Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/1lg7qePGNSbnca6J61RmYETCKGE.roa
File: 1lg7qePGNSbnca6J61RmYETCKGE.roa (raw, json)
Hash identifier: ZKa5rfY9e8nW6TqG7woAwNMNTWbTNMl2wgrdsKQX9VI=
Subject key identifier: D6:58:3B:A9:E3:C6:35:26:E7:71:AE:89:EB:54:66:60:44:C2:28:61
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 0215AB8C
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/1lg7qePGNSbnca6J61RmYETCKGE.roa
Signing time: Sun 16 Jan 2022 10:41:15 +0000
ROA not before: Sun 16 Jan 2022 10:41:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202527
IP address blocks: 185.180.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34974604 (0x215ab8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 16 10:41:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6583ba9e3c63526e771ae89eb54666044c22861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:54:af:14:35:08:b4:a3:75:c8:90:d4:ae:
1b:45:a7:60:cc:44:cd:63:03:0f:96:fe:ea:da:b7:
ee:05:84:1d:55:e4:c7:b8:d5:df:4c:1d:7c:b6:fe:
a2:71:c0:63:ee:c6:e9:2e:2d:70:15:74:5f:e2:f0:
c1:a4:b7:63:44:3f:0d:b0:5f:77:a3:4b:58:64:2f:
7b:d3:8d:3d:82:83:be:45:9a:8d:e5:1c:86:97:1b:
c3:6d:d5:14:e0:e7:fe:cb:e4:79:f0:1e:6c:ed:cb:
0e:d8:ad:ce:a1:cc:9e:7d:12:78:37:c4:3c:6a:77:
ce:91:6c:a7:57:68:bc:90:95:fc:60:76:9c:73:2d:
92:3b:08:37:01:73:da:1b:75:e6:a0:1e:fc:c9:01:
73:aa:83:0d:64:89:ae:f5:d9:6d:6b:6c:7e:45:50:
8a:7f:f1:78:84:36:ef:32:b3:65:0c:3a:9f:05:f5:
cb:49:dc:11:40:20:93:ac:14:77:35:7e:e1:f6:f5:
18:ab:bf:b8:7b:23:b9:25:86:ea:b2:dd:6d:3f:97:
5c:27:c6:94:d0:38:6a:b4:12:72:da:25:6a:85:63:
30:e7:a0:55:6f:d1:7f:d4:9a:88:1c:4a:eb:a9:b4:
08:33:1e:1d:3b:82:5e:3f:3c:2f:f8:44:02:da:3c:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:3B:A9:E3:C6:35:26:E7:71:AE:89:EB:54:66:60:44:C2:28:61
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/1lg7qePGNSbnca6J61RmYETCKGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2e:b1:4e:bd:ca:84:2a:68:c0:68:02:af:a3:e0:fc:a6:21:
c7:7f:f0:12:53:60:8b:c2:62:13:78:1e:e1:ca:87:80:95:d7:
58:16:18:1f:73:bd:e7:0a:83:bc:27:a1:f8:8b:dd:c2:4d:cc:
a3:5e:87:92:37:50:38:ce:14:5e:01:a8:f6:b9:01:93:06:c1:
94:85:5d:fd:d6:a0:33:ae:1f:f3:e0:5a:97:f2:e5:bb:5c:36:
c7:6a:0b:be:43:ce:35:40:97:9c:65:0f:4d:34:4e:e0:43:99:
1a:40:bd:90:c2:f2:1a:05:9b:31:6d:ff:8b:98:fd:51:90:a6:
d5:35:77:70:e4:04:be:6f:16:03:82:14:50:72:d9:49:1c:a2:
0b:8a:95:c5:79:b5:fd:92:8c:b4:0a:47:84:17:f6:c8:a5:53:
36:69:58:98:59:c7:8c:76:d4:83:45:a2:92:7d:4e:ce:5c:1b:
4b:ff:09:e9:dc:04:da:53:65:e2:10:b6:12:43:ef:21:15:46:
fc:04:99:97:bb:0c:d7:37:8b:33:22:27:4a:5f:aa:d1:f2:da:
6d:b7:fd:b2:f2:a5:29:54:9a:29:80:45:39:5d:0d:14:71:b4:
60:2a:e1:df:e2:16:a7:b3:e8:d4:9d:33:15:47:11:68:e3:5a:
65:13:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org