Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/cBf9b1rFsO1RfrfDgagjc5TVmvw.roa
File: cBf9b1rFsO1RfrfDgagjc5TVmvw.roa (raw, json)
Hash identifier: ht15cMGEpdy+s9OONeURC0yoaobEqSZE9FTGy1LjPLw=
Subject key identifier: 70:17:FD:6F:5A:C5:B0:ED:51:7E:B7:C3:81:A8:23:73:94:D5:9A:FC
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 29C47300
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/cBf9b1rFsO1RfrfDgagjc5TVmvw.roa
Signing time: Tue 22 Mar 2022 06:52:48 +0000
ROA not before: Tue 22 Mar 2022 06:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.14.238.0/23 maxlen: 24
185.14.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700740352 (0x29c47300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Mar 22 06:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7017fd6f5ac5b0ed517eb7c381a8237394d59afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:58:d0:89:7b:34:80:11:a8:f8:39:e1:34:
2b:b1:cd:d8:bf:60:09:96:80:38:f1:f4:35:4e:23:
b6:a0:27:47:25:e1:11:b8:68:72:cb:2f:79:ef:03:
67:ec:27:01:4f:1a:9f:62:dc:cb:ba:35:f3:b9:9c:
af:18:59:80:dc:79:39:11:53:68:dd:bb:8a:0e:6b:
8d:1f:07:76:8b:99:e4:d6:b6:9a:40:e4:4b:a7:05:
27:e9:44:e0:58:d0:e0:8a:b3:00:d4:37:d0:68:06:
e2:d4:b1:34:15:fe:d2:a2:ff:7f:63:8c:89:19:dd:
d1:b2:da:3f:f7:35:22:17:0f:59:0a:07:ce:b9:2b:
a6:e7:b6:ce:05:9e:2e:5b:d4:10:c4:0d:12:af:01:
72:aa:4a:7b:21:a1:cc:57:6b:2c:d3:27:ea:fe:89:
cb:3d:0b:55:01:42:8f:45:6e:c9:1a:b7:95:63:44:
c4:db:86:c5:34:7f:f9:ca:ed:e2:ca:fe:25:93:c8:
83:59:4b:3a:94:f6:63:17:48:f5:05:e1:83:57:00:
3d:05:a9:56:dc:a5:d6:72:44:bb:f0:ee:9c:9e:e6:
7d:e4:f9:f9:0d:bd:40:f2:6c:69:26:42:07:c8:e0:
01:75:5b:d6:39:b9:e3:78:25:28:24:df:8c:05:cb:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:FD:6F:5A:C5:B0:ED:51:7E:B7:C3:81:A8:23:73:94:D5:9A:FC
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/cBf9b1rFsO1RfrfDgagjc5TVmvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.236.0/24
185.14.238.0/23
Signature Algorithm: sha256WithRSAEncryption
78:bb:67:51:b4:9e:72:a8:8f:61:c7:e2:fc:4c:44:25:d0:e9:
ee:cc:39:8d:66:5e:e1:d6:f8:39:af:e2:85:88:ac:f0:10:4c:
bb:4b:06:f9:b8:21:3a:59:1b:43:67:50:12:f1:7a:93:7d:df:
31:7b:9d:0c:b6:9c:52:d6:7a:07:19:45:48:21:e0:65:81:13:
4e:79:23:1f:51:1c:f8:6b:81:89:ae:ae:96:da:66:0e:06:51:
60:2e:3f:fb:01:c9:3d:2a:62:67:53:d8:78:28:d2:3e:de:6f:
0a:91:c7:ab:8a:a4:da:23:86:67:12:cb:96:10:99:b6:1b:88:
9f:d3:64:71:9d:4d:03:36:73:b1:c2:b0:b6:9e:47:3f:ad:e2:
3b:67:c6:16:1b:c2:27:42:b6:4a:d8:27:c7:0a:ab:ab:cb:21:
3f:a8:cd:74:e5:e2:97:b5:1a:c3:59:4d:aa:10:00:06:76:a3:
48:18:9f:88:d5:72:60:c0:44:d1:3c:c9:ff:3b:ab:99:01:42:
09:3e:6b:22:39:81:9d:de:95:eb:d5:be:af:06:81:39:dc:ea:
09:fa:b3:88:e8:00:10:95:02:bf:fc:eb:3f:38:a0:c2:c5:c1:
53:18:79:dd:e9:91:6c:a8:d2:3f:0d:76:83:e0:bb:84:5b:1b:
1d:0c:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-ams.rpki-client.org