Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SMDvlDEAjQTQ2fYzlajSUg2jaM.roa
File: 1SMDvlDEAjQTQ2fYzlajSUg2jaM.roa (raw, json)
Hash identifier: s9jxWKYXo4luz7FtUV3yNYuqd01kESHT4ql9WzZWVTQ=
Subject key identifier: D5:23:03:BE:50:C4:02:34:13:43:67:D8:CE:56:A3:49:48:36:8D:A3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13399E19
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SMDvlDEAjQTQ2fYzlajSUg2jaM.roa
Signing time: Sat 01 Jan 2022 04:03:05 +0000
ROA not before: Sat 01 Jan 2022 04:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142578
IP address blocks: 188.209.156.0/22 maxlen: 24
185.207.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322543129 (0x13399e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d52303be50c40234134367d8ce56a34948368da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:98:33:de:22:62:fd:5e:36:51:ca:3b:22:
4a:db:d2:53:70:9d:95:b7:ac:9e:49:7a:3c:31:7a:
f1:a0:9d:17:27:71:a1:eb:26:6d:52:6f:81:43:75:
73:fa:e6:54:eb:f1:1e:d1:7a:59:34:c6:57:e8:d2:
f8:7e:eb:42:4a:d9:af:5b:6e:ac:b2:48:6d:01:76:
62:3f:7f:b4:5d:21:0b:04:5c:02:57:31:7e:2e:9c:
85:a4:26:99:b6:60:6a:9c:f7:95:52:7f:2c:ba:1f:
48:94:c8:20:95:10:cb:83:6d:da:a9:ad:db:49:1d:
e8:65:9b:fd:3a:b8:f1:74:2a:01:4c:e2:7d:1d:30:
56:8b:b2:2f:63:08:36:3f:b0:68:27:29:f1:4a:ca:
83:3f:59:3b:8d:f0:aa:4c:cd:41:ef:99:b1:9d:cc:
72:02:a6:49:26:39:13:98:cf:c3:85:3c:07:be:fd:
a2:80:00:e7:10:13:86:51:9c:0e:15:7d:0d:9a:bb:
09:7e:f0:ea:36:4c:91:5e:29:e7:7b:7b:31:de:c4:
ce:26:81:5d:64:dc:31:85:e5:b8:25:ea:ee:cd:58:
51:f6:43:c7:e8:ae:bd:3e:ea:f8:d0:bc:05:05:43:
d3:c2:0e:65:f8:1e:0a:fb:6a:99:fc:78:ad:f4:95:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:23:03:BE:50:C4:02:34:13:43:67:D8:CE:56:A3:49:48:36:8D:A3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1SMDvlDEAjQTQ2fYzlajSUg2jaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.196.0/22
188.209.156.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c6:10:1c:83:8a:22:da:70:0d:61:07:a2:1d:9b:ba:07:01:
24:87:6f:f6:1b:81:c1:26:d9:ac:5a:56:ac:33:47:f3:a2:b6:
56:3e:45:57:97:a8:19:a6:66:6a:f6:42:19:28:86:e5:16:c1:
6f:c5:d9:eb:26:d9:89:48:e7:dc:6c:67:d4:c1:cc:ca:2f:15:
91:b7:31:5e:bf:b6:1d:ae:7d:93:b8:52:44:6c:7c:bc:99:7c:
9d:d5:72:60:ec:93:1b:e2:1d:ab:79:90:a8:59:e8:46:9f:57:
fa:78:fb:72:a8:f5:67:4a:3d:79:d0:d7:35:77:f6:08:64:ff:
61:e7:62:c7:a1:0a:fd:4f:31:b3:84:a6:ed:5b:e0:3d:cc:e3:
32:da:ed:37:41:a9:d8:42:06:c1:f2:32:6e:f6:5d:63:73:30:
d1:14:89:5f:eb:78:a4:e0:c7:b1:b2:39:f1:c9:16:56:31:30:
1f:95:bd:0f:70:68:25:32:e2:4c:f2:f0:e2:58:da:25:4e:1f:
a2:91:2c:92:8f:2c:76:a2:3f:ef:c9:e2:1d:7f:40:3b:c8:b4:
b5:5f:9c:d4:87:c4:15:89:10:a0:17:46:95:02:c3:fd:16:09:
5f:9c:60:d1:7c:c5:46:96:0b:38:08:e5:70:91:d2:ee:cf:44:
33:5d:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org