Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/1-piM4-NJcF5WoQgRH1iRLC758lQ.roa
File: 1-piM4-NJcF5WoQgRH1iRLC758lQ.roa (raw, json)
Hash identifier: 3vax8sHicuc3fJzN6BiKsRhn8P1uh3cXehqCzp5mVCU=
Subject key identifier: FA:98:8C:E3:E3:49:70:5E:56:A1:08:11:1F:58:91:2C:2E:F9:F2:54
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 08CFECC8
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/1-piM4-NJcF5WoQgRH1iRLC758lQ.roa
Signing time: Sat 01 Jan 2022 14:57:15 +0000
ROA not before: Sat 01 Jan 2022 14:57:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.127.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147844296 (0x8cfecc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 1 14:57:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa988ce3e349705e56a108111f58912c2ef9f254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:cd:b9:80:d9:58:c4:58:97:af:a3:ca:4f:
0b:cd:00:a4:f0:21:50:f4:8c:e3:23:3c:dc:e4:ec:
10:7b:45:bf:a8:86:ed:e4:a9:90:6f:56:2c:86:13:
ec:72:ce:80:de:ef:e8:10:3c:54:b6:1e:86:e9:72:
c6:d0:94:7b:c8:d3:b4:1c:ce:8c:36:0e:d7:ff:dc:
db:e1:a3:f4:4b:e2:b6:31:e3:06:ac:18:a1:bf:39:
02:32:cc:d4:bc:2d:4a:05:ef:2c:e3:da:77:ce:ca:
92:28:11:65:a2:e0:1f:e7:9f:da:55:c6:e0:61:ba:
20:57:c5:c1:23:84:26:a5:0f:b3:cd:9e:4e:d4:c0:
9a:c4:3c:0a:f5:93:b6:f4:07:98:ea:25:09:d4:14:
1e:ed:33:8e:8d:57:38:62:2f:2a:62:21:2e:2f:54:
3e:f5:97:ec:3b:18:28:c9:30:2a:3c:03:6c:7e:46:
af:b5:92:ad:6e:9e:14:e1:81:17:f4:64:b5:35:7a:
cc:94:16:ea:ad:6f:78:96:5b:d6:ae:20:e2:a2:b7:
3b:77:4a:6b:db:27:46:fb:61:c8:42:19:2c:7d:f1:
5c:b3:2f:84:ff:fd:92:39:50:b3:ff:7f:b6:a3:31:
37:a3:af:8e:6a:6a:54:b8:1f:ef:09:1a:09:50:47:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:98:8C:E3:E3:49:70:5E:56:A1:08:11:1F:58:91:2C:2E:F9:F2:54
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/1-piM4-NJcF5WoQgRH1iRLC758lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.28.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ce:de:c6:13:19:23:c6:ac:25:1d:1d:3f:d3:fa:d5:38:d8:
10:0c:c1:de:66:f6:44:3d:e4:bb:51:02:78:6f:ca:ca:c8:89:
32:40:1f:5c:06:8d:88:13:ba:2f:e1:67:d3:22:dc:b4:3b:2b:
5a:70:a3:94:75:2a:62:5a:22:6c:51:09:b6:1f:82:07:be:0c:
4f:87:5e:05:d9:fc:b5:7c:9e:e9:4a:c5:e4:b0:f7:2d:c5:2c:
80:c6:c7:c5:13:9c:57:10:7b:a8:39:93:66:5a:b0:6d:92:b9:
c3:7d:ed:4b:f1:d7:23:f1:49:cd:63:11:80:0f:4e:63:a4:06:
7c:68:86:85:7a:7e:ff:7e:5b:94:12:e7:6b:bc:84:74:d5:e0:
2f:e9:41:62:0f:72:3f:5a:58:92:fe:bc:e6:93:3d:59:0a:c9:
21:db:56:b2:fc:8a:61:31:da:8d:55:a5:4f:97:1b:48:d2:8b:
d5:5f:ba:0a:ba:1d:dc:ad:43:2a:67:bf:d3:30:11:21:eb:75:
a0:50:fe:95:a5:35:45:2b:eb:c7:d2:a3:fb:fa:7f:d9:98:bf:
24:e7:db:d4:5f:ef:5c:a9:35:81:3c:38:56:74:a9:22:ac:7f:
a7:e3:0c:87:f3:62:4d:1b:96:77:c3:27:b1:8c:36:43:de:85:
b0:61:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org