Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa
File: 7wX4sxV0nTVxA3WdqqiDiLJKPto.roa (raw, json)
Hash identifier: OZu2YXjKpAc16E3B+UUBmOt+81qQcuOKEQsWArQtMEo=
Subject key identifier: EF:05:F8:B3:15:74:9D:35:71:03:75:9D:AA:A8:83:88:B2:4A:3E:DA
Certificate issuer: /CN=b473166566a08d032053ccace23068e1953f4eb2
Certificate serial: 013AB8DB
Authority key identifier: B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa
Signing time: Sat 01 Jan 2022 07:56:05 +0000
ROA not before: Sat 01 Jan 2022 07:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.138.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20625627 (0x13ab8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473166566a08d032053ccace23068e1953f4eb2
Validity
Not Before: Jan 1 07:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef05f8b315749d357103759daaa88388b24a3eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:43:81:c8:69:0b:8b:e6:b8:19:23:b7:df:
85:53:89:6c:5a:54:72:e7:6a:6d:a1:5b:f5:ea:5d:
b3:77:96:e4:16:d4:6d:70:d9:5f:0c:34:fe:23:72:
90:13:bc:22:97:cc:5e:97:b8:2e:bc:e4:c0:8e:cf:
b1:3f:98:4f:6a:5f:10:ac:ff:d5:96:d4:11:2a:9f:
c0:3f:f8:c8:68:a0:21:44:12:d0:74:29:d4:3a:9d:
88:61:5a:9d:04:51:6b:ce:16:5b:0f:30:23:e9:6a:
40:c7:c2:ad:96:11:65:cb:09:9f:fb:14:ea:4c:3b:
7d:75:bc:5e:00:1f:9f:10:0d:2c:43:a4:b1:28:88:
ae:ba:1d:e0:4d:3a:c5:1a:e9:e6:a5:11:8a:b5:1b:
9b:bc:76:85:2c:dc:82:97:54:ef:1d:7a:e3:a9:45:
76:70:ab:82:2a:bc:4c:c7:da:3a:fd:95:d7:eb:52:
8d:a1:80:aa:58:c4:81:36:ef:cf:e6:0c:69:32:51:
2f:2d:b1:1b:18:4f:50:55:08:49:44:c3:fd:bf:43:
db:cc:bb:49:3e:2a:46:94:3c:7d:5e:f9:e9:55:8a:
a7:bb:57:07:83:6f:d6:45:59:83:4b:a5:76:c2:15:
25:a6:b3:27:75:f0:c0:0d:12:c0:c8:30:fa:86:79:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:05:F8:B3:15:74:9D:35:71:03:75:9D:AA:A8:83:88:B2:4A:3E:DA
X509v3 Authority Key Identifier:
keyid:B4:73:16:65:66:A0:8D:03:20:53:CC:AC:E2:30:68:E1:95:3F:4E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWZWagjQMgU8ys4jBo4ZU_TrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/7wX4sxV0nTVxA3WdqqiDiLJKPto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3eef64-90c5-4a2e-bc1e-3633dcd4c9dc/1/tHMWZWagjQMgU8ys4jBo4ZU_TrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:64:8b:e6:93:f0:70:d2:e9:09:18:a1:df:b0:9c:8f:10:39:
b6:05:62:c9:d1:36:5a:1e:0d:cc:b5:21:e0:53:e1:15:01:f5:
5d:c7:29:a9:03:05:fd:cc:b6:32:8f:cf:f6:bd:ec:d3:64:03:
ad:fe:d3:94:db:30:af:16:37:20:9b:98:61:09:5c:7c:aa:14:
dc:9c:f5:40:c1:7e:73:0d:7b:64:a5:84:21:07:fa:4e:0b:14:
95:99:bd:0c:67:f2:43:2c:c5:c3:a5:49:53:17:46:c7:64:ca:
68:9f:fb:9e:84:fc:53:35:f9:b5:86:1d:5f:32:89:b3:a8:bb:
5c:7a:5a:20:31:ed:b4:57:cf:80:d2:bc:4a:f4:d5:ad:66:2d:
44:de:4b:9c:c9:3e:04:de:8f:0a:10:2b:e5:cb:7a:dc:53:e9:
b6:db:74:70:5e:f0:5c:c0:b1:d1:38:2a:01:c5:ad:0f:8a:a8:
a8:85:a5:c5:ef:94:a9:2c:b3:10:33:5f:a3:74:dd:bf:95:92:
d6:a9:1b:e2:f8:ae:25:fe:e9:d5:19:06:f1:0b:17:e5:f4:30:
58:ab:1c:7a:b1:f9:a2:2d:0a:d5:e7:9f:fe:f0:c7:d2:31:46:
a3:b0:a1:0d:71:e4:6f:56:aa:11:9c:2c:06:2c:a6:58:fc:d2:
08:8d:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:41 2023 by rpki-client on console-ams.rpki-client.org