Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/D-PMow5ZKDmyUM6zRGcx3NaXM7s.roa
File: D-PMow5ZKDmyUM6zRGcx3NaXM7s.roa (raw, json)
Hash identifier: +BovrflEeChybIBrxwgyyHQx3WAup/e/UOAhmhCMSXg=
Subject key identifier: 0F:E3:CC:A3:0E:59:28:39:B2:50:CE:B3:44:67:31:DC:D6:97:33:BB
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: 01849B832CA360313174F975210324DA4062
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/D-PMow5ZKDmyUM6zRGcx3NaXM7s.roa
Signing time: Mon 21 Nov 2022 18:46:15 +0000
ROA not before: Mon 21 Nov 2022 18:46:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57013
IP address blocks: 185.187.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:83:2c:a3:60:31:31:74:f9:75:21:03:24:da:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: Nov 21 18:46:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fe3cca30e592839b250ceb3446731dcd69733bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:74:fd:59:28:78:f8:59:6b:6c:7a:3b:88:
82:b1:30:94:04:bb:b4:fe:10:09:a2:fa:ff:2e:96:
e0:e6:a4:c8:cb:fc:90:b6:71:e5:b7:bf:69:c1:de:
39:e0:c5:83:63:0b:8f:39:d6:b2:cc:10:fe:f4:65:
61:99:02:0e:fd:c0:7d:8c:45:87:d1:04:53:87:92:
d6:9b:64:fd:b4:d5:54:ad:91:ae:1f:84:18:dd:47:
24:32:b2:cc:e8:94:1b:9d:02:d2:aa:22:dc:86:21:
04:dd:0d:2e:2f:38:0d:5f:a7:1b:1b:a7:57:b9:65:
bb:64:a8:c3:65:f3:ed:10:6b:e7:c0:59:cf:3e:47:
f4:f4:24:fc:14:45:34:ec:09:0d:04:55:e6:04:a9:
3c:79:43:c7:1c:22:99:40:db:94:cf:0e:33:54:d4:
21:df:92:66:3c:fd:f4:fc:89:49:e5:fc:bd:2d:61:
bf:3a:c6:dc:bd:66:bb:fa:b3:34:26:ea:95:d1:2e:
c1:82:54:8f:10:3c:f0:94:2b:fb:f0:18:44:95:20:
0d:49:30:82:a3:2b:ee:4c:3f:df:68:d8:72:7a:76:
77:7a:08:d6:58:80:50:d3:a1:10:e7:5b:70:ea:52:
f9:2f:f2:53:44:1f:1c:37:80:6d:01:49:25:b3:b4:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E3:CC:A3:0E:59:28:39:B2:50:CE:B3:44:67:31:DC:D6:97:33:BB
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/D-PMow5ZKDmyUM6zRGcx3NaXM7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.18.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:17:e2:b1:23:79:96:fe:82:67:6f:70:52:a7:ed:67:fa:87:
36:e1:69:17:0e:73:e2:33:01:35:23:df:7f:3c:bb:88:ab:3b:
fa:71:91:89:14:4d:6f:99:a9:c0:18:bf:0c:5e:fa:15:eb:7c:
6d:1c:b1:2e:48:8e:49:40:03:e0:bb:52:51:23:1c:d3:f2:9b:
7f:60:a1:45:1b:c0:b5:06:db:e0:a0:bf:76:f2:ca:58:01:93:
c8:2a:03:32:15:ae:09:b7:ec:a5:53:ce:8b:88:70:03:ec:16:
b1:95:76:44:ba:83:dc:f1:1c:07:8e:b9:03:67:ce:91:c8:7b:
77:b0:f3:0e:af:d0:25:bf:0c:61:7e:91:31:1c:d3:72:54:b6:
93:dd:9a:47:9b:07:76:83:ad:9a:9a:1d:60:60:cb:af:3a:0a:
1b:a5:27:4c:01:7d:5f:85:8e:fd:68:7b:38:b4:9f:56:ba:59:
27:e8:ef:7c:41:6f:8a:82:f7:59:ce:68:63:1f:43:77:d1:8d:
8a:c4:a2:f0:31:24:b6:07:67:c7:74:7b:3d:9a:50:13:aa:66:
f7:7c:33:2a:ef:2e:c4:7d:63:c2:75:53:cf:6e:25:15:11:12:
a0:b9:8d:4b:61:82:a3:b6:2e:7c:84:10:db:99:d5:72:75:0c:
db:7f:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:48 2023 by rpki-client on console-ams.rpki-client.org