Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/dcHVVEZmMlZ0ETWukI6OqteGRfI.roa
File: dcHVVEZmMlZ0ETWukI6OqteGRfI.roa (raw, json)
Hash identifier: o5rId0DZoIeNeTI1jRbcBOI99ap64MysqgCO4mddV4Q=
Subject key identifier: 75:C1:D5:54:46:66:32:56:74:11:35:AE:90:8E:8E:AA:D7:86:45:F2
Certificate issuer: /CN=922da8e9dc55505612080b379d1ee49068f0ffcd
Certificate serial: 01A05682
Authority key identifier: 92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki2o6dxVUFYSCAs3nR7kkGjw_80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/dcHVVEZmMlZ0ETWukI6OqteGRfI.roa
Signing time: Sat 01 Jan 2022 14:07:10 +0000
ROA not before: Sat 01 Jan 2022 14:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.76.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27285122 (0x1a05682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922da8e9dc55505612080b379d1ee49068f0ffcd
Validity
Not Before: Jan 1 14:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75c1d55446663256741135ae908e8eaad78645f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:4b:07:2e:94:70:e6:44:0c:29:01:f6:58:
9e:30:ad:25:b7:95:fd:b4:e8:01:74:f0:c1:e8:6b:
94:db:81:71:12:e3:61:88:52:d4:2e:f8:c7:e6:5e:
8b:a1:1e:b9:0f:c5:d4:06:8e:85:bb:08:9e:43:49:
22:57:89:c9:06:7c:2c:fb:31:29:d6:13:2c:c6:1c:
06:25:bb:c7:3e:63:d3:7c:35:67:1c:b7:58:d1:5f:
2e:87:a7:90:30:ca:d7:7a:6f:d6:78:ad:04:e4:98:
f9:2b:2f:84:b0:4a:b5:41:f9:ce:48:b6:93:4f:a5:
a8:63:fb:dd:ed:03:04:00:a9:17:0d:48:9f:01:1c:
d4:a2:64:1a:21:d9:a6:10:b9:2f:55:73:dc:fc:05:
19:3b:96:f5:85:c4:f4:20:54:a3:aa:dc:95:b8:8d:
5e:12:25:36:7d:69:94:af:26:b0:85:36:99:d6:0f:
59:c6:0f:f6:d9:36:97:ea:d9:23:93:ea:f0:de:ea:
2b:d5:cb:c5:80:e2:12:58:06:95:47:11:8e:32:2b:
a8:0b:cc:d3:d7:5e:02:df:8b:36:50:27:01:79:19:
48:54:96:17:bc:32:14:42:c9:1a:75:e7:18:7c:30:
c7:c2:9d:31:81:cd:5d:66:0c:6b:01:3d:a3:af:1a:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:D5:54:46:66:32:56:74:11:35:AE:90:8E:8E:AA:D7:86:45:F2
X509v3 Authority Key Identifier:
keyid:92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki2o6dxVUFYSCAs3nR7kkGjw_80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/dcHVVEZmMlZ0ETWukI6OqteGRfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/ki2o6dxVUFYSCAs3nR7kkGjw_80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:76:b1:1b:86:43:70:e5:8b:74:be:30:4e:f6:5f:a2:7d:2f:
28:37:8d:eb:2e:0a:a4:59:76:e9:ec:ac:b8:ef:21:6d:56:d9:
e1:cc:2f:46:2c:74:2a:b8:eb:f1:6d:f9:de:78:a9:77:65:02:
8e:1a:a9:6b:81:7c:23:dd:c8:37:83:e9:a9:7d:1b:48:8f:d2:
81:8e:31:6f:41:11:cd:da:8d:59:1e:16:43:07:27:2a:b4:69:
5a:6a:2f:d6:53:bf:5f:6f:bc:bc:b7:50:61:45:3d:37:ee:f6:
8e:63:1b:e9:21:cd:1a:e6:7b:1b:be:6e:e0:c1:35:a0:79:63:
85:1a:1e:bb:e3:22:76:f1:11:4a:11:1e:0a:d7:d9:ff:7a:72:
ea:0f:3a:4b:85:42:01:58:bb:86:a5:de:60:dc:6f:19:33:54:
00:1f:0c:55:ba:34:98:92:d2:5f:75:27:32:0c:f1:ae:86:c4:
79:7e:6a:f5:80:5c:ae:94:c1:27:19:3f:4c:10:88:e3:6a:f5:
d7:66:ae:11:03:4c:ba:d6:b8:51:c8:a5:76:ec:a7:07:ac:64:
f7:cf:e7:92:5e:db:e5:fc:74:53:02:da:b7:4f:5a:67:f2:e5:
be:56:b1:d8:98:cb:5a:f6:91:00:b8:19:79:6c:b9:26:c2:53:
cb:ca:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org