Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/3Gg9VdyuPAdKFr4lj0bURBg-z6c.roa
File: 3Gg9VdyuPAdKFr4lj0bURBg-z6c.roa (raw, json)
Hash identifier: 6El7ZN3CCph2ttNd/a+D83kasgFXxS24eoivFXDevW0=
Subject key identifier: DC:68:3D:55:DC:AE:3C:07:4A:16:BE:25:8F:46:D4:44:18:3E:CF:A7
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01FA427C
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/3Gg9VdyuPAdKFr4lj0bURBg-z6c.roa
Signing time: Sat 01 Jan 2022 13:04:39 +0000
ROA not before: Sat 01 Jan 2022 13:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.132.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33178236 (0x1fa427c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 13:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc683d55dcae3c074a16be258f46d444183ecfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:eb:d4:7f:13:f7:5f:83:4c:1b:43:69:56:
1d:f2:58:81:42:1a:f5:a2:d9:00:03:aa:f1:0f:c2:
ed:00:f9:7b:1b:eb:93:97:b0:2f:99:a1:22:15:fd:
f4:fc:45:02:2b:bd:1f:82:97:9a:7a:b5:01:6c:06:
44:c1:4e:08:a2:b9:08:c0:51:ea:f2:76:e7:9a:d8:
59:a2:ad:5e:8c:8c:9a:b7:9d:28:17:af:fe:3c:ec:
8c:fb:d4:18:4a:de:62:71:b5:1f:c6:40:d4:f3:fe:
33:5e:41:8e:0a:11:55:db:38:73:79:65:67:1f:12:
7b:78:1e:41:fc:91:5f:48:8f:0e:98:a2:01:0a:7f:
41:2d:a3:de:20:f7:23:2e:80:fd:8f:fb:9d:1c:ce:
a2:b2:ae:b8:73:4c:99:6d:f4:b4:79:c5:a8:96:0b:
ee:ad:b0:11:69:c5:88:cd:fa:49:94:63:8d:99:0a:
ca:0a:12:48:85:f7:39:31:3c:f7:2c:0e:ee:63:d5:
f8:12:89:5b:72:33:01:b2:7b:26:3c:e1:bf:f3:20:
63:c5:c7:7c:0d:7c:2d:a9:b5:b3:e3:bd:92:7d:ef:
30:ea:64:2d:79:39:44:51:63:0d:c8:71:a7:6b:6b:
54:92:e4:88:03:fb:02:1a:ba:9b:b1:61:d2:b4:65:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:3D:55:DC:AE:3C:07:4A:16:BE:25:8F:46:D4:44:18:3E:CF:A7
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/3Gg9VdyuPAdKFr4lj0bURBg-z6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:20:d1:32:d8:98:b8:91:86:a0:fb:85:66:a8:86:0c:e8:b3:
55:4e:1c:73:4d:f5:38:f0:f6:f9:d6:7f:62:66:4b:8d:58:63:
f1:70:c9:e5:c3:3d:30:38:6a:40:a6:88:2b:db:9f:f5:79:54:
71:7c:88:1e:e4:9c:a0:e3:a0:fc:c6:9e:a9:e0:6a:50:f3:3e:
e1:90:49:6d:9e:66:4d:d7:aa:28:9d:a9:ca:1e:fe:94:9b:b0:
86:d0:32:a7:ba:46:09:71:7a:2d:cd:9d:95:8f:1d:ca:0d:65:
84:7b:d0:25:2e:87:9f:ef:c6:14:57:a2:e9:a8:38:7d:05:ef:
01:26:ce:e4:8c:d8:c9:61:3e:0b:2f:0a:8a:00:56:f3:fd:af:
88:64:fb:31:5a:ff:42:0e:2d:fd:32:b8:f4:a8:ce:a3:c5:8f:
1b:28:7c:31:72:d0:7a:7e:c3:ac:90:23:e4:73:22:1e:25:1c:
55:3e:2a:2e:27:e7:25:be:9e:09:6d:60:c0:b3:8b:7b:14:97:
82:4e:0e:7e:01:45:97:ab:8d:d6:e5:17:27:f1:04:64:a9:b9:
62:08:00:7d:42:ae:ff:70:fb:f7:c5:e4:9d:8b:e2:60:85:86:
2e:f6:6b:de:84:0c:52:3b:ec:5f:98:c7:2b:bc:68:aa:92:63:
be:7d:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org