Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/G170Sda4jJzV9uJHvliQX6d8ciM.roa
File: G170Sda4jJzV9uJHvliQX6d8ciM.roa (raw, json)
Hash identifier: vBAmb9HMpqGQchPXl2KA81Ea8QD1jKrW7UJ0Qk8hNhk=
Subject key identifier: 1B:5E:F4:49:D6:B8:8C:9C:D5:F6:E2:47:BE:58:90:5F:A7:7C:72:23
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 132BE487
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/G170Sda4jJzV9uJHvliQX6d8ciM.roa
Signing time: Sat 01 Jan 2022 04:02:58 +0000
ROA not before: Sat 01 Jan 2022 04:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48359
IP address blocks: 185.215.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321643655 (0x132be487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b5ef449d6b88c9cd5f6e247be58905fa77c7223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:64:29:cf:50:bc:3b:b0:42:77:04:c2:8e:
95:25:70:85:b3:ba:bb:60:4b:5b:87:a5:47:b0:1d:
92:a1:78:c7:84:30:e1:ee:14:ce:43:77:bb:a0:22:
37:16:fd:53:87:cd:d8:4e:5f:5c:4b:c0:07:e8:e8:
7e:6b:36:37:dc:b4:a2:b0:e6:8b:10:52:c5:f8:92:
4f:42:db:f1:a7:99:c6:40:b2:ff:60:9d:ae:70:4f:
be:7e:0e:eb:18:05:19:b7:99:11:e3:03:c4:fe:ae:
e8:91:cb:7a:87:4f:63:94:b8:e2:ee:29:90:28:aa:
fe:95:1f:64:e6:93:11:83:00:63:e1:87:c0:49:10:
8e:be:13:b0:8c:9f:4d:cf:1f:ca:e0:b5:f5:86:ba:
69:ed:63:db:e4:6e:e0:64:fa:2f:b8:ed:00:2f:5e:
8a:04:af:40:bd:5a:37:5d:1b:c1:e7:d0:84:71:0f:
a6:86:be:17:6e:8a:a5:a5:94:0a:c3:4f:9c:b4:ac:
30:de:59:6f:e0:05:37:49:42:e3:6a:4e:8b:98:19:
0f:be:c2:b7:9c:85:f0:1f:62:b3:3e:36:f7:12:83:
84:88:0d:3d:98:8c:37:a1:56:b9:f5:b7:d8:e9:4c:
6f:da:48:af:a5:15:c5:13:a3:51:37:ae:09:a4:0b:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:F4:49:D6:B8:8C:9C:D5:F6:E2:47:BE:58:90:5F:A7:7C:72:23
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/G170Sda4jJzV9uJHvliQX6d8ciM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.246.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bf:4b:7d:63:cc:ae:e8:cd:2e:83:80:66:e2:48:e1:73:95:
42:a2:f2:a0:50:60:f7:f1:f3:72:59:b8:d0:99:4a:0f:59:0a:
02:e8:78:fa:d5:c3:5a:a8:37:14:b7:bd:e1:db:5f:b7:15:3d:
7c:8c:01:f5:cf:2d:95:51:61:30:0a:43:66:af:c5:fe:33:c2:
71:2c:af:7e:e3:e0:e7:71:33:4f:b4:1c:20:a3:62:46:31:d7:
48:10:ef:31:7d:75:1d:42:74:69:c3:1a:e7:98:f3:6e:37:fa:
38:66:50:74:a4:69:da:33:de:9b:bd:7b:fb:31:28:02:22:e0:
77:d6:df:e2:08:9e:5f:6d:c3:a5:36:56:fa:09:03:4a:56:ac:
91:8c:b1:f8:03:f8:1a:a0:2a:8c:a6:ed:2c:5f:3b:9c:1f:ae:
c0:b1:f3:5f:24:c1:07:06:7b:a0:ac:20:d9:32:7c:56:09:92:
dc:6c:f6:28:ca:cf:ec:4f:64:55:95:6c:c4:64:4e:45:7d:8c:
cf:b3:04:ed:4a:c1:1d:2c:1b:14:0a:81:2e:93:0f:4e:47:70:
71:56:1b:f4:fd:9c:0c:14:19:9b:65:6a:4d:ef:4d:3e:42:be:
d4:15:88:98:e3:8b:4b:f1:c1:0f:f1:88:87:a2:7a:95:01:ff:
b8:0f:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org