Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/OpZFUhuzh_YJ51Lja2CVNl-Z-gA.roa
File: OpZFUhuzh_YJ51Lja2CVNl-Z-gA.roa (raw, json)
Hash identifier: j7ABTi5oIhrAIwhd+YUbUFegiIRMhn716y0ynai/N88=
Subject key identifier: 3A:96:45:52:1B:B3:87:F6:09:E7:52:E3:6B:60:95:36:5F:99:FA:00
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 018436FD590A453F6D970F8AA235A7612878
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/OpZFUhuzh_YJ51Lja2CVNl-Z-gA.roa
Signing time: Wed 02 Nov 2022 06:18:03 +0000
ROA not before: Wed 02 Nov 2022 06:18:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.248.48.0/24 maxlen: 24
185.248.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:36:fd:59:0a:45:3f:6d:97:0f:8a:a2:35:a7:61:28:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Nov 2 06:18:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a9645521bb387f609e752e36b6095365f99fa00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:4e:11:73:9d:78:01:8c:2d:c8:54:02:2e:
92:54:8d:38:ef:7d:99:60:f8:b3:d8:40:cc:c2:eb:
fb:97:d7:fe:29:75:c5:1b:b2:37:72:cc:cc:49:cf:
0b:4e:aa:61:7f:a8:1d:60:e4:df:a3:5b:8b:61:91:
5b:4a:6f:9d:88:01:f9:58:b1:12:14:72:18:3d:d6:
f2:49:7c:79:e0:8f:f4:0f:65:92:19:b9:03:cf:16:
bf:a7:59:a9:1f:56:8a:0b:d7:e4:d5:a2:04:87:7f:
32:1a:db:a7:9e:26:3b:21:07:cf:d3:d3:43:f7:b3:
b4:ac:83:c9:e6:f0:ef:e3:bb:fb:b2:d9:ef:69:40:
8c:dc:1e:ad:4e:e8:0d:2d:15:13:66:37:ad:6b:f1:
a9:f4:d1:b6:f6:be:a8:56:d6:bd:ef:d5:b2:82:a2:
6a:98:60:19:b5:34:c0:7d:4c:a5:4f:ea:eb:9c:24:
4a:6d:e0:67:bf:8e:f4:8c:78:c3:c5:b9:0e:04:d2:
27:11:27:fa:c6:d8:0c:22:d7:1c:2b:36:46:18:ef:
3d:b3:17:0b:1f:11:d4:98:cb:87:fb:e9:dd:c4:b8:
aa:0f:bd:18:28:05:68:d5:1f:2c:4b:ac:96:2e:89:
0b:f6:87:c1:ee:e5:89:5f:0d:62:41:58:37:27:0c:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:96:45:52:1B:B3:87:F6:09:E7:52:E3:6B:60:95:36:5F:99:FA:00
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/OpZFUhuzh_YJ51Lja2CVNl-Z-gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.48.0/23
Signature Algorithm: sha256WithRSAEncryption
70:bf:27:c5:ef:a8:0d:ea:00:39:ae:43:63:c2:77:56:99:63:
48:41:b4:5d:f8:2a:14:aa:cc:df:c0:bb:4f:41:66:8a:e6:d9:
ff:5a:51:56:4b:c9:bf:8e:66:d6:0b:73:ab:eb:c0:f5:ed:ba:
a0:db:eb:1d:7a:90:56:b3:da:6f:89:76:4c:dc:ca:d3:85:df:
a1:b1:34:aa:bf:3f:82:3e:70:0c:8d:d3:03:18:00:98:74:57:
17:ae:32:01:f0:7d:c9:10:00:f8:5b:25:50:61:c5:18:4d:d2:
59:de:dd:3a:04:41:0f:b7:cf:a9:32:8c:d3:3a:c3:e6:a4:76:
ae:87:a6:ba:a9:e8:b2:26:71:00:49:a8:2b:01:03:f6:f0:7f:
f6:e8:c9:30:fb:ad:c0:63:03:53:1e:bd:74:15:68:35:f2:7b:
99:aa:41:4b:f5:dd:e9:d3:a9:36:9c:a3:49:8f:1d:90:c0:c1:
41:0c:76:04:9a:0a:6a:08:15:b8:e2:99:db:d1:fa:2d:37:79:
30:c9:af:cb:9a:d8:14:e2:71:ec:1c:80:38:0a:db:a4:cb:74:
69:50:95:e7:19:6b:27:24:d7:35:a5:7c:98:16:59:97:af:39:
98:1d:51:fd:97:5f:6b:69:7c:7c:be:05:1f:14:ed:5c:d5:f4:
be:0c:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:15 2023 by rpki-client on console-fra.rpki-client.org