Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/x3SGbWSLeHzY2UYr29_1aiWnxzI.roa
File: x3SGbWSLeHzY2UYr29_1aiWnxzI.roa (raw, json)
Hash identifier: VPjGDp2pSDm5vF+nKYEoMmk77x04SD6S0QZwNQcXH9A=
Subject key identifier: C7:74:86:6D:64:8B:78:7C:D8:D9:46:2B:DB:DF:F5:6A:25:A7:C7:32
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 296001CF
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/x3SGbWSLeHzY2UYr29_1aiWnxzI.roa
Signing time: Sat 01 Jan 2022 10:04:00 +0000
ROA not before: Sat 01 Jan 2022 10:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20845
IP address blocks: 185.79.94.0/23 maxlen: 23
185.79.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694157775 (0x296001cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 10:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c774866d648b787cd8d9462bdbdff56a25a7c732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:4b:ac:78:59:19:c2:e3:34:64:60:84:d4:
f5:a5:05:5e:eb:bf:ee:04:c2:56:4c:18:30:be:2f:
0c:bb:3e:30:6a:9e:df:c8:80:b0:94:87:31:a3:a3:
b8:05:5a:c3:92:12:69:ee:d2:85:19:37:9b:52:c2:
15:da:9e:f0:9d:0c:88:c8:b7:53:bf:14:1c:25:5c:
bc:df:c3:70:1b:4a:af:7a:b3:23:4b:98:e6:fd:f7:
79:f9:37:43:34:32:16:bb:99:b6:4d:01:1d:90:6d:
e0:98:2f:02:8c:4d:51:28:eb:41:18:72:9c:5c:87:
99:a7:81:7a:87:56:e1:3d:df:37:f5:69:10:36:b3:
4b:fd:30:ff:7c:05:b9:11:f5:1e:e6:ee:50:74:f0:
68:b4:4c:89:1c:7b:55:cf:ef:b2:f8:31:b5:62:9c:
e7:13:15:d7:a7:6a:6f:5f:24:d0:d7:a2:49:8f:ac:
7d:69:fe:5a:4a:07:1b:bf:0f:81:57:df:30:b5:fa:
c3:6f:d2:42:0f:f9:de:16:fd:f4:89:3f:51:f3:8e:
02:25:65:bb:0e:2f:14:75:d7:b8:65:40:e0:32:89:
1f:dc:a0:38:8b:ce:72:17:c6:25:20:3e:da:3b:e2:
a3:14:18:09:79:ad:7d:d9:47:48:17:e8:00:f2:7d:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:74:86:6D:64:8B:78:7C:D8:D9:46:2B:DB:DF:F5:6A:25:A7:C7:32
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/x3SGbWSLeHzY2UYr29_1aiWnxzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.92.0/22
Signature Algorithm: sha256WithRSAEncryption
56:2b:33:38:5f:b8:4f:46:74:48:ec:0a:70:8b:17:9b:59:9b:
b8:79:a8:a5:3e:e7:e4:45:73:69:ab:a3:31:73:d9:85:6f:8b:
c1:76:8c:3e:33:3f:6e:34:59:ea:8d:ea:19:a5:76:c9:e5:08:
e8:e6:ac:4a:7c:d6:e0:e6:46:53:9d:06:1a:9b:67:40:f0:ad:
bf:d3:7c:57:bd:de:fd:c8:3e:42:12:f8:12:3c:bc:1f:ac:b6:
ae:0e:0b:9f:19:fc:3d:95:2a:b1:9a:34:bf:97:a2:af:28:36:
c7:c9:a1:79:39:e3:4c:77:9b:fc:16:00:e4:0a:c3:99:dc:5f:
da:40:4d:f2:b0:ac:d1:cc:f0:57:e6:75:38:09:53:a0:ac:32:
7c:4e:b7:33:5c:1d:18:28:d1:94:fb:50:97:30:0d:f8:34:40:
59:c3:5e:e4:7d:9b:1f:7f:d8:9a:dd:39:27:fd:2d:16:99:f6:
ff:62:3f:3c:97:9a:14:23:01:27:ca:ae:bb:43:a6:4b:df:a4:
10:3a:f1:b8:ab:31:79:30:ae:38:0e:2a:a0:f1:0e:01:41:38:
17:5d:d1:65:c9:d0:6f:d1:dd:fc:15:b3:2e:0a:3a:02:17:91:
59:ed:b2:6f:19:b2:ac:0e:ea:33:b4:7e:51:82:dd:23:da:27:
4e:0c:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:19 2023 by rpki-client on console-ams.rpki-client.org