Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/gl5OPqekMF_Q_st7rxKjXbjrv9Y.roa
File: gl5OPqekMF_Q_st7rxKjXbjrv9Y.roa (raw, json)
Hash identifier: BpJev4YG89mxHXjo/wZC0UDpE8xqVKrRc0AN+tvXxaM=
Subject key identifier: 82:5E:4E:3E:A7:A4:30:5F:D0:FE:CB:7B:AF:12:A3:5D:B8:EB:BF:D6
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 084635E5
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/gl5OPqekMF_Q_st7rxKjXbjrv9Y.roa
Signing time: Sat 01 Jan 2022 12:56:46 +0000
ROA not before: Sat 01 Jan 2022 12:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.229.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138819045 (0x84635e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 12:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825e4e3ea7a4305fd0fecb7baf12a35db8ebbfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:a3:fb:97:c0:23:16:06:22:62:96:fc:64:
6e:fa:62:ee:01:d9:db:f9:2a:c1:f6:26:cf:56:3f:
de:01:e2:06:e7:bf:aa:99:66:93:db:1e:c8:9a:6d:
e9:9d:f8:91:61:e3:45:99:cd:66:11:e3:c0:66:22:
8f:57:08:cc:da:15:53:71:a9:59:dc:24:d1:0a:0f:
16:08:35:5a:ec:2a:d3:00:d6:a9:b0:72:9a:8f:ae:
1d:33:ff:19:cd:29:6c:e8:5d:63:7c:81:12:c5:20:
ca:82:00:7a:29:21:8d:68:94:d8:54:61:20:6d:63:
13:ac:64:88:39:68:6a:eb:ce:41:0c:66:41:70:c3:
bf:de:4e:3c:19:7b:73:8d:f0:b2:ee:a7:75:90:18:
3f:40:66:b9:bf:4a:1c:3c:76:95:b9:ef:5d:9c:df:
05:76:1b:d2:67:38:94:b4:7c:98:33:05:7c:6e:41:
40:ca:28:ab:01:f3:51:fe:57:d0:84:c9:da:42:ba:
57:64:93:8c:82:fd:1b:43:3a:8c:68:95:f0:47:29:
e3:2a:09:39:49:2e:94:9e:b4:14:6a:70:b5:38:7e:
4c:97:83:0f:6a:0a:08:1b:8e:ab:81:20:61:74:c2:
5f:3e:af:5d:71:09:d1:30:62:f4:78:a9:1b:cf:34:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5E:4E:3E:A7:A4:30:5F:D0:FE:CB:7B:AF:12:A3:5D:B8:EB:BF:D6
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/gl5OPqekMF_Q_st7rxKjXbjrv9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8c:10:65:eb:95:49:56:cf:e9:95:31:03:a0:c3:fc:45:f0:
40:e8:44:55:5f:43:b5:60:00:e0:69:ab:20:35:22:57:56:e5:
a0:90:5c:99:f3:c1:a4:fb:ac:b2:c6:55:91:e8:69:a2:d5:39:
d6:f9:69:8f:f0:f9:99:28:0d:77:e0:f5:69:2c:de:b2:9c:3f:
b4:02:08:58:56:c4:80:49:e1:c2:e7:d5:9f:83:e3:44:84:00:
c8:a0:ac:57:07:d9:8c:e1:6c:09:6e:3b:7a:c8:bc:37:f0:a8:
db:45:76:c8:6d:8a:bc:b8:55:0f:28:6d:3c:5c:aa:9e:f9:af:
75:89:53:f6:17:a3:30:49:94:be:7c:26:ce:02:f0:89:d2:c3:
48:84:14:74:85:6c:ca:11:8c:ee:11:06:81:14:3c:bb:ab:ca:
1c:00:fd:4b:f9:0d:a2:d1:db:64:e4:80:f8:1f:2e:d6:39:7e:
06:66:7d:22:df:29:3a:17:88:ff:6c:74:57:04:75:65:18:1d:
ee:36:a4:48:4c:32:4e:e5:c1:23:69:e8:53:59:c2:81:97:af:
81:b8:3e:7b:4e:61:b6:cc:e5:73:16:bb:26:59:37:2f:87:d5:
e5:97:37:c5:48:c7:24:7c:76:87:3f:82:bc:32:58:a0:e9:c4:
6b:f3:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org