Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/3RitVX73Wq3j81tGzPjecXSl6jQ.roa
File: 3RitVX73Wq3j81tGzPjecXSl6jQ.roa (raw, json)
Hash identifier: gB60lUt3SuDh9Dj6pHBZRCwAxjpLMVqnxXJnyFwDayI=
Subject key identifier: DD:18:AD:55:7E:F7:5A:AD:E3:F3:5B:46:CC:F8:DE:71:74:A5:EA:34
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0857482A
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/3RitVX73Wq3j81tGzPjecXSl6jQ.roa
Signing time: Sat 01 Jan 2022 09:00:31 +0000
ROA not before: Sat 01 Jan 2022 09:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.97.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139937834 (0x857482a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 1 09:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd18ad557ef75aade3f35b46ccf8de7174a5ea34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:3a:32:ae:a5:14:ff:ea:39:fe:ac:bc:a4:
fd:bb:48:f8:c0:b4:e0:34:88:5d:e3:87:99:c0:1a:
b4:e0:56:69:67:35:03:a5:0d:cb:4f:be:b6:a9:47:
e1:1d:06:c0:a9:95:b9:f9:2d:5e:15:ee:04:4f:89:
7f:07:84:5a:6b:6f:fd:30:a5:f3:49:43:51:7f:81:
0b:0f:c7:46:a0:31:38:50:5d:fa:1e:e5:58:ce:73:
06:ef:23:35:34:d0:e2:8c:ee:80:d4:30:dc:8a:d4:
ce:94:2a:fe:89:67:5a:ce:96:ef:b1:7d:d9:2d:16:
aa:00:e5:47:ff:5a:ce:21:db:38:53:c4:ea:59:1c:
95:6c:a1:6d:e8:3f:e6:39:b5:b4:2e:3e:53:1c:a0:
b3:52:99:48:92:22:0e:0e:46:33:42:d8:59:b6:b4:
fb:f0:60:92:3e:b2:04:3f:16:73:f3:ce:e2:f2:f4:
2f:0f:05:49:7f:ab:39:bb:78:22:ae:92:fb:78:6f:
34:22:30:63:07:df:82:74:b1:66:1c:73:67:54:e0:
23:08:fe:e5:97:db:e3:56:2a:fa:ae:4e:8c:31:01:
d3:b4:60:a8:5e:ff:84:63:f7:cd:0c:d2:41:04:9e:
a9:c7:0b:7f:53:53:33:8d:5b:4d:81:79:13:9a:64:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:AD:55:7E:F7:5A:AD:E3:F3:5B:46:CC:F8:DE:71:74:A5:EA:34
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/3RitVX73Wq3j81tGzPjecXSl6jQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:82:96:ba:37:51:ca:98:5f:cf:fe:9e:b6:b0:e7:d6:85:81:
c5:04:09:14:a8:f2:48:d8:d2:79:7e:42:4b:44:35:c3:b2:9e:
17:d8:0d:cf:95:d9:5c:48:7c:b2:6b:18:33:6e:35:d2:20:b6:
5a:b6:d1:d3:48:65:8f:80:47:3c:f9:f8:dd:11:11:a7:64:59:
ad:28:b5:1b:6d:b9:97:2c:42:22:b6:a3:60:34:89:2d:33:d7:
8e:bb:5b:c6:c5:d6:1e:4f:b5:cb:80:ca:17:65:55:8a:2f:31:
a0:70:98:8f:a8:d4:4e:36:f3:ea:a0:7a:2d:63:cf:69:34:b3:
de:c4:57:52:0c:c3:11:53:8d:b9:25:51:3d:5a:32:6f:96:c1:
4b:bc:70:82:da:45:c2:ce:e5:c8:5a:dc:e9:c4:3c:88:60:02:
4c:88:91:fc:19:7a:e0:6d:17:18:7b:77:f4:45:51:32:63:f4:
40:49:fc:60:77:c5:f1:f9:ff:57:96:85:7c:0b:ad:f2:7e:34:
9d:69:83:43:31:6b:b5:12:00:7c:2c:fc:20:bb:cb:31:29:56:
27:70:d9:aa:26:ad:f4:6c:45:a3:4c:4d:56:20:87:f8:93:11:
e9:e4:71:2e:df:74:bb:f6:84:dd:a6:da:de:2c:10:50:1e:3d:
d5:58:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org