Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ozk9mC180C_ALYle5T_lXGkYPPI.roa
File: ozk9mC180C_ALYle5T_lXGkYPPI.roa (raw, json)
Hash identifier: NltOrXOP0XzMTZ9fVlu33ZpSI3Ney4JbEoN4t4ff2jg=
Subject key identifier: A3:39:3D:98:2D:7C:D0:2F:C0:2D:89:5E:E5:3F:E5:5C:69:18:3C:F2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 145C2EFB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ozk9mC180C_ALYle5T_lXGkYPPI.roa
Signing time: Tue 29 Mar 2022 00:44:35 +0000
ROA not before: Tue 29 Mar 2022 00:44:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.248.184.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341585659 (0x145c2efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 29 00:44:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3393d982d7cd02fc02d895ee53fe55c69183cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:99:52:b9:a7:53:dd:06:0e:f1:ca:c2:40:
46:af:96:34:8a:24:d5:26:54:2f:df:04:f4:88:a5:
09:f1:f2:93:86:53:43:04:a6:70:3a:06:fc:be:f7:
15:99:6a:a6:2f:42:9c:5e:fe:3f:a5:e5:d7:31:69:
21:fd:56:d5:7c:f7:ed:c5:46:7a:f3:52:ca:6f:d8:
9f:cc:30:73:61:4b:2b:73:81:4a:19:4c:82:34:7e:
86:82:43:ca:45:2f:f2:91:0b:8c:c2:c2:5b:6d:be:
9a:d3:8b:d1:78:0a:d2:72:20:b7:8f:eb:f8:11:77:
6e:d2:89:19:ae:24:fe:cc:dc:d8:1e:25:9b:b6:2c:
b6:71:24:5c:f8:b3:a7:f0:1e:98:a4:5d:52:a4:14:
93:72:83:8f:ad:40:07:6d:97:76:11:31:b1:10:58:
98:dd:98:8d:6c:dc:6e:a3:34:64:2b:a2:17:db:f8:
14:32:14:9e:20:c1:5c:b3:a2:e8:ea:bc:7b:d9:de:
a0:44:57:ed:1d:12:ad:1d:a1:78:7a:36:b7:3b:eb:
c8:2e:41:43:b1:2e:04:6f:81:38:48:73:a6:5e:73:
47:8a:63:ef:fe:c6:3e:fa:98:71:9f:91:17:60:a3:
51:29:f7:c5:1d:a8:f9:59:88:6b:87:84:12:37:1e:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:3D:98:2D:7C:D0:2F:C0:2D:89:5E:E5:3F:E5:5C:69:18:3C:F2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ozk9mC180C_ALYle5T_lXGkYPPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.184.0/23
Signature Algorithm: sha256WithRSAEncryption
94:15:13:ae:0c:23:09:ac:04:0a:45:e4:ae:36:37:a4:a5:9f:
f9:ce:91:14:2f:39:1d:6b:fa:af:01:6e:38:7c:bb:41:2b:96:
11:8c:c6:30:e9:5f:58:59:2e:2e:55:e6:a5:c5:83:e1:da:3e:
dc:58:6c:e8:b5:62:98:d0:62:1d:82:da:8c:d2:d7:58:9a:5d:
2a:b6:d8:59:49:23:d2:09:44:93:3f:88:86:3d:17:f3:5e:0b:
4b:9c:4b:d8:b2:9f:fa:2d:17:05:74:96:99:60:23:9b:7f:9d:
84:24:bb:7c:dd:c9:f3:14:5c:61:34:43:a9:00:00:c0:bf:7f:
05:ec:10:88:08:4e:88:16:66:e0:dc:44:06:48:06:4c:3b:97:
64:df:99:66:92:6e:52:8c:32:51:a2:5e:e2:8e:f5:cd:da:79:
5d:b6:e4:31:c7:74:ba:ae:4c:63:9b:0e:7a:4c:c0:e7:91:ea:
5e:4b:00:39:e9:c1:8e:af:e7:b5:e5:1e:93:c5:61:00:3c:cb:
84:b3:62:63:b7:1b:c9:28:e2:4a:1f:d3:fb:cd:b1:ad:bf:f3:
e4:a4:ef:dd:68:85:87:4c:e1:aa:f9:6f:76:dc:0b:99:39:4f:
1b:3c:5f:a2:6a:29:59:19:d5:a5:6f:af:91:df:b7:a8:d8:c1:
4d:ee:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:25 2023 by rpki-client on console-ams.rpki-client.org