Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/SvD1fJQxTn6i02YYhnB14NNL_4E.roa
File: SvD1fJQxTn6i02YYhnB14NNL_4E.roa (raw, json)
Hash identifier: WmwawjJwIhV7iYAggfyK9bCsFYt2fSIhunFdid0SZIs=
Subject key identifier: 4A:F0:F5:7C:94:31:4E:7E:A2:D3:66:18:86:70:75:E0:D3:4B:FF:81
Certificate issuer: /CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Certificate serial: D398B2
Authority key identifier: DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/SvD1fJQxTn6i02YYhnB14NNL_4E.roa
Signing time: Sat 01 Jan 2022 00:51:16 +0000
ROA not before: Sat 01 Jan 2022 00:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60605
IP address blocks: 185.25.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13867186 (0xd398b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8a4e1dee5bb1e6579b1161ca912ca9c03b46ed
Validity
Not Before: Jan 1 00:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4af0f57c94314e7ea2d36618867075e0d34bff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:6e:3e:5d:19:4f:a8:ce:41:65:06:0d:f6:
f7:7a:50:ff:d4:d5:34:13:ca:f1:42:a2:21:1f:62:
29:ad:5b:8d:d3:aa:c5:b6:5d:63:4a:9c:a6:20:73:
76:01:cb:9c:04:52:8c:2d:44:1e:34:79:cb:93:9b:
2b:f2:04:83:4e:a9:c1:38:d5:80:49:98:f0:05:77:
c7:f2:aa:75:ac:35:3c:a4:b7:c6:84:a0:82:d0:cd:
3c:c2:ca:7a:41:b5:c7:49:1c:b6:8f:a1:07:d6:84:
cb:7d:79:e7:8c:ca:9e:00:f9:dd:0a:dd:e5:f8:ae:
40:a5:47:7d:59:54:d2:c3:af:f2:0f:8b:ef:67:09:
90:7f:7d:8f:b3:a6:bc:32:50:dd:d4:31:e5:82:0c:
41:ab:d8:63:00:b9:46:3f:c0:47:bb:d0:13:9a:0f:
9b:54:66:f6:11:3b:90:4d:47:8d:c8:48:db:ed:22:
2e:a5:01:ef:1e:cb:5e:c4:43:e7:b0:ce:49:5a:79:
47:e7:b3:bc:af:24:07:13:0b:2d:06:c5:48:df:e1:
eb:e9:f2:a6:83:c4:1c:4e:7d:8a:8b:e3:99:0f:6f:
cb:cc:b2:2d:67:65:ce:2b:3a:2b:b4:4b:60:71:e1:
3d:4d:64:17:cc:2d:0b:9c:33:b7:82:4b:46:db:f0:
2f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:F5:7C:94:31:4E:7E:A2:D3:66:18:86:70:75:E0:D3:4B:FF:81
X509v3 Authority Key Identifier:
keyid:DD:8A:4E:1D:EE:5B:B1:E6:57:9B:11:61:CA:91:2C:A9:C0:3B:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YpOHe5bseZXmxFhypEsqcA7Ru0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/SvD1fJQxTn6i02YYhnB14NNL_4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5d1908-6c4d-4581-8f10-985aac5beb30/1/3YpOHe5bseZXmxFhypEsqcA7Ru0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.172.0/22
Signature Algorithm: sha256WithRSAEncryption
19:b4:11:91:f3:f9:80:9f:13:7b:1c:ed:7f:b2:6d:9d:eb:38:
99:8e:29:d1:d9:be:8c:e9:57:75:e4:5d:6a:ed:b2:24:72:a6:
30:67:65:16:e4:96:4b:28:d8:bd:e7:4e:1c:71:df:b2:c3:97:
4d:2d:c8:b4:fd:9a:7a:28:c8:f1:e5:bc:f0:18:6f:c2:e1:b9:
c5:05:76:74:39:91:05:1b:7f:15:1a:87:93:1d:59:a1:1b:e9:
ba:07:71:40:03:2e:59:33:15:34:62:35:0a:da:c2:a0:db:61:
98:91:29:52:9f:7a:9c:49:5d:96:82:66:7d:f2:a2:8d:ad:ee:
68:7b:3f:b0:e8:19:03:99:4c:1f:8c:e3:2f:3d:3d:4f:aa:4e:
70:be:a8:b3:ce:6a:6f:29:9b:4a:64:b6:d2:54:7c:55:01:b5:
b3:67:41:f2:2a:03:0a:ba:3f:f4:5c:a5:cc:8b:52:91:9e:00:
27:43:cc:ca:6a:c5:2c:e2:f8:2e:6c:aa:e6:9c:6c:04:9d:ba:
fa:c9:30:01:76:7b:ca:96:5f:a1:4c:91:49:ee:8f:69:31:d8:
6d:76:95:91:c1:d3:3f:80:02:5f:24:a9:d3:48:54:84:42:bc:
f0:ab:22:31:90:1c:48:62:f3:d0:56:60:3f:50:e6:63:16:09:
56:3b:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:10 2023 by rpki-client on console-fra.rpki-client.org