Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cZijzXsu9OFvtup06cbeYXNFSxM.roa
File: cZijzXsu9OFvtup06cbeYXNFSxM.roa (raw, json)
Hash identifier: AejnDPg1SaQoplEMFvMXb3LMla1xAxjlZtX3fDYUr48=
Subject key identifier: 71:98:A3:CD:7B:2E:F4:E1:6F:B6:EA:74:E9:C6:DE:61:73:45:4B:13
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1333BCBD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cZijzXsu9OFvtup06cbeYXNFSxM.roa
Signing time: Sat 01 Jan 2022 04:03:02 +0000
ROA not before: Sat 01 Jan 2022 04:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60021
IP address blocks: 185.148.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322157757 (0x1333bcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7198a3cd7b2ef4e16fb6ea74e9c6de6173454b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:fc:f6:7a:a2:16:79:7f:d3:27:67:a7:0b:
c2:3b:c1:9f:6e:86:88:c5:1c:d9:58:b7:2f:72:4f:
fc:de:6e:e3:3e:d8:8d:75:77:a4:7d:49:3d:c3:58:
41:5b:20:f5:61:55:62:36:03:d6:ab:23:33:a4:fe:
7e:5f:fc:20:c2:74:3f:c3:ea:52:d8:82:84:a9:bb:
c8:7e:4c:a4:86:9e:1b:f3:9b:b8:b7:4b:e1:38:5c:
49:d8:b1:e7:57:b6:97:1e:e7:14:7d:3c:56:d5:77:
d9:b3:27:8f:be:8d:d0:86:de:05:41:9c:42:3d:0d:
40:85:0e:6f:34:e0:e9:7a:2e:de:21:61:38:a4:b8:
df:5b:fa:5e:50:0d:79:dc:75:c4:94:91:c3:c3:19:
6e:a2:18:8d:7d:e8:11:42:d8:8f:72:22:1a:0b:07:
f5:db:a7:1b:9e:68:20:6a:a2:66:3e:0e:3e:e5:79:
6a:67:1a:2a:fb:fa:b2:f8:73:17:e9:a9:fb:95:37:
f6:2e:8c:22:ff:2b:93:aa:34:77:81:8b:17:d4:0b:
f1:2c:5a:e5:bc:c2:80:6b:3a:8c:ef:b6:dc:d4:3c:
cc:61:9e:0a:48:3f:fd:10:cd:26:5e:1a:04:6d:78:
25:40:5e:9d:2e:ac:74:b2:be:7b:18:cf:4b:e5:71:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:98:A3:CD:7B:2E:F4:E1:6F:B6:EA:74:E9:C6:DE:61:73:45:4B:13
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cZijzXsu9OFvtup06cbeYXNFSxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:f6:06:7e:dd:26:d8:13:c6:7c:02:05:cb:60:2c:9f:9b:12:
3c:40:0a:91:02:9f:da:e9:5b:52:2b:8b:21:25:5e:6d:86:f5:
39:2a:b4:c9:0e:65:bc:f3:d5:fc:ec:ed:aa:61:c3:98:f1:a1:
52:13:d2:f5:4d:06:82:2a:cd:47:2d:de:fb:4f:20:92:3e:ed:
c6:8c:ad:cf:9b:ab:90:e9:72:5b:d2:cc:c9:88:92:2e:b6:3d:
5f:b6:69:46:c6:0f:b4:d4:8b:f5:06:3f:2d:4e:3d:e3:0a:9e:
18:c4:65:6a:77:50:d6:af:90:b4:97:44:3e:f0:90:f9:9b:68:
ca:38:2c:89:96:a2:c6:dd:84:78:b1:47:4b:05:15:d8:a7:11:
4f:47:6b:98:8c:a6:f6:20:9b:e8:df:af:d9:b0:fe:79:cc:b9:
42:d0:be:e2:02:13:ef:25:9a:91:96:52:c7:5e:8c:c7:f7:c0:
82:33:c1:78:d0:ab:a4:38:d4:5e:a6:a3:07:7a:f5:99:a0:09:
64:34:cf:39:8f:31:f7:70:fd:dd:17:1a:16:1f:53:89:60:30:
c9:e9:7a:20:1e:f5:0a:a9:ab:18:11:82:61:41:6f:3c:ca:64:
c7:4b:7d:c7:f5:3e:90:8c:37:55:ed:e9:a5:39:24:fd:cf:a3:
c1:6a:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org