Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1-3JiQnG2xWNDCXE7xW81pJAxIVQ.roa
File: 1-3JiQnG2xWNDCXE7xW81pJAxIVQ.roa (raw, json)
Hash identifier: U4VHYhTgpgkrV7L+LY+2XwHWWO562MxqYCwPmKTwFqQ=
Subject key identifier: FB:72:62:42:71:B6:C5:63:43:09:71:3B:C5:6F:35:A4:90:31:21:54
Certificate issuer: /CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Certificate serial: FA21F1
Authority key identifier: 05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1-3JiQnG2xWNDCXE7xW81pJAxIVQ.roa
Signing time: Wed 11 May 2022 21:51:03 +0000
ROA not before: Wed 11 May 2022 21:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 185.11.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16392689 (0xfa21f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054f1eb8b3072796fee42922863a0bb6697f5c97
Validity
Not Before: May 11 21:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb72624271b6c5634309713bc56f35a490312154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:3c:c7:4f:69:a6:2b:27:7b:db:d7:2a:59:
19:75:a3:29:51:8d:00:39:ec:d6:c5:f7:fa:8b:94:
a5:d2:a7:19:78:ca:b1:07:ee:eb:b9:e4:db:14:f6:
8c:96:d7:70:7d:60:3c:57:75:6c:f7:7c:89:e9:3b:
2a:66:1a:f3:3d:0a:e1:e5:29:ad:d3:86:3b:6a:99:
38:c6:d1:84:ed:50:db:72:c3:44:aa:c6:1e:b8:ca:
10:1a:19:fa:b7:84:5c:6a:47:6f:6b:65:7b:f9:94:
12:f2:a5:ef:aa:0a:32:95:c7:84:d1:bf:07:04:e4:
6e:6c:df:b9:83:a5:f7:35:a2:8e:e9:5b:16:85:4a:
3d:be:1a:08:88:25:03:43:ab:e3:da:21:7d:80:a0:
7a:53:97:10:07:15:6d:c9:e6:00:3c:2b:38:a4:f3:
a7:41:5e:75:b9:f8:f7:5b:c5:6f:18:9d:7b:d5:6a:
58:c5:5f:71:7e:28:5c:73:0e:c2:be:2b:b6:72:e9:
40:73:bd:af:8d:22:ad:b7:30:09:a6:5c:e0:69:77:
56:e8:79:c7:90:c4:4f:76:57:21:d3:8a:3e:5e:d5:
36:1a:3a:9a:eb:ee:85:b6:dd:fb:16:16:26:b2:ae:
99:ba:36:6f:24:1e:d0:18:7b:a5:35:51:a1:da:06:
28:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:62:42:71:B6:C5:63:43:09:71:3B:C5:6F:35:A4:90:31:21:54
X509v3 Authority Key Identifier:
keyid:05:4F:1E:B8:B3:07:27:96:FE:E4:29:22:86:3A:0B:B6:69:7F:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU8euLMHJ5b-5CkihjoLtml_XJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/1-3JiQnG2xWNDCXE7xW81pJAxIVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5fbf50-f139-4585-8953-536dd6cbe532/1/BU8euLMHJ5b-5CkihjoLtml_XJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.63.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:52:bd:ac:43:e3:44:0a:51:fa:bd:9e:9b:9e:c7:a7:88:
5c:8f:9d:94:72:ee:99:99:d7:4f:06:a9:ec:f2:da:95:da:e1:
c8:d6:c6:98:dc:d7:b3:59:a2:12:77:9d:70:86:d7:1d:9f:80:
55:64:dd:7f:ed:78:84:97:76:3a:0e:db:ed:9e:fc:e9:7b:5b:
f2:d0:7d:2a:54:f1:7d:66:32:6c:7d:48:28:dd:89:cd:34:43:
88:6c:0e:55:a2:0a:72:cc:1e:30:a9:78:b0:54:1a:15:dc:bf:
7a:85:99:5e:3b:ac:c6:aa:30:ab:cd:cb:c7:5a:e9:4c:35:21:
4b:c1:5a:9c:bf:fe:c0:4c:7e:60:7b:2f:9c:94:69:0e:5d:84:
d1:2d:f8:e1:6f:62:a0:3a:7e:11:db:44:de:42:5b:b8:12:c2:
50:75:19:d9:4c:5b:d8:4c:c9:55:36:cb:6f:94:d8:5b:94:ec:
b9:47:f5:62:2c:7d:14:bd:30:95:f4:1e:66:19:e4:5b:24:98:
5c:e8:d8:53:ec:b3:ee:29:6c:44:3a:35:9c:21:b3:25:96:5e:
f6:ee:75:35:02:3d:2e:48:86:ce:84:46:64:ef:be:6a:08:af:
b1:17:0c:72:b1:8d:24:bc:4a:8b:8e:e1:93:e9:06:55:9c:74:
62:7a:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org