Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xxTvtcGofDcoZ6MZQyfHztyLLKU.roa
File: xxTvtcGofDcoZ6MZQyfHztyLLKU.roa (raw, json)
Hash identifier: F6blyCx8h4V/IzVpS3T37vphw1TOMmv7RsSMl+Et28M=
Subject key identifier: C7:14:EF:B5:C1:A8:7C:37:28:67:A3:19:43:27:C7:CE:DC:8B:2C:A5
Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial: 11C3C468
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xxTvtcGofDcoZ6MZQyfHztyLLKU.roa
Signing time: Sat 01 Jan 2022 07:57:25 +0000
ROA not before: Sat 01 Jan 2022 07:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 185.110.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298042472 (0x11c3c468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Validity
Not Before: Jan 1 07:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c714efb5c1a87c372867a3194327c7cedc8b2ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:86:dc:73:71:05:c4:3c:1a:d3:fe:c2:89:
db:8c:e4:2d:65:42:26:e6:e7:58:13:34:ad:b7:00:
95:7f:b7:47:7b:1d:68:8d:5c:ef:fc:34:d9:e6:f5:
37:eb:35:fb:0b:39:6d:89:3e:71:19:0a:40:54:f7:
c2:dc:34:23:8a:ba:67:3b:1f:c9:30:97:59:2f:98:
18:b1:fd:03:ab:c8:46:92:49:51:d2:10:8a:6d:c3:
35:11:0a:de:bd:10:4a:66:57:8e:60:9e:0d:d3:31:
93:1e:62:0f:bf:14:e5:4a:fa:c6:74:5a:b1:d8:35:
be:4f:2b:d3:0e:43:a2:ab:21:ad:fe:88:92:4c:7d:
98:73:a0:39:eb:52:10:1c:e4:1c:88:6f:98:19:86:
61:ac:2f:20:6e:a2:33:ce:63:85:29:ae:59:8c:fb:
62:08:db:23:63:6e:fb:e2:2a:d5:26:e7:a9:d1:52:
3a:02:fa:f7:eb:fc:ae:d7:f8:5c:0e:13:ce:10:7f:
63:4a:9e:16:36:d9:8d:4f:23:84:66:96:a6:6e:82:
58:68:7d:61:ee:70:4a:c1:dd:57:70:07:bf:1c:78:
53:22:24:3b:1d:f7:f6:d5:33:ed:92:3f:79:dd:4a:
10:9d:43:6c:ae:25:77:82:2d:43:9a:9f:e5:54:42:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:EF:B5:C1:A8:7C:37:28:67:A3:19:43:27:C7:CE:DC:8B:2C:A5
X509v3 Authority Key Identifier:
keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/xxTvtcGofDcoZ6MZQyfHztyLLKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.98.0/24
Signature Algorithm: sha256WithRSAEncryption
04:01:c7:56:0e:78:8f:71:75:3d:9a:6c:3e:3a:ab:72:f4:46:
48:dd:d0:b0:e5:29:82:44:06:27:d8:d4:51:e6:26:9c:67:c7:
b3:8c:4d:27:9e:83:ec:23:0c:90:44:49:2f:f6:27:62:7b:25:
13:da:c8:6f:7c:cb:e8:e5:aa:79:2f:1e:3a:a6:b8:93:7e:2d:
54:80:d3:d8:d4:17:9d:a9:1a:a1:ff:a1:d5:56:8e:56:9f:b1:
6b:43:e7:17:4b:28:0f:19:f3:3e:b1:8c:07:dd:8d:57:2d:65:
73:a0:7e:5d:07:90:cd:7d:9a:03:15:0a:7e:01:3b:30:43:a6:
02:2f:f4:22:e5:94:bb:4c:b2:21:1f:90:36:59:9d:45:fa:12:
5b:c7:c6:e9:e6:c3:8a:c5:9b:c1:05:52:61:14:62:d1:01:66:
41:e9:de:96:a7:09:2d:37:f5:cd:73:92:e4:ca:da:85:51:5a:
76:d6:3d:7c:74:a1:f9:66:98:a8:76:cf:1d:48:e3:17:96:5b:
20:25:7b:96:10:f3:c8:69:dc:a8:7b:28:7e:ea:97:28:7c:40:
f8:3b:1b:30:8a:fd:68:80:e4:d0:09:5b:bb:3b:d5:3f:32:43:
c9:0f:59:ea:1a:e1:18:2f:9d:36:7f:37:9e:82:c4:ff:e9:1c:
50:ac:07:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:42 2023 by rpki-client on console-ams.rpki-client.org