Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/xPl9CWs1qebdZCRW0Rt9wWPg0bw.roa
File: xPl9CWs1qebdZCRW0Rt9wWPg0bw.roa (raw, json)
Hash identifier: Lv8y+rNT7CPqkNZLpCjGg27OtTm8pX7K/pg2SzuyseM=
Subject key identifier: C4:F9:7D:09:6B:35:A9:E6:DD:64:24:56:D1:1B:7D:C1:63:E0:D1:BC
Certificate issuer: /CN=304d706d759b0213114fb319cb593315d7e3409b
Certificate serial: 0A906F39
Authority key identifier: 30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/xPl9CWs1qebdZCRW0Rt9wWPg0bw.roa
Signing time: Sat 01 Jan 2022 14:05:33 +0000
ROA not before: Sat 01 Jan 2022 14:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12552
IP address blocks: 185.236.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177237817 (0xa906f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304d706d759b0213114fb319cb593315d7e3409b
Validity
Not Before: Jan 1 14:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4f97d096b35a9e6dd642456d11b7dc163e0d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:15:f7:70:ed:d3:d4:10:47:3a:c0:fd:02:
93:a0:a0:9a:c3:26:fe:ee:2b:74:1e:b5:d1:31:f4:
32:f9:3b:5e:a4:84:8d:bc:c2:55:1a:67:22:9b:7c:
50:80:8e:eb:61:ac:27:77:da:fe:2b:47:2a:1c:ae:
cb:f1:94:b2:e3:e7:47:c3:b0:6b:0c:f5:f5:a5:ea:
31:c8:fb:b6:29:28:ac:3f:b6:28:47:68:1b:5d:f4:
e9:3e:35:f3:6b:50:17:ec:0f:b3:8c:fd:68:c7:d3:
04:15:7b:b5:a1:40:60:f1:33:74:31:23:fa:df:95:
c6:fb:f9:b0:49:59:83:37:b7:5a:48:84:81:57:48:
d7:0e:19:cc:f9:1a:08:4e:57:b5:94:66:c7:23:d8:
57:9f:38:83:7c:72:1c:fa:d0:84:d6:93:c7:b1:a3:
9a:0c:18:f8:8b:67:77:b7:dc:51:e1:46:70:69:41:
93:08:40:9f:88:68:c4:0f:c0:74:a6:71:8a:d5:21:
e5:b4:40:cd:61:18:81:28:85:36:9e:c4:28:e1:64:
ee:4a:bd:0d:bf:40:90:4b:50:71:60:99:7e:c2:0a:
0b:c9:2e:30:59:e7:fc:72:a9:cc:22:3b:2b:18:6f:
97:b4:c9:4d:2c:23:1a:04:7f:d3:48:9f:eb:0b:83:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:7D:09:6B:35:A9:E6:DD:64:24:56:D1:1B:7D:C1:63:E0:D1:BC
X509v3 Authority Key Identifier:
keyid:30:4D:70:6D:75:9B:02:13:11:4F:B3:19:CB:59:33:15:D7:E3:40:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME1wbXWbAhMRT7MZy1kzFdfjQJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/xPl9CWs1qebdZCRW0Rt9wWPg0bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4bd00a-83ce-4134-b592-7243d9347143/1/ME1wbXWbAhMRT7MZy1kzFdfjQJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.40.0/24
Signature Algorithm: sha256WithRSAEncryption
11:24:22:cd:70:44:39:3e:a8:f6:ff:f0:b1:aa:d8:5c:f8:91:
ce:24:e6:97:41:db:cf:ef:b1:e5:30:3d:e2:3c:31:3f:16:4e:
bb:20:5b:bc:3a:a1:4c:83:64:19:54:dd:98:af:e5:4c:a3:bd:
98:df:bf:b6:85:be:51:9b:d5:bd:f9:ed:26:eb:2b:e4:4f:2b:
6a:e5:b8:7a:d2:d3:06:82:e6:9a:cb:54:75:28:4c:9a:a9:1c:
0b:d6:60:4b:19:68:26:6b:0f:dc:be:ac:62:8b:a8:bb:aa:f0:
6a:4b:62:bd:6d:0d:0f:fa:b2:6f:1f:e1:70:e2:cc:b6:25:94:
31:ce:77:29:06:21:de:60:c5:a7:52:6e:eb:a8:6b:d1:3a:bb:
ba:39:ab:d6:c1:15:88:21:f9:7c:3f:4e:01:64:ec:bd:01:62:
2f:06:2a:8b:30:dc:b7:b6:dc:eb:60:e3:e5:02:de:82:ac:04:
6c:9f:1e:77:01:c2:e6:7d:9e:8a:ea:c8:58:a2:41:2a:86:fc:
9b:d8:30:78:80:b1:ba:35:06:7c:ed:cb:0f:c7:ee:0b:ae:63:
32:04:22:fd:07:2b:8d:83:0d:3a:b7:3b:49:14:fb:a8:a7:40:
13:a7:23:5e:9e:41:5e:99:e7:ad:51:d8:23:dd:b1:2c:67:3f:
8d:20:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org