Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/tGaF2eEF1m2FPG5LFkat2JA241s.roa
File: tGaF2eEF1m2FPG5LFkat2JA241s.roa (raw, json)
Hash identifier: ITsh/D47j1b58klaOpNCNI4oSc0LaGtUkL7saobvNMI=
Subject key identifier: B4:66:85:D9:E1:05:D6:6D:85:3C:6E:4B:16:46:AD:D8:90:36:E3:5B
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0184C520A0D0B991B2F3FA3D3B5C53070C62
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/tGaF2eEF1m2FPG5LFkat2JA241s.roa
Signing time: Tue 29 Nov 2022 20:42:40 +0000
ROA not before: Tue 29 Nov 2022 20:42:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41960
IP address blocks: 185.75.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c5:20:a0:d0:b9:91:b2:f3:fa:3d:3b:5c:53:07:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Nov 29 20:42:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b46685d9e105d66d853c6e4b1646add89036e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:64:79:62:2f:67:0c:49:8a:28:c5:58:08:
00:95:d0:5f:d2:ca:6a:d8:a0:7e:b6:b4:62:a0:6e:
bc:59:7d:91:c4:9c:2d:68:41:18:0d:73:c9:79:12:
75:dc:65:fa:aa:14:27:5d:bb:a1:7b:43:54:f5:d1:
29:a9:c2:74:f7:d3:e9:84:d8:5e:cf:ac:03:34:f4:
00:b0:ed:5b:00:7d:96:19:22:7c:83:2c:55:7b:13:
c5:8f:45:8f:0d:f6:a0:03:61:ea:45:0d:70:96:bf:
ac:a0:e4:2d:d1:83:4a:b6:3f:c0:81:0f:d8:ac:26:
1c:19:1b:36:3d:85:4f:9d:88:2e:3e:07:77:a0:21:
8f:35:3a:16:17:c9:94:a2:cf:f9:c6:07:60:82:20:
6a:f8:d5:93:0c:cc:a7:9c:ba:b6:a5:85:4c:ac:d4:
39:3b:71:23:81:74:2c:2e:28:fc:1f:86:cc:e2:5e:
e1:f0:42:5c:4e:1d:ab:3b:01:52:e4:b1:56:6e:74:
3f:87:f7:52:2e:f0:55:0c:1f:70:47:e5:9d:59:b8:
37:fc:73:9c:7c:34:4f:e3:37:b2:eb:b8:59:ce:12:
f8:e6:7f:7b:75:9e:76:d6:d5:b6:4a:69:cb:88:55:
b5:0c:49:72:c4:eb:6d:b1:54:31:48:8a:15:95:86:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:85:D9:E1:05:D6:6D:85:3C:6E:4B:16:46:AD:D8:90:36:E3:5B
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/tGaF2eEF1m2FPG5LFkat2JA241s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.246.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d3:6f:25:dc:1b:a5:b1:ac:90:80:89:f6:50:77:22:90:f7:
99:57:8a:30:17:7a:09:f2:8b:29:b1:78:a2:0c:28:05:6f:55:
5a:b8:e1:9e:ec:18:18:9c:4c:97:cb:38:62:05:34:23:37:27:
c8:9d:30:3a:fe:95:38:1d:08:c0:01:f8:81:63:54:93:1b:59:
f1:e9:9d:34:f3:bc:88:bd:72:13:2a:c9:3b:03:91:38:f2:d5:
c3:b3:c6:28:1f:fe:c8:76:d2:b8:72:3e:9d:85:fc:d9:9b:a3:
74:f8:5e:c7:8a:b0:0c:e6:b0:9d:a7:0d:53:1b:10:f9:93:a7:
f7:e0:b5:dc:61:bc:9a:a6:90:68:91:fd:99:7b:26:a8:56:9b:
70:4f:73:5d:d1:f4:cf:e6:b3:18:d2:d3:0d:80:a6:34:00:5a:
6b:bf:17:20:0b:4f:4c:3b:2d:b3:c2:48:70:ab:36:02:8f:73:
d2:7c:69:70:77:17:47:32:5b:3b:90:f9:60:6e:97:bf:11:95:
3b:8d:8b:5b:9c:4b:37:50:c8:ff:54:c2:23:d1:4f:a1:e8:ba:
8b:18:c0:82:1e:1e:a9:40:51:20:5e:20:42:25:b0:3f:21:3a:
88:18:6d:47:36:09:f5:e3:93:1e:12:07:9c:bb:82:45:4b:0b:
64:84:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:37 2023 by rpki-client on console-ams.rpki-client.org