Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dcNK6Wt2MZTZShCDWYN8icUzvgs.roa
File: dcNK6Wt2MZTZShCDWYN8icUzvgs.roa (raw, json)
Hash identifier: jFfxfTwWlLd5rSHj9mQsnunwgSOuO0MHRZItuWjjpUE=
Subject key identifier: 75:C3:4A:E9:6B:76:31:94:D9:4A:10:83:59:83:7C:89:C5:33:BE:0B
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: DBAD01
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dcNK6Wt2MZTZShCDWYN8icUzvgs.roa
Signing time: Fri 01 Jul 2022 08:59:25 +0000
ROA not before: Fri 01 Jul 2022 08:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 185.173.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14396673 (0xdbad01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jul 1 08:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75c34ae96b763194d94a108359837c89c533be0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:f9:4a:5a:bf:ae:ba:7e:f2:8a:95:21:a2:
18:9a:6e:f6:30:b7:70:5e:26:33:51:48:ad:b8:53:
34:2e:91:89:4c:76:ad:6f:47:ec:21:3b:1e:3f:32:
f4:d7:5d:e8:85:78:ee:e8:03:7d:f7:d6:3d:fb:ac:
bb:34:ff:5f:e8:e2:85:8e:65:95:9a:df:0b:85:ca:
3f:6d:c2:65:4d:95:81:06:fb:5a:1a:45:18:43:3e:
cf:04:03:a7:df:aa:51:79:c8:ae:6a:5a:34:79:75:
ee:68:99:91:3f:24:58:fe:15:c8:91:ad:5e:45:60:
31:09:8b:40:b1:ba:50:3e:5b:f7:90:40:70:b4:d0:
1c:aa:27:7e:70:c4:65:c4:20:ce:45:69:4e:8e:ff:
70:c0:e9:57:86:76:99:52:26:fa:7e:92:2a:2f:7c:
ab:37:a9:b7:a0:73:7a:58:de:27:cb:0d:a1:26:be:
85:05:62:64:b8:01:1e:bc:1b:2e:18:1f:23:3f:fa:
65:2f:4b:a1:a9:29:76:b7:1b:49:37:bd:e2:f0:fa:
4e:57:1b:65:ec:3e:5b:57:73:ea:d4:87:8b:48:79:
16:a1:b4:51:50:9c:a8:1d:bc:02:9f:f3:62:59:68:
77:b5:5a:85:cd:75:96:bf:27:79:b4:e0:8f:c7:b6:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:4A:E9:6B:76:31:94:D9:4A:10:83:59:83:7C:89:C5:33:BE:0B
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dcNK6Wt2MZTZShCDWYN8icUzvgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c1:43:c1:30:3a:d0:91:95:49:bf:52:1b:6d:9e:65:8f:b1:
47:58:b8:63:60:c9:22:8f:de:de:8a:ac:cc:89:38:68:3a:c6:
80:4c:7c:2f:52:e6:53:96:49:09:b2:d1:d2:54:99:b2:e5:c6:
63:4b:78:0b:fd:38:1e:ae:55:ca:79:14:55:ad:73:06:99:3c:
cf:03:9a:9d:ea:dc:bc:26:b2:e9:ac:49:04:76:1a:2f:4e:5f:
25:22:31:f9:85:84:4b:e7:25:f7:6c:12:f1:44:fd:ca:69:12:
48:15:bf:82:59:53:c3:5a:0d:a7:4a:f6:6e:ab:fb:a2:84:bb:
a2:9a:d7:cb:c0:ec:04:bb:9e:49:21:db:cc:b1:4f:41:7f:93:
76:33:4a:de:46:a7:f3:dd:53:42:5f:af:85:8f:98:9b:f4:92:
af:d0:56:33:19:72:8b:31:48:96:e2:83:15:82:22:45:fb:13:
78:d8:78:6a:bf:ff:3d:b0:cc:ac:00:71:e9:94:2d:91:e8:a7:
9f:c0:2b:66:ea:3c:be:1d:6d:ae:04:de:f9:d1:cb:7e:2a:11:
4b:37:ab:6a:d8:54:9b:57:1f:e1:e7:8d:3f:68:12:2a:6e:2e:
5f:20:05:73:7c:aa:91:40:f9:9a:05:28:36:3e:1d:5c:6c:d1:
a7:ab:41:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org