Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/9mmHlClYffBO_z2_Tj7zqMdrz5M.roa
File: 9mmHlClYffBO_z2_Tj7zqMdrz5M.roa (raw, json)
Hash identifier: WvOFAtAxNCcVedd271ar4vJKWAVzfTAkcrpKFdUuNUM=
Subject key identifier: F6:69:87:94:29:58:7D:F0:4E:FF:3D:BF:4E:3E:F3:A8:C7:6B:CF:93
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 07CD37C8
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/9mmHlClYffBO_z2_Tj7zqMdrz5M.roa
Signing time: Sat 01 Jan 2022 13:06:59 +0000
ROA not before: Sat 01 Jan 2022 13:06:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47123
IP address blocks: 185.141.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130889672 (0x7cd37c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Jan 1 13:06:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f669879429587df04eff3dbf4e3ef3a8c76bcf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:d4:a1:00:3b:4b:f0:5e:a6:59:97:d6:7c:
98:d7:2b:c3:05:7d:89:d7:70:bb:5a:ae:5e:a2:5b:
e2:05:14:17:4d:2e:35:be:ea:16:a2:46:c0:8b:c3:
d5:a2:82:51:c6:67:fc:12:ba:43:91:ad:a5:17:a1:
f3:4f:d6:49:c0:3d:75:48:45:e7:d6:6b:4a:79:9e:
af:28:90:e2:2c:d9:21:c1:f9:98:c8:d1:ba:1c:50:
6b:69:42:7f:1f:18:65:de:33:ec:d4:a5:d4:0b:c5:
91:a8:91:69:e0:5a:b9:27:c9:8e:a0:9c:75:45:de:
26:05:14:57:3a:10:74:9e:ae:52:90:3d:70:8f:7a:
d3:f0:1d:a4:b4:08:0e:e9:b5:8b:2c:09:0a:93:14:
c1:5f:01:6a:fe:76:dc:c9:b7:b7:da:cb:eb:e1:ad:
8c:96:5b:45:a5:70:70:bd:0c:19:5a:3f:e5:25:65:
ff:73:0d:63:1c:00:1a:12:41:79:28:b1:31:b3:18:
e6:da:08:70:35:48:65:6f:2d:12:30:0a:3a:8e:98:
46:68:8a:85:7d:e8:a2:47:01:95:47:aa:86:38:ef:
6d:86:73:e3:a1:95:2c:87:c9:5d:5f:e8:a6:38:41:
64:a6:66:53:d1:99:0f:c4:26:90:31:48:80:6a:62:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:87:94:29:58:7D:F0:4E:FF:3D:BF:4E:3E:F3:A8:C7:6B:CF:93
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/9mmHlClYffBO_z2_Tj7zqMdrz5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b2:01:61:7d:35:1d:84:54:cf:fe:b7:6d:40:4f:6d:eb:26:
94:30:35:96:47:8a:15:67:7a:52:ac:e6:4f:3e:58:9e:58:35:
4b:8e:bf:d1:10:e9:f0:e1:44:9a:00:98:d5:54:5e:bc:5f:bd:
65:20:10:b9:5d:03:04:d6:96:69:4a:9b:9e:bb:af:78:87:1d:
31:00:f4:87:0b:f5:be:3e:fa:5c:09:77:7d:eb:8f:df:ac:b4:
bb:a8:f7:56:23:79:41:73:52:af:22:0a:8e:25:5b:da:5f:e5:
30:66:f4:07:25:64:79:2f:f3:9a:5d:57:8a:70:05:29:c5:7b:
65:33:70:d6:6f:64:69:07:55:52:86:90:09:d3:02:9c:fa:de:
0b:d8:c6:ab:27:e1:fa:35:8a:2f:36:5f:5a:96:0d:44:64:c4:
b6:b2:88:52:1f:e8:46:fc:71:a1:88:78:9e:17:67:c0:4d:1d:
89:b7:63:d6:7f:aa:50:5c:0f:50:0e:2a:31:98:30:48:8d:33:
35:23:50:2f:10:c7:8d:87:5f:31:4a:e2:ab:b8:7a:90:28:07:
c4:87:69:62:64:c0:99:ca:d8:23:55:2c:40:c4:37:fa:ef:e2:
56:45:81:be:09:6f:3e:b9:e9:b8:a5:41:3b:7b:ca:aa:01:64:
28:b3:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org