Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/3qovuUE3fbAqBZvVegdYqngbQyM.roa
File: 3qovuUE3fbAqBZvVegdYqngbQyM.roa (raw, json)
Hash identifier: HtrXVO+t2Ph6VjEqfqLGUN6du6OQBbcdGG3hRUwa0kE=
Subject key identifier: DE:AA:2F:B9:41:37:7D:B0:2A:05:9B:D5:7A:07:58:AA:78:1B:43:23
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 0F2217CE
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/3qovuUE3fbAqBZvVegdYqngbQyM.roa
Signing time: Sat 01 Jan 2022 12:03:16 +0000
ROA not before: Sat 01 Jan 2022 12:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205517
IP address blocks: 185.194.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253892558 (0xf2217ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 12:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=deaa2fb941377db02a059bd57a0758aa781b4323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:df:33:56:a3:06:1b:7d:de:fa:3b:52:3a:
e7:8e:1e:30:b2:37:5b:0e:c1:cc:fb:71:fe:bc:c3:
80:8d:93:4b:89:b5:4b:96:39:ae:ef:0f:7e:20:b4:
07:ae:f9:0a:ae:26:55:0e:75:3a:7b:db:0f:71:f0:
24:e0:6c:0a:93:fb:a8:15:d2:9b:0d:54:7e:f3:e7:
58:60:50:b9:be:8b:0e:46:52:f7:7f:4f:96:f9:72:
92:57:f5:ae:f0:05:81:a9:35:08:5c:a7:b9:e2:82:
56:20:d6:39:dc:e9:85:f3:fe:59:3a:24:dc:bb:e1:
d2:8f:03:c2:be:95:85:ee:ba:2c:3d:a1:0a:9f:db:
39:d7:ae:5c:cb:5f:ff:59:6d:ab:41:6e:67:27:b0:
39:83:b6:fe:96:06:c2:f7:93:a6:9e:36:93:16:5d:
ad:98:27:32:a1:5e:7e:f9:9c:15:b8:d8:ee:7b:93:
1f:a5:e4:87:61:b2:25:2b:98:bd:ca:7a:57:fd:52:
37:1a:9e:73:d6:4c:57:5a:0b:5b:b8:19:9f:2c:4f:
0b:3a:76:20:ba:5c:50:82:54:97:92:4e:94:06:e2:
c2:63:0b:14:3c:9a:cb:41:a2:87:d3:4f:a5:10:05:
2f:55:0b:13:bd:35:ae:f7:08:a9:b8:cb:2c:13:d1:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AA:2F:B9:41:37:7D:B0:2A:05:9B:D5:7A:07:58:AA:78:1B:43:23
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/3qovuUE3fbAqBZvVegdYqngbQyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1c:e6:f0:98:af:97:57:7f:48:0a:26:24:dc:6a:a1:68:d9:
ce:c9:2e:49:e7:52:bc:87:1e:da:89:a7:51:30:9b:f4:df:e4:
8c:7a:01:55:be:19:c7:4b:7c:0d:1e:4c:4c:1c:ef:2b:23:02:
d7:05:fc:67:cb:78:f6:63:38:51:18:81:b2:e1:6c:9b:eb:02:
a4:72:95:80:ef:24:80:ae:f0:94:45:fe:4c:86:d6:b9:e2:c4:
92:f5:22:f8:03:df:5b:a5:d2:6d:50:37:1b:40:f9:80:d2:03:
56:7e:8d:50:6a:bd:ff:3b:10:e8:22:57:09:b7:02:0b:94:8a:
ba:5d:99:f9:e1:bc:68:2e:76:dc:03:a4:2d:a2:a0:fc:b4:04:
d9:73:99:3a:9f:f7:7e:b9:71:f8:b7:5e:5c:dc:f1:59:f6:38:
bb:b8:96:d7:66:be:aa:b6:63:d3:20:70:24:5e:de:84:6f:ae:
b4:66:6b:7c:ac:00:07:c3:fb:7a:c7:ba:bd:f2:8b:89:f2:5a:
a3:69:9f:6e:fa:f5:73:f0:bb:ae:bc:e8:1b:eb:2f:ec:bd:a4:
25:f9:03:12:84:47:ad:57:7c:ee:ea:5e:b0:f8:9e:89:ae:7f:
45:9d:de:7e:0c:e1:a1:37:a9:8f:dc:a1:ef:bc:6a:38:85:db:
80:f9:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-ams.rpki-client.org