Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/A46lRCtdLqhewWikb_VuxD4iqfs.roa
File: A46lRCtdLqhewWikb_VuxD4iqfs.roa (raw, json)
Hash identifier: PcnGIMLVGvWD6kV8PDiOMmVNGfi08TMlp326xluo94g=
Subject key identifier: 03:8E:A5:44:2B:5D:2E:A8:5E:C1:68:A4:6F:F5:6E:C4:3E:22:A9:FB
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 05794578
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/A46lRCtdLqhewWikb_VuxD4iqfs.roa
Signing time: Tue 08 Mar 2022 11:12:06 +0000
ROA not before: Tue 08 Mar 2022 11:12:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59877
IP address blocks: 185.61.176.0/22 maxlen: 24
193.39.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91833720 (0x5794578)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Mar 8 11:12:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=038ea5442b5d2ea85ec168a46ff56ec43e22a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:2a:7a:71:3d:75:d1:13:3b:91:50:3e:9e:
01:cf:bd:8d:d7:3e:4e:91:ac:6f:b9:55:73:3a:02:
7a:ec:33:17:e5:41:68:7c:d6:83:87:4b:b4:52:a4:
ee:94:e0:bb:cd:a2:d8:96:c9:39:c2:83:4a:87:97:
28:b9:25:a5:75:af:df:6a:d3:92:23:06:cf:36:ab:
03:2e:7a:2b:54:c6:7b:91:d1:3e:cd:11:44:6d:29:
f0:c2:2f:f5:0e:8c:68:9d:e2:3e:8f:27:b8:24:87:
7b:96:97:a2:af:bb:ad:e6:5c:7e:fd:23:53:13:e2:
e4:e9:b3:5a:37:99:8f:ed:0b:ce:22:66:f3:c4:3d:
8d:59:be:d1:ba:0e:a3:74:eb:c4:f3:e9:05:e3:99:
bd:28:73:18:4d:85:1b:af:f4:39:2b:5d:37:d3:2f:
04:ac:68:6d:b9:1e:74:ca:47:ef:a2:f8:87:61:15:
f7:07:b9:cc:22:02:f5:c2:72:c9:88:7b:03:9a:e3:
59:90:fe:a4:12:6c:71:e0:88:cc:e8:cb:2e:75:d7:
25:89:3b:5f:32:3b:c9:55:f6:f9:88:f3:0a:1c:1d:
d3:ac:14:0d:c8:04:94:66:34:7f:65:01:20:12:cd:
11:a5:d4:5b:f9:a9:5c:9f:3e:09:1b:0c:89:2a:86:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:A5:44:2B:5D:2E:A8:5E:C1:68:A4:6F:F5:6E:C4:3E:22:A9:FB
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/A46lRCtdLqhewWikb_VuxD4iqfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.176.0/22
193.39.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:8d:77:fb:1e:9b:16:70:b5:11:2d:1c:aa:05:16:ed:4b:a1:
6c:84:67:80:42:8a:9c:2a:a1:a1:8e:71:e6:43:ce:75:86:5b:
59:b8:2e:c0:7c:34:64:fd:ba:5a:71:7b:7b:d0:66:29:7f:36:
1f:bc:36:5a:46:86:1c:8b:e9:42:12:96:d5:59:5a:db:91:7a:
ce:19:54:9f:c2:86:10:8b:b0:b5:85:d5:9b:a4:41:89:45:34:
6f:f4:48:dc:4a:c0:38:ef:bd:71:de:b7:24:e3:48:a8:08:0e:
ca:e8:5c:34:75:af:58:a4:d4:97:a5:5d:02:2d:d4:01:62:a8:
d0:b1:1f:04:c9:c5:be:13:cc:8f:05:08:81:42:b1:32:45:42:
d7:27:93:96:c2:05:be:38:80:38:7d:37:b7:d5:2d:5e:4a:26:
b8:21:c5:9f:43:f8:7d:d0:af:79:03:b3:ab:84:e4:96:96:26:
9c:eb:47:be:e7:31:90:c4:cf:d0:0f:1f:a0:96:03:d3:55:38:
fd:26:3a:97:7c:bf:b9:54:25:b3:16:ab:88:f3:9b:64:f1:c3:
dc:90:86:19:36:d2:d2:51:44:38:dc:aa:b7:55:ab:51:b0:14:
12:fe:3c:27:d2:7a:dd:e4:50:6e:24:33:f4:10:df:43:7d:3a:
61:78:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:00 2023 by rpki-client on console-fra.rpki-client.org