Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/E7VCwWJh9u1SXvxb5BMcTG0Wa90.roa
File: E7VCwWJh9u1SXvxb5BMcTG0Wa90.roa (raw, json)
Hash identifier: W29BIM3mPH/mK8nWK4fA2AXSibK3Z4MPeVxStMChH0A=
Subject key identifier: 13:B5:42:C1:62:61:F6:ED:52:5E:FC:5B:E4:13:1C:4C:6D:16:6B:DD
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01851F3A58C78E84DB0C6F7379970A8F41D4
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/E7VCwWJh9u1SXvxb5BMcTG0Wa90.roa
Signing time: Sat 17 Dec 2022 08:36:35 +0000
ROA not before: Sat 17 Dec 2022 08:36:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39364
IP address blocks: 185.225.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:3a:58:c7:8e:84:db:0c:6f:73:79:97:0a:8f:41:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Dec 17 08:36:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13b542c16261f6ed525efc5be4131c4c6d166bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:3b:e2:43:25:90:79:38:1f:7c:49:38:79:
21:ab:85:50:39:df:67:75:e8:fe:3b:09:ad:e2:d9:
18:b1:e9:7e:e7:74:f9:2f:8f:22:96:da:39:01:c5:
b3:81:bc:25:0f:2d:1e:ed:32:c6:0f:03:33:f9:22:
b5:14:5b:a2:b6:cd:7e:af:23:15:b9:49:12:ac:8a:
c7:44:9a:f2:6d:b1:e9:01:70:d8:b2:c2:a7:ca:6d:
c2:7c:e5:e3:9b:90:b8:94:7a:e4:46:13:e3:2e:79:
e0:86:97:4d:81:f2:77:1f:70:0c:d8:66:83:19:7c:
b3:e9:03:ce:50:c4:43:58:2c:80:81:8d:fa:3f:fa:
ad:0d:06:b5:20:65:2c:fe:27:ff:9f:4d:60:7d:23:
fe:e5:9d:44:6f:b1:19:18:ab:ab:c6:35:09:92:57:
fc:2e:49:d3:e3:a2:23:66:80:a3:26:34:23:5b:f1:
c4:40:f0:af:94:90:89:8a:8e:2a:20:1a:57:40:cc:
3d:ea:12:34:ae:9e:86:cf:4d:64:ef:68:e6:72:52:
f2:b1:49:88:da:2c:f9:ff:1f:f3:f6:36:59:ee:f8:
47:e5:d1:1b:c9:fd:09:52:83:64:45:d4:29:cc:d5:
36:f0:c2:01:f8:a8:32:a2:f9:55:e5:9d:87:e0:5e:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:42:C1:62:61:F6:ED:52:5E:FC:5B:E4:13:1C:4C:6D:16:6B:DD
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/E7VCwWJh9u1SXvxb5BMcTG0Wa90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:86:9f:75:d1:31:0e:d3:11:61:58:a1:a4:6a:17:d8:a7:2e:
75:f5:8a:fc:66:63:e3:0e:9c:40:b1:1b:ba:d7:45:07:42:85:
97:39:45:0e:36:39:00:6c:d7:3c:de:84:16:71:a0:37:0b:fd:
8c:f1:3f:0c:7b:3f:08:99:6a:42:11:b4:6c:a5:f4:9e:85:c4:
fe:bf:82:67:fd:42:61:67:a1:6d:73:27:28:b8:58:ac:5b:43:
66:47:48:8b:be:0e:c7:77:79:45:31:4b:29:f9:cd:19:27:72:
aa:83:b9:77:d5:25:bf:c9:1c:f2:c1:b6:3c:9e:8d:b1:ff:e4:
3d:7f:8c:f3:48:b3:83:f4:40:9c:9b:ce:ab:3b:f9:87:6a:85:
4e:07:07:03:76:d3:e2:3b:37:93:ae:04:7b:db:c7:be:16:5f:
af:98:46:fe:d3:07:d3:fc:e0:a8:38:63:c7:83:c0:f1:17:6a:
6b:f0:9f:5a:f1:7f:94:3f:e1:47:ba:7b:c5:1a:cb:1e:8d:c2:
77:ed:f5:a1:75:44:39:4b:e7:32:46:be:29:2b:c4:2a:54:06:
ab:93:21:33:d5:3a:23:60:80:af:9b:90:c8:86:75:9b:d5:66:
d0:d1:98:ea:27:3d:94:c2:10:03:3a:3a:ca:46:10:eb:8d:04:
fb:33:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org