Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/U_P3EKLRVkDULT_Gb1Bl2HbQ3KY.roa
File: U_P3EKLRVkDULT_Gb1Bl2HbQ3KY.roa (raw, json)
Hash identifier: 6cVZuYaQOYbD8JnhCzf9SQGUJOiEBWPJLztI+mX5swo=
Subject key identifier: 53:F3:F7:10:A2:D1:56:40:D4:2D:3F:C6:6F:50:65:D8:76:D0:DC:A6
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 08EDBA91
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/U_P3EKLRVkDULT_Gb1Bl2HbQ3KY.roa
Signing time: Sun 13 Mar 2022 10:04:39 +0000
ROA not before: Sun 13 Mar 2022 10:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206264
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149797521 (0x8edba91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Mar 13 10:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53f3f710a2d15640d42d3fc66f5065d876d0dca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:6f:c4:39:1a:f0:38:c3:42:9e:56:a8:cf:
5a:e8:d5:65:59:80:c7:3d:86:af:32:90:fd:2f:e0:
ad:f3:52:85:7a:14:e8:f7:17:b6:5a:a3:59:34:4f:
c5:46:af:70:27:f9:63:ec:4c:dd:5d:27:1f:08:79:
9b:ef:27:28:92:24:1d:b6:b9:29:03:43:53:ba:a7:
1d:c0:20:64:9c:9d:89:52:14:16:7b:36:7a:a0:97:
a3:63:2b:90:e4:ce:fd:80:40:fb:d4:c6:ee:d5:74:
51:b3:77:da:e3:a3:2f:87:0d:66:2d:60:a4:44:6d:
13:40:a0:46:3e:7c:e7:58:a2:90:2d:fa:e2:c0:0e:
34:6c:19:74:31:0a:9f:cf:02:0b:ad:9c:55:ba:ed:
3d:61:00:d5:52:3f:3d:dc:9d:79:d9:fc:7c:22:78:
58:48:93:d7:5d:f0:cd:f0:b8:cc:50:c0:07:7d:8c:
67:df:76:d5:94:c4:35:dd:dd:ce:5b:ef:6a:83:f6:
65:e5:c6:f0:66:97:9e:a6:b7:e1:57:a0:6d:7f:bf:
0a:0b:b0:25:54:20:6d:75:64:69:fb:b5:47:6e:0b:
c6:5d:63:1b:44:e0:47:fa:3c:1e:3e:e9:36:c6:c7:
99:24:c5:aa:52:61:18:c3:c0:1a:80:4a:c9:60:de:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F3:F7:10:A2:D1:56:40:D4:2D:3F:C6:6F:50:65:D8:76:D0:DC:A6
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/U_P3EKLRVkDULT_Gb1Bl2HbQ3KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
71:18:f9:85:b7:e0:82:56:dc:c7:0e:9c:c0:50:36:f4:b1:a2:
48:88:97:80:df:c0:bb:cf:23:63:b5:04:e1:e1:39:f1:90:23:
54:55:cd:90:35:10:1d:98:4e:8d:08:b0:c9:a7:1b:d7:6a:83:
86:32:1a:57:85:d6:0b:c9:9d:fb:73:8d:3f:21:48:e3:85:c4:
d7:f0:4d:86:c9:6f:3c:b0:65:db:65:4d:5d:70:7f:55:f6:d9:
61:bf:d7:cf:60:36:de:8e:be:ff:fd:06:6b:5f:a1:98:0f:43:
b3:d5:d8:6d:3a:f5:f8:35:ec:e6:41:0f:d9:94:25:22:8a:9f:
71:1f:c9:e1:92:bd:b5:ea:16:e8:62:cb:ba:5e:f4:dc:7e:e5:
b1:16:b6:02:99:1c:88:68:8d:26:ee:02:74:b9:28:19:75:03:
31:4b:13:9f:14:fc:2d:c2:98:1b:7c:6d:ed:e0:dd:fb:f4:c7:
c4:0b:f8:a6:75:c9:62:f8:c4:47:f2:d7:a8:52:28:db:71:a4:
2e:b2:50:d1:9c:74:61:bc:fc:1f:8c:a5:a4:92:23:15:eb:f2:
57:72:9d:c6:b9:92:6f:d2:3f:b2:b6:c9:e5:74:b3:b4:1a:67:
40:89:90:e2:f2:d2:4e:21:17:09:4c:8c:ed:ed:2d:40:10:f5:
ae:71:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:02 2023 by rpki-client on console-fra.rpki-client.org