Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/7xbnUQ2ieTx2tZNMgw3uPg4w5tc.roa
File: 7xbnUQ2ieTx2tZNMgw3uPg4w5tc.roa (raw, json)
Hash identifier: dLua8UQLa4sRkOG5IxgUpFMO+3Y3Zbss/9anVqNIqls=
Subject key identifier: EF:16:E7:51:0D:A2:79:3C:76:B5:93:4C:83:0D:EE:3E:0E:30:E6:D7
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 08D0B26B
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/7xbnUQ2ieTx2tZNMgw3uPg4w5tc.roa
Signing time: Sat 01 Jan 2022 14:57:16 +0000
ROA not before: Sat 01 Jan 2022 14:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25291
IP address blocks: 185.245.103.0/24 maxlen: 24
185.245.101.0/24 maxlen: 24
185.245.102.0/23 maxlen: 23
185.245.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147894891 (0x8d0b26b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Jan 1 14:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef16e7510da2793c76b5934c830dee3e0e30e6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:3b:73:07:19:af:ab:04:8b:34:40:de:42:
e2:75:88:3d:ab:e0:5e:8c:5e:57:22:f8:01:97:89:
6a:3c:b0:3a:9a:5c:41:0b:4b:b6:4f:18:83:3e:7a:
d5:b2:a7:88:96:aa:3e:dc:dc:29:bf:29:bc:11:8f:
57:2f:9f:3c:2a:4d:ca:10:86:f1:be:81:31:aa:d2:
19:45:5d:69:b4:a3:7f:30:ea:c3:01:ab:15:47:55:
fe:c3:4b:ce:8a:b1:7f:00:38:99:99:82:f1:01:03:
c9:c9:77:46:af:a6:1c:13:68:73:af:ee:69:85:2e:
63:a2:df:78:f1:24:62:32:49:d2:4d:ca:68:b4:ba:
ed:90:2d:56:53:66:62:df:46:67:18:1e:17:a0:4b:
d2:cf:97:53:e2:dd:0c:b6:b8:9b:92:55:f7:4a:5c:
0e:e1:66:0e:3e:17:5d:25:6f:d5:74:31:11:09:3c:
98:8b:04:f1:36:2d:a6:5e:55:54:93:01:4b:09:04:
fd:11:5e:bb:9a:c7:71:b4:39:40:4a:f3:46:d7:23:
17:20:c0:00:ea:9c:58:50:47:7d:c7:c9:ee:12:5a:
dd:76:01:08:6b:8a:c5:57:08:e4:1a:04:f6:0c:7c:
02:39:99:74:74:71:ac:14:b5:e2:2c:2a:1b:4b:4d:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:16:E7:51:0D:A2:79:3C:76:B5:93:4C:83:0D:EE:3E:0E:30:E6:D7
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/7xbnUQ2ieTx2tZNMgw3uPg4w5tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.101.0-185.245.103.255
Signature Algorithm: sha256WithRSAEncryption
a9:d1:74:8b:0d:b3:fc:c8:35:bb:7d:67:d7:85:f9:50:bc:10:
bd:86:a5:3b:c9:db:fc:2b:6b:27:4a:a8:e0:bc:7e:e8:4b:98:
35:1d:28:fd:7d:12:36:a3:84:73:01:1f:a8:eb:ce:a3:a5:88:
60:ef:fb:7a:5b:0c:0e:95:66:2a:75:6a:4a:2c:79:b5:6b:11:
e7:f3:43:97:45:5a:92:6d:be:98:ec:07:55:5c:b8:c3:e4:4a:
2c:6e:49:f2:f6:d2:08:77:ed:84:fe:76:49:5c:27:e5:5d:67:
7d:8a:99:92:ef:23:e4:87:21:fc:3f:1f:f0:6a:5d:73:5b:0e:
2a:30:26:bc:30:b8:d7:db:a3:51:0e:e6:54:81:d2:f8:7f:24:
1f:e2:03:a0:f2:96:6a:d4:4b:67:c7:b6:89:aa:3d:1d:36:62:
e1:32:9b:f1:c9:cf:06:9a:f6:e3:58:ce:d9:f8:31:4a:fa:0a:
46:c9:0e:be:2c:57:fc:2c:2b:eb:d8:0a:c0:6f:93:0d:6f:82:
0f:2b:5c:86:a5:83:bf:9a:8a:4f:b6:29:9b:1f:e8:11:71:34:
4d:86:54:51:af:ee:b6:3b:65:31:34:6f:45:bd:64:8d:9c:79:
1f:fd:95:8d:bb:db:b6:b9:a6:1c:01:7a:0f:30:5e:92:1e:20:
d6:35:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:40 2023 by rpki-client on console-fra.rpki-client.org