Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/1uSrvtmYAqGZpYQ50A8NOl3VVFY.roa
File: 1uSrvtmYAqGZpYQ50A8NOl3VVFY.roa (raw, json)
Hash identifier: XE6XWBgcLhkEnlBEKo4lztIxpeOYNDUS9j+NiJ6H+rg=
Subject key identifier: D6:E4:AB:BE:D9:98:02:A1:99:A5:84:39:D0:0F:0D:3A:5D:D5:54:56
Certificate issuer: /CN=df798581e73704ee38c9be15e72370f176c60311
Certificate serial: 293EAE
Authority key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/1uSrvtmYAqGZpYQ50A8NOl3VVFY.roa
Signing time: Tue 24 May 2022 10:59:13 +0000
ROA not before: Tue 24 May 2022 10:59:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 185.128.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2703022 (0x293eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df798581e73704ee38c9be15e72370f176c60311
Validity
Not Before: May 24 10:59:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6e4abbed99802a199a58439d00f0d3a5dd55456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:f0:f6:4f:6a:01:4f:57:89:36:c2:eb:b4:
cb:e6:19:de:80:2c:0d:e9:3a:79:e7:10:ad:ca:63:
a9:fe:54:d0:c3:74:86:4c:7c:1e:8d:05:ef:f8:de:
4c:2b:4b:57:a4:2d:fb:7b:6c:08:c5:80:bb:2c:74:
a5:27:f4:c9:53:64:0c:88:ba:77:78:5f:b4:ac:b2:
1a:b2:3b:bd:e7:55:4f:83:8a:ce:80:08:6e:9c:cd:
da:b9:56:7b:74:99:d4:76:91:cd:9e:f6:f3:f9:85:
ae:62:dc:c6:29:f5:4d:e1:8a:79:67:7e:4f:33:7b:
b3:91:9a:18:7d:f6:46:2f:d5:e3:c0:3f:c2:3e:a3:
d2:a5:9d:0b:38:df:9f:4b:39:4a:ef:b8:75:31:c8:
de:ea:f3:81:9d:24:c3:fb:18:fe:41:39:1b:f1:d5:
e0:bd:00:b2:a0:1d:a5:2d:6b:6d:21:59:fe:f9:7c:
b0:79:ce:15:28:ea:5b:aa:83:f5:86:6d:ce:48:1f:
b7:4a:86:23:7f:fd:90:f2:4d:62:43:9f:dc:26:bb:
cf:8e:c2:ed:c4:50:db:32:dc:cc:4d:4e:69:83:db:
4d:50:23:99:07:2e:ba:42:fe:70:a7:58:4e:fb:ba:
da:3a:ee:e8:e5:14:0b:91:c7:d4:d3:b3:09:24:d7:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:AB:BE:D9:98:02:A1:99:A5:84:39:D0:0F:0D:3A:5D:D5:54:56
X509v3 Authority Key Identifier:
keyid:DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/1uSrvtmYAqGZpYQ50A8NOl3VVFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.83.0/24
Signature Algorithm: sha256WithRSAEncryption
56:49:15:b7:3d:05:4c:98:28:e4:4e:ac:ea:58:1e:de:54:11:
6c:a7:4e:e2:15:22:f7:13:79:28:90:d6:d8:e2:61:33:4f:5a:
13:9e:ea:7b:9f:e7:03:f2:48:19:34:6e:f6:a4:30:a0:7b:2f:
41:1f:5f:d9:6e:4f:43:86:b9:f1:56:12:f8:9f:01:f1:0f:c1:
78:9b:7f:83:a7:f6:ae:45:12:5d:4a:7f:be:d5:0d:6a:bc:18:
ec:68:6c:f5:79:82:e5:22:16:3f:73:cd:4a:b5:01:a0:13:3c:
a5:55:50:74:0c:96:31:d1:a5:74:4b:2f:b5:48:71:75:3c:f4:
46:e5:f0:22:98:69:41:71:fb:93:a5:d0:02:01:d9:0f:0e:f6:
b5:94:38:24:c3:4c:33:7b:85:16:b0:e2:a3:a2:a4:16:09:2e:
3c:f8:fd:49:6c:02:49:ef:42:cb:2d:db:0b:8a:a9:de:8c:44:
32:0d:bd:d5:d5:3f:1c:0b:53:98:69:9d:20:3f:ee:43:cc:f9:
97:77:49:fe:45:b3:49:e9:2a:f8:6d:23:9b:a5:4b:f3:bc:26:
73:4a:13:09:3c:34:98:ab:e7:6f:0d:ba:7b:9a:22:d2:a6:9a:
74:ac:0c:b0:c0:a4:09:a4:72:a8:0d:38:6d:63:ed:22:ca:f6:
9e:a1:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:11 2023 by rpki-client on console-fra.rpki-client.org