Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xsn0cIIvWMo1QwVOEYOeKvzGB0I.roa
File: xsn0cIIvWMo1QwVOEYOeKvzGB0I.roa (raw, json)
Hash identifier: omElyjQPjKZAY7y8vJuO/RQnx+YTWDw4epx1FOwVIdc=
Subject key identifier: C6:C9:F4:70:82:2F:58:CA:35:43:05:4E:11:83:9E:2A:FC:C6:07:42
Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial: 11C2CD25
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xsn0cIIvWMo1QwVOEYOeKvzGB0I.roa
Signing time: Sat 01 Jan 2022 07:57:24 +0000
ROA not before: Sat 01 Jan 2022 07:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21212
IP address blocks: 185.110.96.0/24 maxlen: 24
185.110.97.0/24 maxlen: 24
185.110.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297979173 (0x11c2cd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Validity
Not Before: Jan 1 07:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6c9f470822f58ca3543054e11839e2afcc60742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:3f:53:29:62:fe:b1:12:33:7c:a2:c5:51:
49:c2:7b:2d:2e:ef:c5:47:62:f5:ee:c7:d8:be:61:
25:f9:f1:c3:90:9d:93:dd:1b:6b:0a:7d:07:e2:6e:
b8:ef:b0:c6:36:79:81:29:4e:71:5c:f5:3a:76:31:
73:34:ff:04:c2:f6:27:62:28:2d:c8:db:97:f3:b0:
4d:e0:2c:65:2a:06:76:cf:46:1b:a9:31:91:b2:77:
6d:86:20:cd:f3:fd:c3:a9:a2:b1:74:aa:20:af:7e:
d8:ff:5f:0b:53:58:1a:85:d3:61:81:3b:4b:f1:8e:
0a:a5:dc:73:83:77:38:30:da:cf:bc:7c:c1:b1:0a:
bf:61:76:3a:5d:45:40:34:ae:f9:92:6a:c2:a2:79:
ca:ae:d0:a8:2f:03:b5:b6:90:ed:90:b1:d0:fa:e5:
4e:03:cc:6b:92:c4:50:c0:51:c7:f1:24:d4:67:ae:
b0:05:40:97:69:9d:28:65:c4:b7:76:9d:cb:e6:58:
02:a4:b2:77:a6:96:99:93:81:6c:87:5f:66:db:9c:
36:0b:75:31:c9:3a:3f:36:f5:a4:32:40:ac:a2:16:
bb:68:16:04:fd:14:03:d1:3f:3b:1f:06:03:05:56:
fa:aa:c8:f2:1c:27:29:75:4d:b6:ec:cc:c2:c8:69:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:F4:70:82:2F:58:CA:35:43:05:4E:11:83:9E:2A:FC:C6:07:42
X509v3 Authority Key Identifier:
keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xsn0cIIvWMo1QwVOEYOeKvzGB0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.96.0-185.110.98.255
Signature Algorithm: sha256WithRSAEncryption
57:79:d5:26:3d:7b:be:10:e6:f4:b9:6d:aa:c6:53:74:4b:57:
fc:bf:12:bc:de:61:12:0e:4b:a7:20:eb:b5:d7:79:ca:da:44:
13:0e:0d:55:9e:ad:74:03:8c:89:7e:16:c0:31:eb:44:ec:8d:
e3:ad:50:c0:27:46:3e:59:6d:4e:e4:04:37:d1:3b:7e:e5:38:
eb:6a:99:9a:f4:48:02:98:7f:a9:4f:c7:f9:bd:12:42:a2:5e:
34:4e:1a:9c:0b:b2:18:70:9f:e4:ff:34:0b:38:3d:1e:08:29:
b3:b8:db:fa:7c:c3:fa:8a:0b:b6:28:45:23:99:42:d1:7e:b9:
a0:fe:8b:ed:f0:fb:14:83:10:fb:e4:33:5c:7a:e1:c3:f3:d1:
c9:31:da:5f:ee:50:08:00:88:f8:24:aa:4c:02:6c:df:0c:57:
1d:ab:e4:cf:78:53:7d:4b:7c:3c:52:7a:0d:51:b9:cb:05:59:
ef:ae:3a:d9:96:fb:7e:9f:0b:b2:4c:d8:b0:c9:6d:aa:da:ad:
17:38:8a:68:17:2a:00:1c:14:b0:f7:3a:9f:f5:e6:9a:c4:ea:
26:14:11:04:2d:47:fb:7a:e8:c1:a3:d7:b0:77:f7:99:49:0d:
e4:b2:d6:a4:34:3c:6b:69:17:3d:2f:7a:73:f0:31:ae:c8:ce:
1e:b4:b7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:42 2023 by rpki-client on console-ams.rpki-client.org