72
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018A706D
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6l0KXi0mMFgXMGplhG-QGOnrmXI.roa
Signing time: Sat 01 Jan 2022 12:03:42 +0000
ROA not before: Sat 01 Jan 2022 12:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.138.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25849965 (0x18a706d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 1 12:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea5d0a5e2d26305817306a65846f9018e9eb9972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:14:7f:ce:a6:8b:8f:f2:3f:3a:e2:ef:22:
41:3f:d8:c5:fd:e7:a9:35:33:87:55:b9:90:e1:ac:
9d:7d:9b:fb:53:f4:2a:f0:b8:73:7d:bc:01:5a:d4:
52:f0:83:79:98:60:f6:34:8d:f4:b3:dd:db:46:6c:
94:a0:b5:39:ad:78:ab:71:c5:96:40:27:56:b3:74:
d8:78:14:f3:57:53:4e:2e:ae:08:89:bd:62:05:26:
de:fe:4b:5f:c2:2e:85:80:3d:5a:79:1f:47:4f:dd:
c6:09:af:b8:b3:71:0c:04:7a:05:cc:7d:a5:22:a5:
08:6f:22:0e:3b:02:46:2d:0e:ea:7d:a9:83:86:09:
f3:8e:05:5a:90:88:5c:36:80:06:ca:fe:e1:66:ab:
74:e6:51:1f:0c:dd:c4:3e:00:06:3e:ca:9b:2c:4d:
0c:cb:bc:18:11:89:a1:30:aa:08:e5:9c:53:b4:b0:
a0:0f:8d:32:39:6d:ba:a3:d6:ea:43:c1:9d:be:85:
2d:2f:0e:80:72:04:f4:57:91:8c:1f:a5:8c:35:06:
84:cc:55:74:79:71:84:81:61:f7:4f:54:cb:50:f8:
f3:59:17:92:d3:10:67:76:4a:c5:97:b3:af:5a:90:
3e:3a:8b:76:9b:e7:d1:d3:7b:2d:64:ac:22:10:3d:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:0A:5E:2D:26:30:58:17:30:6A:65:84:6F:90:18:E9:EB:99:72
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/6l0KXi0mMFgXMGplhG-QGOnrmXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.122.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:29:87:f5:73:c6:0e:ea:25:8c:ed:df:58:5c:cb:76:c4:cd:
70:2f:0f:6a:9f:85:15:62:29:91:b8:78:9e:5e:78:0c:e8:e2:
67:02:a3:26:03:76:dd:91:21:be:24:99:f8:9b:63:1c:8e:c4:
dc:0a:12:8d:97:50:97:41:25:15:cb:6e:36:8f:7f:ed:5e:74:
2c:a2:06:d9:ef:03:82:ed:3c:9d:c1:2c:a7:0a:f5:34:82:19:
3f:0a:ac:cf:fa:ca:3d:4c:40:5e:5b:17:5a:f6:23:56:4b:3e:
fb:ea:31:3c:70:30:4c:c0:67:9f:7d:2c:1d:d0:47:d3:35:41:
00:56:e4:ba:0d:22:5f:b3:01:4e:7f:f5:49:40:8f:0c:c1:58:
41:16:cb:8e:e8:89:1a:b3:d6:c8:19:6f:d7:42:5f:fc:9d:85:
a4:0e:3d:65:5a:77:d9:58:28:b8:f9:bc:dd:ab:b8:0b:02:30:
b2:4a:8e:85:d0:e5:08:71:20:e7:df:29:1b:10:4b:0a:2b:74:
b6:bb:ed:2c:1c:34:05:4e:a2:69:82:33:44:73:0f:e1:a0:e1:
e6:21:de:0d:d9:f0:7e:48:1d:6b:86:77:06:e6:93:b6:7f:c5:
bd:c6:f8:b7:1f:63:35:8c:58:82:b5:29:a8:96:2e:c5:69:99:
b2:bc:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:10 2023 by rpki-client on console-ams.rpki-client.org