Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/taVw4xvKh9ITPUzxn3vJ9rW8BXU.roa
File: taVw4xvKh9ITPUzxn3vJ9rW8BXU.roa (raw, json)
Hash identifier: k6Q4xxyBe5uga/RlYlpGImmEyeRewJB+pA1BcyFZLYk=
Subject key identifier: B5:A5:70:E3:1B:CA:87:D2:13:3D:4C:F1:9F:7B:C9:F6:B5:BC:05:75
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0183EEE99F21251E6096C34B09A083C7FFE9
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/taVw4xvKh9ITPUzxn3vJ9rW8BXU.roa
Signing time: Wed 19 Oct 2022 06:23:51 +0000
ROA not before: Wed 19 Oct 2022 06:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.132.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:e9:9f:21:25:1e:60:96:c3:4b:09:a0:83:c7:ff:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Oct 19 06:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5a570e31bca87d2133d4cf19f7bc9f6b5bc0575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:d2:56:77:f2:50:aa:cf:d9:35:89:05:4d:
a0:b0:b5:33:e7:28:31:01:3e:a2:d8:02:fa:75:c7:
3d:70:74:e2:61:8e:f8:50:ea:42:44:1f:7e:e2:44:
0c:b7:fe:d4:ad:b0:73:17:b9:77:f6:3b:7b:0b:42:
cf:ac:36:ca:02:48:fa:48:0a:2a:e2:26:93:a4:a4:
ae:66:60:12:5e:a0:02:5a:67:b4:d8:68:2f:97:36:
c6:30:5a:4e:fd:87:ea:a3:97:b8:78:ce:4e:d7:7c:
af:17:7d:3e:34:04:e5:e2:eb:f7:f2:ce:cd:13:c7:
20:56:f8:54:fc:e0:bc:ab:03:62:39:69:b1:9e:35:
22:3e:88:d1:2d:ff:a0:f7:0b:e9:64:c2:39:fb:b7:
01:57:f5:1f:ff:49:eb:78:5d:a4:84:fb:7a:ac:cb:
f2:cd:6e:48:ee:5d:b4:bc:02:2d:7a:fa:f2:73:28:
16:bf:52:f4:1d:06:c1:ef:a0:49:83:84:23:a5:2a:
15:d9:1b:24:4f:47:f3:b8:91:06:02:b1:a6:d7:43:
23:ab:ba:f2:a9:91:1c:c7:de:fe:68:af:25:68:00:
1c:2e:81:7a:a0:7f:4a:c4:08:9f:bf:a6:f7:79:42:
1f:42:70:a2:13:a0:f8:27:bb:3e:07:00:b7:72:2f:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:70:E3:1B:CA:87:D2:13:3D:4C:F1:9F:7B:C9:F6:B5:BC:05:75
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/taVw4xvKh9ITPUzxn3vJ9rW8BXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d0:41:88:66:13:ee:0c:22:a4:cc:62:be:69:41:e5:f4:94:
e0:68:28:d6:36:38:db:8b:db:7a:34:79:4a:a3:b0:4c:9e:2d:
8e:6d:9e:7f:2c:28:6a:03:66:d2:27:89:99:63:ce:db:49:39:
a8:20:de:a2:44:fe:72:ee:d4:03:7d:6f:d7:93:12:b7:d1:f9:
ff:8d:f8:7a:ff:a6:df:bf:3f:0b:52:3f:0e:3d:ec:99:52:fb:
6c:0c:ed:3d:6a:59:1f:e0:f5:b5:3a:b4:8c:26:dc:4e:cc:00:
4a:e3:f0:09:96:f0:4e:b8:1e:53:3c:cb:a7:c5:3b:f4:9c:1c:
c4:bf:33:4b:e2:29:4e:9b:55:99:dd:bf:71:5c:7f:94:c8:69:
93:44:7f:2c:b6:4a:d9:65:de:ea:b0:f5:c5:db:01:59:f1:dd:
60:5d:22:36:3e:63:80:81:8c:ab:a0:28:6f:19:90:ad:72:17:
4c:40:e1:84:c7:53:64:51:04:ab:ea:7f:14:b5:fd:a9:9b:cd:
3b:7e:2b:2f:ae:2f:d5:35:12:fa:b9:08:32:1d:06:6b:3e:e4:
ee:e8:8d:a8:5d:e7:62:b0:7f:4c:d0:88:1b:2a:96:67:03:e0:
0f:52:01:be:d1:7d:1c:c1:59:5b:39:dd:fc:38:c4:d8:30:d9:
61:13:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org