Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/hTamNUmHZuIoOwhdTwM6bNiFbKU.roa
File: hTamNUmHZuIoOwhdTwM6bNiFbKU.roa (raw, json)
Hash identifier: C9CF3fQaeY3n7vOWzTiKi5yMib4LuHbEkX2d5k35QTc=
Subject key identifier: 85:36:A6:35:49:87:66:E2:28:3B:08:5D:4F:03:3A:6C:D8:85:6C:A5
Certificate issuer: /CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Certificate serial: 072AE03A
Authority key identifier: 1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/hTamNUmHZuIoOwhdTwM6bNiFbKU.roa
Signing time: Sat 01 Jan 2022 05:01:43 +0000
ROA not before: Sat 01 Jan 2022 05:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212889
IP address blocks: 185.238.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120250426 (0x72ae03a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2646828a9ea7bf8d40b4f9f0ba44ccdcb2cedd
Validity
Not Before: Jan 1 05:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8536a635498766e2283b085d4f033a6cd8856ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:f4:89:fe:c7:71:d5:ec:14:1c:43:ac:ac:
9f:56:bb:9d:62:72:a9:a4:28:25:a3:e1:80:6e:1b:
3c:c3:9f:5a:51:bc:61:3d:59:78:59:00:3f:86:86:
27:06:7e:3d:86:66:af:c1:db:63:39:17:61:e0:de:
b8:69:26:89:21:f0:b6:5e:90:c0:1d:f1:d4:27:ea:
bf:fa:03:5e:d2:3a:95:91:e4:c3:ca:a5:d0:46:e6:
5b:b1:d0:54:d4:81:6c:e3:2c:e3:fe:f8:f1:89:10:
30:e8:68:57:4a:f9:84:f7:65:a4:82:0c:16:18:5f:
9f:96:1d:74:57:7d:07:ab:3f:c6:07:02:14:dd:4f:
31:90:38:a8:96:c9:e4:5c:ec:d1:27:2e:be:39:47:
1f:f8:49:ad:28:32:da:f5:6e:e0:69:7d:ee:bd:37:
2f:b1:82:71:b2:e0:e1:9d:a3:f4:33:d1:4a:71:a1:
62:81:dd:6a:a4:57:b2:b3:cc:0a:4c:3b:99:d3:01:
39:59:a1:7c:c6:7d:62:7b:da:e8:e5:bb:78:86:82:
4b:6f:f2:a2:fa:63:3c:ae:04:f3:3a:c0:f3:e4:b0:
fd:cf:d0:a8:3e:ee:0c:2e:f7:e0:4a:94:bc:86:90:
98:00:75:1b:8f:3c:fd:cd:af:0a:6d:29:81:01:e0:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:A6:35:49:87:66:E2:28:3B:08:5D:4F:03:3A:6C:D8:85:6C:A5
X509v3 Authority Key Identifier:
keyid:1B:26:46:82:8A:9E:A7:BF:8D:40:B4:F9:F0:BA:44:CC:DC:B2:CE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyZGgoqep7-NQLT58LpEzNyyzt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/hTamNUmHZuIoOwhdTwM6bNiFbKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c36836-a2c8-4771-a958-974fcfef263b/1/GyZGgoqep7-NQLT58LpEzNyyzt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.70.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bc:19:c4:e3:2e:80:26:20:e5:ca:c4:36:28:45:91:56:c7:
b2:f4:c4:00:93:77:0e:63:3c:6c:30:07:d9:69:be:0f:1a:bc:
a6:69:57:38:fb:fa:c0:20:27:3a:27:f6:3c:06:c0:1d:7d:40:
a9:01:4c:33:af:1a:88:e7:0e:76:c7:f2:54:be:98:44:d5:4c:
6c:92:7f:c4:37:e2:d5:fe:f8:b3:02:1b:30:96:da:cf:4c:cc:
aa:a9:0a:d0:53:a4:34:10:3b:5d:25:07:c7:26:cd:2d:79:ac:
11:14:1c:58:93:1f:ff:a1:3b:fe:44:7c:e0:64:89:88:97:a9:
0c:06:e6:4f:e5:bd:ee:2e:bc:4f:df:2f:03:62:3c:e1:00:87:
6c:c7:94:93:31:f3:6a:63:0d:ae:15:b9:0d:53:cb:7c:2a:16:
c9:ba:39:fe:a3:17:ec:06:bb:54:1a:cc:7b:84:16:89:e1:b5:
d9:8b:72:60:c8:7b:f9:be:d3:ca:c0:e8:9d:77:61:a1:91:c1:
db:fc:16:33:fb:04:35:3f:a6:db:1a:f7:10:a2:74:fd:4f:17:
13:ad:af:02:c3:ad:ff:13:ee:6b:da:09:4f:52:6c:27:68:7d:
e8:a9:a7:ce:49:33:a4:69:43:a7:69:9f:2d:c2:fa:5d:a0:26:
ce:4a:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:17 2023 by rpki-client on console-ams.rpki-client.org