Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/P76hwfQulP_g2xcjgKviMhIakKo.roa
File: P76hwfQulP_g2xcjgKviMhIakKo.roa (raw, json)
Hash identifier: vMujqeXl73JQ6ZGnCQDImeopi0knyo2jg4zayPgmHsk=
Subject key identifier: 3F:BE:A1:C1:F4:2E:94:FF:E0:DB:17:23:80:AB:E2:32:12:1A:90:AA
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01842E5CE312A54C2A907857E39F53E168D9
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/P76hwfQulP_g2xcjgKviMhIakKo.roa
Signing time: Mon 31 Oct 2022 14:05:49 +0000
ROA not before: Mon 31 Oct 2022 14:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.114.144.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:5c:e3:12:a5:4c:2a:90:78:57:e3:9f:53:e1:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 31 14:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fbea1c1f42e94ffe0db172380abe232121a90aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:11:d8:72:2d:0e:4e:30:e9:a3:0d:6f:72:
1f:85:b8:ae:fa:08:5d:bf:ab:87:91:cd:36:4a:93:
ba:e2:68:3e:cf:b1:65:90:84:30:46:3e:65:41:f1:
4a:ea:49:ff:66:58:e9:0c:ea:90:76:a1:61:fc:18:
22:6c:b2:24:a4:41:4b:31:70:76:06:b2:43:be:c4:
ed:c1:19:ab:5f:43:2a:0f:9d:72:5c:9e:2e:1f:a5:
39:1a:d4:94:51:c1:53:de:11:a4:51:e3:30:45:af:
99:cf:6e:c1:85:d9:c9:39:b3:20:e9:74:f3:bd:5f:
aa:f0:5b:3f:c6:f2:63:d4:7c:18:ff:f7:fd:a6:18:
69:a5:1c:5c:52:0c:66:e2:d0:e1:32:34:70:2b:94:
3c:b6:4a:65:4a:7e:e3:0a:ef:e5:62:19:19:6c:bf:
6b:9b:51:39:fa:85:6c:0c:4a:7a:32:f4:b3:99:3d:
71:74:9a:b0:7f:f7:e3:10:16:bc:5d:68:0c:c5:93:
0e:f7:e9:59:6a:19:12:db:48:ea:f8:91:fd:4f:b4:
72:cb:f0:aa:21:e7:75:b4:c5:0c:54:71:46:78:86:
c6:ea:85:03:5e:de:1c:9c:40:ab:8e:b6:54:d3:99:
e2:76:bf:32:fa:a2:f8:45:af:63:26:9a:2d:ac:26:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BE:A1:C1:F4:2E:94:FF:E0:DB:17:23:80:AB:E2:32:12:1A:90:AA
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/P76hwfQulP_g2xcjgKviMhIakKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.144.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d4:55:0d:a2:e4:95:95:f5:2e:03:35:1a:a7:4c:0e:56:47:
6a:c8:26:45:4f:13:f5:af:5f:82:58:5f:b6:7e:54:0f:30:4c:
e3:f3:0d:f7:80:ef:17:9f:77:a1:58:c2:d0:dd:57:55:bb:8c:
99:98:bd:5d:f1:2b:d5:b2:4a:ba:f0:99:f8:34:0e:91:4e:4a:
f3:b8:ae:82:20:59:f3:b3:e4:45:0c:d6:ba:08:8d:54:d4:90:
f4:0f:c2:4a:ab:e5:76:c8:d7:18:dd:58:42:cf:bc:e9:15:06:
b6:a4:9f:e7:38:53:a5:5d:26:78:ba:ac:84:cb:08:dd:b1:04:
35:06:34:43:96:38:68:fc:04:30:0b:2e:8d:f7:c5:6d:69:9f:
7e:f2:11:72:79:05:bf:5a:8d:f9:81:51:e3:5a:03:92:98:4e:
e0:d0:d8:ef:2b:9a:7a:d1:47:0d:15:57:05:b3:8a:f6:25:ab:
a1:24:21:d8:89:26:42:69:35:2d:f7:60:b3:02:8e:4b:c9:de:
cb:ac:3b:8e:20:e7:0e:3f:9b:61:76:87:ab:36:a2:b6:7a:81:
df:f1:04:27:b9:c6:fb:c0:b7:14:1a:9f:9a:d9:64:df:b7:64:
9e:68:88:b4:aa:a7:93:7d:a9:33:b6:d7:d0:64:b2:0f:4a:5b:
c3:fb:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org