Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xOus1fASJ82bn19XZ04o5B7oMk4.roa
File: xOus1fASJ82bn19XZ04o5B7oMk4.roa (raw, json)
Hash identifier: 3meKMR3mGAUboWw4pkW5/ytndwkXflsJldY+oZZdXbQ=
Subject key identifier: C4:EB:AC:D5:F0:12:27:CD:9B:9F:5F:57:67:4E:28:E4:1E:E8:32:4E
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0A077EA5
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xOus1fASJ82bn19XZ04o5B7oMk4.roa
Signing time: Thu 10 Feb 2022 09:11:32 +0000
ROA not before: Thu 10 Feb 2022 09:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 171.22.146.0/24 maxlen: 24
185.149.13.0/24 maxlen: 24
185.149.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168263333 (0xa077ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Feb 10 09:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4ebacd5f01227cd9b9f5f57674e28e41ee8324e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:b1:88:b0:a9:79:d1:31:5e:f9:d9:ed:9c:
b1:ff:95:46:7c:f7:95:52:50:a1:69:ad:e4:f5:9e:
86:09:a2:2c:7e:16:3b:a4:67:28:ae:8e:3d:f2:5c:
84:5c:15:25:3a:cb:f2:39:b6:a2:71:b2:52:61:a0:
97:37:aa:a3:55:19:17:cd:a7:8e:86:c1:1a:94:af:
05:57:b8:ce:f0:8f:72:5b:c7:6b:c4:5f:b5:3d:8d:
8d:c3:1d:03:56:c4:13:80:ea:92:d0:3a:15:8f:80:
fa:d4:ad:00:05:9e:78:06:aa:55:0a:df:2f:9c:b0:
43:4f:ad:16:e8:a1:60:d2:b6:48:0b:29:d7:8e:36:
a6:e2:74:e1:26:b7:4b:df:f6:8e:b2:44:f2:08:b2:
7e:25:38:10:20:13:38:f0:3b:9c:ac:49:f6:36:49:
f5:c9:81:3b:03:98:9e:ae:43:ec:c5:dc:8c:25:69:
1b:30:25:fa:b2:9b:77:6e:55:bf:e5:5f:86:1c:24:
63:95:4a:7d:66:b8:68:60:56:e3:f3:f0:30:24:41:
ba:5d:cb:66:14:74:4a:b2:57:7c:d0:d2:d0:10:58:
2d:06:26:76:6f:c4:d2:99:d8:99:10:ac:70:83:ad:
a6:29:ac:41:e7:8a:b9:ae:da:b5:58:fc:6b:86:9a:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:AC:D5:F0:12:27:CD:9B:9F:5F:57:67:4E:28:E4:1E:E8:32:4E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/xOus1fASJ82bn19XZ04o5B7oMk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.146.0/24
185.149.12.0/23
Signature Algorithm: sha256WithRSAEncryption
13:fc:7d:e3:a2:bd:21:c3:90:b9:d9:7c:b0:67:4f:1d:36:33:
c5:13:42:d9:4c:dc:48:1e:37:a1:fd:46:c2:74:4e:1c:48:46:
6d:28:0e:e4:c5:7f:20:3b:20:1b:8d:07:6a:50:c8:4e:46:ce:
53:d6:12:f7:ce:8c:30:d2:b6:eb:a8:5b:e2:10:85:56:7d:0b:
f2:c0:be:d2:60:53:7d:7b:a6:7d:c7:a4:85:7e:dc:e5:67:7d:
88:67:bc:ef:f0:04:cb:c3:f8:93:e1:26:3a:7e:13:91:6e:c5:
04:bc:c7:b0:a9:6b:c7:67:88:ef:f4:bf:89:69:5c:e2:64:a3:
c8:24:32:64:c1:ca:26:3b:03:a1:92:cb:7e:15:2b:2a:e8:5c:
76:ed:3e:db:d7:a9:a5:2d:06:01:58:8c:24:f7:25:97:42:b5:
37:94:c0:d3:5b:7d:ee:2e:62:01:27:76:dc:03:4a:c6:78:1f:
4c:83:d5:d3:ea:e9:ea:4a:58:60:1a:8b:1b:20:96:95:b6:84:
26:fe:1a:67:e5:c6:f7:ce:6e:55:48:96:97:28:11:d2:fe:ab:
dc:e0:cb:87:62:8e:83:d3:cf:3d:be:02:01:40:73:fc:c4:e4:
25:a8:15:f4:59:bd:3c:6e:c1:c6:ce:10:9e:e0:73:26:d7:15:
f5:fd:c3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org