Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rkjCtVA37O1wxbDrsKCHBlI3e5Q.roa
File: rkjCtVA37O1wxbDrsKCHBlI3e5Q.roa (raw, json)
Hash identifier: b8EmYQwcCNL84zLp9O2Eg26b11J8l3Olsz/Wu1D1SgU=
Subject key identifier: AE:48:C2:B5:50:37:EC:ED:70:C5:B0:EB:B0:A0:87:06:52:37:7B:94
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DE853E0
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rkjCtVA37O1wxbDrsKCHBlI3e5Q.roa
Signing time: Sat 01 Jan 2022 10:54:11 +0000
ROA not before: Sat 01 Jan 2022 10:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 185.170.68.0/22 maxlen: 24
185.171.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233329632 (0xde853e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 10:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae48c2b55037eced70c5b0ebb0a0870652377b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:b7:8d:14:45:86:96:a6:70:bb:d4:96:54:
39:52:62:42:5b:7a:c0:89:63:54:5d:5e:83:c4:59:
81:d5:4a:b0:de:27:48:f6:34:32:75:16:8a:2c:65:
69:41:5f:dc:d6:74:31:b0:5f:e8:f8:3f:16:bc:47:
29:91:2b:b2:d1:93:fb:46:9f:8f:82:ea:4d:b7:08:
5b:64:e3:fe:84:11:8f:c1:fc:71:a3:4d:e1:c1:53:
4b:85:fc:f0:b1:a5:43:d6:5b:fd:1d:a2:bf:de:f5:
b4:db:8d:85:49:7e:f8:51:09:4f:18:25:9b:29:7e:
2d:3f:d5:ba:5c:7a:50:86:7d:4a:04:e5:2e:2a:4a:
07:a9:1c:cb:20:15:05:46:d1:b5:86:64:e7:61:61:
6b:82:d8:57:23:8d:65:34:3d:0e:8f:4c:54:37:89:
41:2f:6a:80:c4:2a:24:13:8f:6c:9c:a1:da:00:ee:
59:1f:ee:99:76:36:b2:08:da:99:67:87:db:55:f5:
7d:ea:e3:ce:a7:66:43:c1:12:e9:d2:60:57:1e:48:
e1:68:16:31:7f:14:d3:e5:ef:70:16:19:a5:91:6a:
90:87:a3:fa:e5:82:ff:06:0b:69:e2:ba:b3:52:6e:
c7:9c:4a:4e:94:b2:5a:a2:f3:cc:62:89:b2:e2:8e:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:C2:B5:50:37:EC:ED:70:C5:B0:EB:B0:A0:87:06:52:37:7B:94
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/rkjCtVA37O1wxbDrsKCHBlI3e5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.68.0/22
185.171.252.0/22
Signature Algorithm: sha256WithRSAEncryption
38:09:f8:b2:c9:6c:60:b9:d3:97:3d:09:7a:7e:4a:82:bd:1c:
81:5b:a2:78:63:41:15:bb:e0:47:d7:6e:03:8e:4a:c4:e7:61:
66:10:2b:59:15:25:98:d1:65:d6:06:9f:4f:69:46:57:68:c6:
74:ed:00:0c:ac:70:a4:9c:3a:ed:39:86:ff:e0:55:96:71:c6:
33:d3:61:ab:76:46:96:67:f4:ad:a9:e7:2c:c7:c8:86:73:3c:
4e:49:04:0b:d5:1b:a3:d2:b8:12:7d:68:4d:73:f5:d9:b3:bc:
da:81:7a:10:d3:72:e7:b8:2f:9a:7f:24:02:4d:8e:15:1c:1a:
26:2c:6e:7b:01:68:5a:b3:b8:cd:2c:55:20:d3:8b:3b:2e:2e:
38:03:2b:70:f7:7d:3b:52:39:41:73:8f:fb:f3:38:ff:43:ee:
3f:25:81:0e:55:63:54:9a:30:cd:5b:ce:67:c1:05:2e:a4:9a:
33:05:f2:6f:d8:33:c1:e5:b2:87:dd:49:87:4e:1c:86:94:52:
03:ee:54:43:13:f5:49:72:4b:3d:65:33:ce:ad:ad:f3:d0:7b:
bc:ad:2b:30:1e:e6:7d:91:d0:2d:e3:c3:93:9f:a5:15:e9:5e:
27:c8:9d:17:ca:ff:5c:a6:bf:f6:48:ef:f8:13:3d:89:0d:c8:
44:fb:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org