Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/aKAM5CcJaAot6WTwUISSf8_BdYo.roa
File: aKAM5CcJaAot6WTwUISSf8_BdYo.roa (raw, json)
Hash identifier: vvagQ6AqEpj57UXBrMwTxaZbvo9FIgaceDO3icH2W7w=
Subject key identifier: 68:A0:0C:E4:27:09:68:0A:2D:E9:64:F0:50:84:92:7F:CF:C1:75:8A
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 0A41F236
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/aKAM5CcJaAot6WTwUISSf8_BdYo.roa
Signing time: Sat 01 Jan 2022 12:01:09 +0000
ROA not before: Sat 01 Jan 2022 12:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202561
IP address blocks: 185.200.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172094006 (0xa41f236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Jan 1 12:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a00ce42709680a2de964f05084927fcfc1758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:2f:0a:25:5a:70:94:90:df:92:48:79:49:
7f:90:b2:48:7a:d9:55:63:27:90:8e:f1:8f:89:5a:
bf:54:61:c3:35:6b:03:ba:d9:53:49:83:34:02:c4:
1a:0f:69:3d:56:51:e7:9d:95:bc:fb:b7:c8:46:39:
99:57:e3:7e:01:49:dd:fb:0f:50:76:00:81:50:65:
dc:76:24:6d:d1:78:c0:8f:b5:a4:77:68:4b:b1:05:
9e:86:43:13:ca:18:f9:d9:fc:73:55:0b:43:32:84:
d3:c2:90:d2:0b:ed:b2:f0:af:dc:85:bd:51:65:87:
c0:35:13:be:49:ab:70:47:77:ec:1f:04:55:b3:db:
32:da:79:d0:5f:f2:0d:ae:3f:4e:a7:cc:b1:59:39:
50:f7:07:7d:b0:20:5a:e7:5b:6a:b1:9f:1b:74:ec:
17:c6:38:a3:60:ab:44:f2:ac:c9:cb:16:14:53:b6:
e0:2f:67:86:28:3d:af:eb:e4:ab:23:a6:44:2f:9e:
09:86:38:c9:27:c5:2d:b7:33:5a:46:58:05:2e:6b:
b2:c3:62:23:a4:f4:c5:72:fb:36:04:78:c5:a2:8b:
82:1b:5c:c0:b5:48:ff:42:cd:08:50:c4:26:f8:1a:
88:99:a1:d8:f6:1e:0c:ca:bc:ad:f8:af:7c:ef:ae:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:0C:E4:27:09:68:0A:2D:E9:64:F0:50:84:92:7F:CF:C1:75:8A
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/aKAM5CcJaAot6WTwUISSf8_BdYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b7:07:fd:b4:27:78:94:ee:dd:66:fc:47:75:80:46:1a:0f:
1d:be:8e:e5:94:52:db:48:7b:6a:f7:a0:d2:be:79:e4:66:bf:
44:70:df:93:de:1c:5b:90:8a:0c:90:75:0d:44:f2:c0:f5:05:
24:fe:49:3a:65:8a:c0:d6:0c:22:1c:5d:67:7c:c0:ca:d4:6c:
0e:a4:b2:f1:d0:22:54:bc:41:46:44:d3:19:c6:de:e4:ff:00:
23:f3:7e:f4:1b:5c:41:83:da:ff:9f:a8:43:9b:dd:10:7c:e4:
74:3c:08:17:6f:2c:e1:c5:a0:61:08:92:39:0c:b4:b0:34:3b:
8d:00:4b:83:85:2e:0a:f6:41:68:1e:95:bf:16:ea:fb:6e:0c:
1c:9a:d6:f3:d8:1a:a1:83:95:e6:0f:51:fd:3b:44:39:a7:84:
c5:26:a9:0f:f8:cf:11:2b:1c:97:47:2a:65:47:1d:88:56:eb:
ed:6e:7b:19:17:b5:ff:ce:09:96:b0:17:9e:c3:9c:26:fd:1a:
08:15:b4:8c:6a:58:15:21:15:bf:71:5e:66:99:88:da:10:5c:
b2:59:12:cb:e7:be:c1:29:80:d8:fd:c3:51:20:8c:0a:93:d2:
ec:b0:04:a9:32:b0:8a:69:ee:47:84:a2:22:3a:19:83:4e:8f:
9e:b3:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:03 2025 by rpki-client