Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xJnN7jWsVV6J7qQKLSaCsewypyY.roa
File: xJnN7jWsVV6J7qQKLSaCsewypyY.roa (raw, json)
Hash identifier: SZFzKJsbdg85DwyEpqNcaGETiRreRb/o4wunliL2ndI=
Subject key identifier: C4:99:CD:EE:35:AC:55:5E:89:EE:A4:0A:2D:26:82:B1:EC:32:A7:26
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 018354E97D6482D358968451D1DBE7A8A8FF
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xJnN7jWsVV6J7qQKLSaCsewypyY.roa
Signing time: Mon 19 Sep 2022 08:42:11 +0000
ROA not before: Mon 19 Sep 2022 08:42:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25504
IP address blocks: 185.90.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:e9:7d:64:82:d3:58:96:84:51:d1:db:e7:a8:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Sep 19 08:42:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c499cdee35ac555e89eea40a2d2682b1ec32a726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:de:0f:7e:f3:76:aa:15:f9:a1:8f:19:19:
a3:06:85:e1:9b:36:bb:23:0f:30:02:7d:c4:41:1a:
a6:89:f9:b7:0d:0b:91:d8:ba:9d:a3:47:c7:1e:23:
da:6a:05:87:30:a0:cb:39:30:83:30:ce:3f:f9:ea:
5a:94:76:73:d5:5e:0b:a7:e8:ca:17:c3:7b:97:fe:
dd:ac:71:3b:78:df:00:07:0b:19:1e:bb:a3:48:bb:
36:b3:76:1d:65:66:4e:93:d3:35:73:53:e0:b0:0c:
29:44:8f:18:5c:66:86:d9:3c:d6:27:14:76:aa:df:
94:16:d1:c7:1d:e0:92:20:55:c2:3e:ef:f5:2b:75:
62:40:e3:46:3a:c7:5b:ed:98:6f:a8:3e:99:86:9c:
7b:ed:27:4a:7b:2c:36:a7:c0:3b:2d:35:c6:4d:72:
c4:65:47:90:b9:5d:a1:59:20:28:f3:26:c0:2f:81:
de:c2:a1:ee:cf:85:0a:89:6a:d0:6e:9d:5a:7f:51:
ef:28:10:9e:fa:2f:3d:3c:78:ea:43:b4:12:e8:1f:
6b:b1:b4:fc:6d:c1:6c:2c:11:69:02:67:78:ee:d3:
32:26:91:d8:08:64:9f:f7:cf:46:e5:d5:51:a2:08:
42:f3:53:10:7e:97:7e:e7:f8:ef:4c:dc:86:dd:ad:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:99:CD:EE:35:AC:55:5E:89:EE:A4:0A:2D:26:82:B1:EC:32:A7:26
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/xJnN7jWsVV6J7qQKLSaCsewypyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:51:73:06:1d:a5:ea:9e:a5:a9:59:c7:e1:9d:a7:76:d6:33:
46:05:8b:43:38:35:1b:2f:a8:de:15:65:98:b3:d9:7a:a0:94:
67:25:08:2e:54:37:81:df:23:25:b6:63:40:b3:d3:9e:0c:a2:
35:93:f1:e8:13:0c:03:a9:f5:11:11:ff:f2:08:2f:8a:9e:de:
9d:59:31:68:72:df:ab:f0:79:f4:89:fa:60:04:04:6b:0e:51:
3a:93:77:3f:5c:ba:03:39:e2:3a:7a:1e:af:32:e7:6b:65:19:
00:f5:2f:9d:7c:d7:e9:77:68:a5:25:10:76:0f:b6:f1:ab:f1:
bc:10:d1:7d:95:8e:01:9a:13:9e:d0:9f:2e:54:d1:7c:1c:cb:
f4:8d:d3:db:77:f4:05:0a:76:d5:3c:73:58:b6:3b:0d:89:ab:
5a:21:07:af:a0:a3:0b:c0:8a:a8:b6:45:f3:c2:0b:c5:a2:ee:
c5:0b:7a:5d:59:0d:80:9c:ef:e1:37:bd:ed:a7:64:24:2b:d2:
db:a3:0b:95:0c:b2:8e:67:8a:f9:a9:7d:4a:78:7e:5a:f8:e2:
35:4a:00:e4:2b:58:2c:c7:16:7e:61:a7:02:37:a4:85:77:5b:
a4:a3:7f:9e:d8:09:e3:a4:cc:93:e6:6f:4c:9c:3a:34:63:1c:
71:2b:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:45 2024 by rpki-client on console-ams.rpki-client.org