Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/rq07SVOPes0boRW2B8koGkPGuDA.roa
File: rq07SVOPes0boRW2B8koGkPGuDA.roa (raw, json)
Hash identifier: pGQRzScS5Op0ReHMWvcS4YPYu2HfHtJFobATZcvKi5U=
Subject key identifier: AE:AD:3B:49:53:8F:7A:CD:1B:A1:15:B6:07:C9:28:1A:43:C6:B8:30
Certificate issuer: /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial: 0FC30300
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/rq07SVOPes0boRW2B8koGkPGuDA.roa
Signing time: Sat 01 Jan 2022 15:57:17 +0000
ROA not before: Sat 01 Jan 2022 15:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205889
IP address blocks: 185.185.172.0/24 maxlen: 24
185.185.174.0/24 maxlen: 24
185.185.175.0/24 maxlen: 24
185.185.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264438528 (0xfc30300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Validity
Not Before: Jan 1 15:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aead3b49538f7acd1ba115b607c9281a43c6b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:53:ae:08:6d:76:78:47:1c:23:c9:c4:86:
55:f7:74:a6:21:41:6b:6d:aa:86:2c:ab:f7:4c:d5:
ad:2c:c8:76:ce:39:4e:58:ed:51:8f:af:5d:93:ea:
51:ae:30:7c:6e:95:95:11:b0:98:40:f3:65:3a:cf:
71:4d:0a:14:a6:d7:cc:25:a2:e2:7d:98:dc:1c:57:
62:14:f3:9b:89:8d:7c:22:a6:44:18:18:28:f9:e9:
74:29:6e:bb:18:62:d0:72:9a:cd:07:3a:8c:e3:9d:
78:87:07:e3:7b:06:e8:b7:df:4f:71:0a:6b:77:7e:
55:bf:d3:eb:41:6a:56:72:d2:aa:33:5b:15:25:78:
7a:81:8b:7e:2c:5c:2c:e1:78:ab:18:27:61:3e:61:
fa:96:64:10:de:e3:62:c3:a0:f2:de:ff:49:4c:e7:
1f:ea:67:91:d6:81:c7:73:61:c0:64:1b:d0:76:e9:
9b:40:ab:92:6c:ad:88:6e:52:99:60:ac:56:8c:8b:
27:ad:50:b2:7a:2a:d2:0c:a7:0b:53:99:0c:f6:e9:
49:26:89:bb:56:11:8c:0e:33:84:59:da:1d:4f:a8:
e3:bf:4d:06:38:63:eb:e3:a4:77:98:f3:f4:85:84:
d0:de:21:68:dd:b3:65:24:e5:e6:43:55:59:85:bb:
5c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:3B:49:53:8F:7A:CD:1B:A1:15:B6:07:C9:28:1A:43:C6:B8:30
X509v3 Authority Key Identifier:
keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/rq07SVOPes0boRW2B8koGkPGuDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
17:40:0a:42:c9:1a:d4:6c:f2:d1:68:ff:c3:6c:18:3d:d5:55:
e3:f5:03:fd:b7:9a:40:e8:f5:64:b0:a4:f4:f3:74:79:dc:fb:
e7:d5:a7:71:a4:ac:1d:ef:0a:4b:fd:33:bf:82:80:ca:d4:89:
b3:68:94:7a:0c:89:69:2a:d5:c5:66:f2:b5:b3:5e:da:3b:16:
54:44:8d:0c:72:18:36:ae:42:7c:48:f3:ca:95:4b:a0:63:36:
cc:c7:0b:47:43:f3:a4:17:38:1b:fd:87:2d:1a:80:c8:44:63:
49:04:af:08:99:13:59:16:0d:1c:be:87:d3:50:be:53:03:7c:
3c:4e:da:71:08:f5:ae:53:3f:5b:07:37:1e:e7:fa:ed:f8:78:
23:0b:e7:d3:28:68:28:9c:4c:3b:0d:c8:a2:98:1e:87:63:80:
3f:11:78:8b:c1:db:49:5e:b8:49:30:a6:e6:6c:e1:6c:ac:b3:
5c:2b:2b:cf:62:ef:76:1e:6e:3e:86:64:56:68:cf:78:e5:10:
85:aa:5a:2d:be:08:6d:8d:41:5b:fb:e5:93:15:d7:ea:20:9a:
39:71:c2:5b:00:71:71:b1:77:9f:d5:c8:32:c1:07:69:fe:99:
28:2b:62:34:f4:45:37:84:a8:79:1c:ba:6a:72:1b:c3:35:2c:
c7:c9:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org