Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/RELrr0msJM5Vy3ehlu4GnVBwkJw.roa
File: RELrr0msJM5Vy3ehlu4GnVBwkJw.roa (raw, json)
Hash identifier: fWhRtINGcl3+1OJrNyXpxuVdCs2d1c2ImmaY22PDlVs=
Subject key identifier: 44:42:EB:AF:49:AC:24:CE:55:CB:77:A1:96:EE:06:9D:50:70:90:9C
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 173ECDCF
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/RELrr0msJM5Vy3ehlu4GnVBwkJw.roa
Signing time: Wed 06 Apr 2022 10:16:57 +0000
ROA not before: Wed 06 Apr 2022 10:16:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211421
IP address blocks: 194.59.170.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389991887 (0x173ecdcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Apr 6 10:16:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4442ebaf49ac24ce55cb77a196ee069d5070909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:54:4a:94:6d:db:13:a6:34:cd:40:db:78:
54:05:5f:a6:e3:e6:73:e4:ac:4c:ad:23:66:e7:30:
01:1f:b5:d1:99:c1:76:4f:4d:06:08:70:f0:5d:1f:
37:64:be:4a:13:06:72:8a:3e:5a:17:ef:4e:b5:5b:
f9:75:1f:3b:74:3c:53:95:3f:5c:89:89:19:c5:2e:
14:4c:0b:12:bb:02:f8:00:f8:bf:1e:bb:cf:fb:8a:
8a:dc:fd:4b:09:2a:16:1f:cf:83:03:68:ae:5f:f0:
13:6a:d4:33:be:c7:2c:e8:47:10:8b:b0:06:96:fe:
10:cf:da:af:3e:bc:87:a1:45:55:03:ea:85:3e:3b:
e7:9f:51:60:b2:50:26:82:4a:54:8d:d3:3d:40:e0:
0f:ed:32:e1:fe:dc:2a:2b:87:3c:28:e4:f3:14:84:
a6:6f:3f:a7:96:9a:c8:ec:a0:18:26:ee:ac:7a:e2:
a6:92:5c:16:64:9a:6b:27:bd:78:9d:13:51:68:e3:
89:9b:c8:b4:72:59:ae:ba:8b:ea:c4:74:71:33:b5:
e5:c3:06:d5:ec:4f:32:26:c9:1a:b5:e1:db:12:47:
ea:ed:52:f3:2c:35:6b:2b:61:cf:a4:22:69:28:d4:
bd:a2:d3:07:4c:52:2a:94:6b:0c:11:19:54:b3:d1:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:42:EB:AF:49:AC:24:CE:55:CB:77:A1:96:EE:06:9D:50:70:90:9C
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/RELrr0msJM5Vy3ehlu4GnVBwkJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.97.0/24
194.59.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c7:81:e4:cb:99:1c:b6:45:46:16:c9:30:0d:1a:6a:4a:b2:
83:ef:5c:7d:fa:74:03:c4:bb:35:e1:60:3f:83:10:f7:f3:5c:
51:4e:fb:74:08:6c:22:c5:e6:a4:6b:1e:42:6d:ba:8b:ae:70:
e0:e4:9f:d8:86:09:a2:bd:3c:c5:7c:d8:57:1c:9c:6e:3d:df:
9f:2c:a3:69:94:80:45:cc:9a:8b:43:b7:0e:0c:94:91:ec:d9:
4b:2c:14:a3:e8:7d:0d:e7:d0:b4:00:3f:52:0e:f9:e2:04:51:
f0:ff:c0:0b:11:1d:14:bf:46:c1:c9:0d:5d:65:b9:ba:39:77:
da:74:f8:89:82:94:66:9c:79:22:db:d1:7c:4e:c0:ab:35:0d:
1f:3f:8b:e7:ea:03:95:80:3c:a4:12:72:cf:be:3d:6e:7a:c2:
35:2e:0b:a1:90:56:95:dc:f3:f3:1a:59:06:4a:dd:e0:85:8f:
33:ad:c5:39:fd:ee:98:4d:ff:8a:8d:54:80:25:e8:f0:a9:7c:
68:6c:f3:74:74:7f:e0:ae:92:66:87:f4:4d:c3:2e:12:29:0c:
d5:fd:61:98:d7:97:5b:85:52:c4:0b:25:f3:5b:49:44:b3:51:
db:53:76:1a:cc:8e:6c:da:90:19:d3:54:d9:1e:8e:cc:54:8d:
5c:73:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org