Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/7uCBT0S5gQZ9UgejC_Qf6Ck9vKs.roa
File: 7uCBT0S5gQZ9UgejC_Qf6Ck9vKs.roa (raw, json)
Hash identifier: Tjoe6d3fPIxiqr4xYVfM1kMCph+Jwxzr3cRkKVKdIww=
Subject key identifier: EE:E0:81:4F:44:B9:81:06:7D:52:07:A3:0B:F4:1F:E8:29:3D:BC:AB
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 01825853B0B376EA1CECFBC601C3EFBA47D8
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/7uCBT0S5gQZ9UgejC_Qf6Ck9vKs.roa
Signing time: Mon 01 Aug 2022 07:34:15 +0000
ROA not before: Mon 01 Aug 2022 07:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31037
IP address blocks: 185.101.16.0/24 maxlen: 24
185.101.16.0/22 maxlen: 22
185.101.17.0/24 maxlen: 24
185.101.19.0/24 maxlen: 24
185.101.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:53:b0:b3:76:ea:1c:ec:fb:c6:01:c3:ef:ba:47:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Aug 1 07:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eee0814f44b981067d5207a30bf41fe8293dbcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:57:4d:21:74:62:43:fa:4a:d1:03:e7:1f:
16:e7:e2:bf:84:6e:0e:b7:ce:49:cb:b7:e4:01:84:
33:7e:48:b0:a2:59:a5:e6:5a:e2:b9:27:e0:76:4c:
ed:a5:1b:4a:6d:54:81:ce:7b:9a:83:cf:6b:66:b8:
da:3d:7a:56:b3:e7:0c:9d:fa:9c:0e:49:5f:1f:ad:
8b:ae:60:8f:70:25:bd:3f:c6:84:89:b3:af:f1:21:
ed:fd:3e:df:9a:ca:36:8a:06:32:59:be:42:81:86:
6d:4e:18:f6:34:2f:47:d0:10:f4:fa:f0:90:7a:30:
f6:31:57:50:b8:57:ab:15:9b:cb:e8:7b:3d:5d:3b:
f8:6a:e0:61:76:d5:22:2e:c3:a9:03:0b:c5:31:f6:
33:f3:02:0c:37:b7:ae:f0:7c:7d:5e:f8:3c:99:4a:
cb:63:00:bb:05:25:06:94:26:08:56:47:b5:24:b0:
ad:25:6e:6c:cd:63:64:3b:fc:e6:fe:7f:60:7d:8d:
02:54:38:9d:ce:eb:e6:da:92:69:40:a1:24:30:fb:
8d:f0:98:cc:1c:8f:51:d5:85:9a:2f:5a:b9:8c:7e:
f8:a5:6b:9d:dd:9c:ae:24:48:66:82:d6:cd:2e:72:
7f:52:59:f5:6f:e4:11:ad:b8:c0:9e:84:be:5e:44:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:81:4F:44:B9:81:06:7D:52:07:A3:0B:F4:1F:E8:29:3D:BC:AB
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/7uCBT0S5gQZ9UgejC_Qf6Ck9vKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.16.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:ae:65:bc:3a:8b:51:1f:6c:10:93:22:2c:e6:cd:71:70:af:
76:f9:a0:f3:09:91:5b:c8:9b:a8:ed:2a:5d:2e:3a:7c:41:f5:
6e:bc:49:4a:e2:1c:ff:1e:97:2f:af:23:be:7a:d0:1e:b5:92:
bf:e2:d0:36:d0:ab:39:f5:c3:7b:a4:b3:eb:23:18:fc:a2:f8:
8a:68:48:a7:c6:fb:39:4c:f1:1a:ed:98:cb:08:7f:99:2e:e9:
e6:88:32:7e:cd:01:4a:bd:b0:db:2b:6d:36:e4:93:de:c2:13:
c9:b9:50:16:0c:aa:ff:79:53:08:21:b4:42:30:91:ec:8a:34:
b7:63:ef:f7:e3:68:03:72:3f:cd:6a:0c:84:07:8e:ee:46:de:
d4:b3:91:45:8a:e8:00:5a:4c:68:59:40:3d:b5:6f:be:90:dc:
30:be:be:23:c8:c5:a7:dc:87:63:e4:6c:33:55:fc:05:83:6b:
ab:84:05:84:14:49:8b:d9:3b:39:25:1e:a4:bf:00:77:22:fe:
89:de:89:48:cf:c9:25:ff:f2:22:1e:5f:c5:1b:4f:2a:00:cc:
14:2c:38:bd:08:a2:d6:cf:ba:df:32:eb:b1:83:f1:29:f6:f7:
c0:a6:ef:19:7a:b3:f4:bc:24:86:02:a7:ae:e0:35:b2:16:16:
f7:30:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org