Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ieRV3ofwPxREvQpZmaAaEdC3xeQ.roa
File: ieRV3ofwPxREvQpZmaAaEdC3xeQ.roa (raw, json)
Hash identifier: OPZtfiR2ZhAOChTFonmmQm3TB5zjg1ry57Gr/vBpF8s=
Subject key identifier: 89:E4:55:DE:87:F0:3F:14:44:BD:0A:59:99:A0:1A:11:D0:B7:C5:E4
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 023C19BC
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ieRV3ofwPxREvQpZmaAaEdC3xeQ.roa
Signing time: Wed 26 Jan 2022 12:38:58 +0000
ROA not before: Wed 26 Jan 2022 12:38:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39144
IP address blocks: 185.132.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37493180 (0x23c19bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 26 12:38:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89e455de87f03f1444bd0a5999a01a11d0b7c5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:4d:f6:08:73:6e:af:f9:28:30:2e:05:24:
b8:0c:f7:21:6c:35:f2:bc:e0:2a:a8:d0:b3:e8:e7:
78:de:7d:58:27:34:da:f7:97:c7:ba:49:78:91:71:
cf:3c:82:80:c6:77:bc:cf:e8:95:c2:5f:be:c5:26:
e4:7d:f4:bd:6b:84:52:7d:0f:6b:3a:e2:3c:c2:93:
48:23:19:66:ba:c7:51:2e:4a:7f:c9:01:77:03:19:
ae:11:21:f5:94:0f:aa:bd:c1:10:c9:4e:58:8f:eb:
a6:e0:84:0c:b7:b4:1e:dc:a6:17:2c:9e:20:3d:4d:
c2:45:4c:a9:7f:5a:a9:6c:b5:b0:56:04:dc:d1:4a:
69:f0:cc:c6:59:a5:4d:4d:2b:8e:f0:a1:16:de:fb:
27:3b:fd:fe:2d:60:5d:66:cc:a4:58:d0:ea:bc:c4:
cc:22:fb:5a:83:2c:7f:5d:69:e8:57:34:58:c5:6c:
9d:de:53:d6:af:80:b1:8e:1f:71:b8:09:9e:b5:81:
93:d9:af:26:74:cb:72:6e:c8:2f:63:f4:80:62:e8:
5e:cb:7e:c5:12:5e:c5:6b:eb:8b:81:ba:b5:4e:50:
cf:15:76:da:8d:af:e1:a2:49:b2:d8:d0:17:05:10:
fb:15:81:b4:1d:8f:80:54:8a:3a:6d:da:28:ed:4d:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:55:DE:87:F0:3F:14:44:BD:0A:59:99:A0:1A:11:D0:B7:C5:E4
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ieRV3ofwPxREvQpZmaAaEdC3xeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:43:af:05:85:a6:7d:bb:e6:85:8d:0b:73:e5:3c:dd:10:4e:
59:f2:d6:5b:54:21:cb:da:d5:c1:9f:a5:49:57:39:38:3a:83:
f2:65:c7:28:6a:00:e5:f4:5c:62:31:6c:a6:9a:41:e7:ab:1c:
32:4f:30:eb:7e:0c:90:8e:26:51:1f:90:b8:40:3b:19:e8:40:
d6:62:be:3e:3a:65:b4:17:50:2f:6e:07:aa:92:a7:38:ed:68:
b6:68:4e:d6:36:ff:7b:04:ba:13:7d:03:e9:f9:13:a4:af:21:
4a:03:c8:a5:9f:9d:01:1d:67:74:24:60:b6:40:87:c0:47:c1:
b4:28:50:c3:c2:3a:83:3a:3f:f0:72:44:fa:a0:ce:bb:72:2a:
bb:2d:b6:98:7f:02:8b:c4:63:f5:5e:c1:71:4e:87:f6:c7:5a:
b2:1a:95:bf:b8:d9:e0:3b:bc:08:89:83:14:25:c6:46:0d:ea:
e0:f6:93:0f:b4:01:3b:1c:ec:a3:fe:8a:08:45:68:1b:b4:03:
29:e7:6a:42:c1:97:ca:d1:f4:22:60:f9:55:25:fe:43:ab:3a:
5e:37:74:fa:ad:e7:50:84:d1:f6:43:70:1c:90:13:dd:f5:a0:
41:84:9a:e4:47:fd:f0:8f:1d:98:f6:a6:c0:c0:44:3b:bc:17:
32:0f:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org