Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/pKDZPOlBqo13iF3rhd2uKN7sOF0.roa
File: pKDZPOlBqo13iF3rhd2uKN7sOF0.roa (raw, json)
Hash identifier: wsQTEul6HPLjka0kNbx6n4/2/FJme0fP821xqkiN0sc=
Subject key identifier: A4:A0:D9:3C:E9:41:AA:8D:77:88:5D:EB:85:DD:AE:28:DE:EC:38:5D
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 0184AEA9C1DB3F4247DF86815654A2808653
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/pKDZPOlBqo13iF3rhd2uKN7sOF0.roa
Signing time: Fri 25 Nov 2022 12:01:11 +0000
ROA not before: Fri 25 Nov 2022 12:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.14.238.0/24 maxlen: 24
185.14.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:a9:c1:db:3f:42:47:df:86:81:56:54:a2:80:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Nov 25 12:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4a0d93ce941aa8d77885deb85ddae28deec385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:e0:41:5f:30:96:dd:27:b9:a1:e3:2a:ae:
3e:f9:f0:e3:66:d4:99:0e:87:18:ba:0d:fd:17:42:
65:db:62:c9:11:ce:08:1b:58:bb:ea:0a:57:78:3a:
37:b4:40:80:18:e3:bd:50:a1:20:08:17:9c:19:d1:
74:8f:37:e4:ca:9f:da:bb:90:9b:ea:5f:12:00:e3:
c1:06:c6:fb:2d:5d:03:95:be:ee:91:9c:9c:39:2a:
84:eb:f4:ed:9a:ab:ee:32:6b:a6:cb:27:76:23:ba:
64:6d:32:32:6d:2f:a3:60:40:40:bf:58:bc:9d:e3:
80:cb:4e:40:23:14:d9:db:7c:d4:4c:b4:b3:66:2a:
2a:06:9a:71:21:3e:3b:ec:ae:70:09:e8:71:e4:50:
67:a4:28:fc:48:b4:4c:ab:c0:b7:cb:5e:0d:e2:39:
dc:b6:e4:2c:72:63:01:c2:ea:0d:04:b3:c8:7d:a0:
a4:d6:84:55:bd:91:99:bd:ec:b5:f4:11:a4:30:e9:
34:1d:2a:19:d7:35:9d:2a:af:74:b4:28:b2:80:07:
02:31:f8:08:cb:f8:37:00:f1:5f:5a:c5:b9:dc:e3:
c9:71:7d:31:79:cf:88:b6:14:89:fd:f6:80:50:2e:
35:4c:4d:5b:b9:40:03:8f:31:13:93:53:4a:56:2a:
7d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:D9:3C:E9:41:AA:8D:77:88:5D:EB:85:DD:AE:28:DE:EC:38:5D
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/pKDZPOlBqo13iF3rhd2uKN7sOF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.236.0/24
185.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4a:37:5a:d0:47:b6:ee:ce:51:12:76:e4:c6:4d:8b:56:22:
2e:c1:79:2a:c5:f7:00:be:c5:6b:8e:6d:00:cb:a7:02:73:9a:
74:25:97:4d:ad:42:52:f7:72:cc:93:f4:61:f4:ff:80:d2:fe:
70:f1:5d:0e:11:73:17:3b:36:95:19:9d:86:8a:8e:32:28:b4:
78:68:36:a0:2b:c5:73:1b:15:c4:97:3e:70:6c:c0:05:8c:4b:
7d:64:cf:c8:91:3d:48:9f:e4:a8:8b:59:eb:4b:36:71:ce:fe:
e8:e0:0b:e3:ea:c8:fa:ae:f6:89:08:9b:1e:22:53:99:a4:58:
77:1f:02:76:e5:45:35:2a:17:23:6d:ac:95:e4:3c:d8:05:5a:
68:82:01:d1:a5:aa:d8:be:7e:90:df:3c:8f:a2:a6:94:e3:dc:
d3:2b:df:02:16:ab:97:6b:b2:61:64:6b:7b:9f:f0:63:58:32:
75:f0:39:26:43:70:2f:ad:99:eb:3b:0f:f0:08:fa:9c:d3:0e:
79:43:91:57:98:1e:c0:cf:4e:c4:6c:c6:c1:28:f8:ea:11:a9:
36:94:3e:23:49:ed:65:a1:fc:96:f1:f9:f4:44:74:60:43:24:
09:cb:7d:14:89:75:4a:dc:c6:17:01:44:d9:3c:26:98:22:6a:
e6:cf:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-ams.rpki-client.org