Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/1-JVtyDoWaQEGkyqLCZjZmNz4G8E.roa
File: 1-JVtyDoWaQEGkyqLCZjZmNz4G8E.roa (raw, json)
Hash identifier: XqwEzbsam21U+6BTC6nAwnoWrMVaYWvuqexE+TPOO4g=
Subject key identifier: F8:95:6D:C8:3A:16:69:01:06:93:2A:8B:09:98:D9:98:DC:F8:1B:C1
Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial: FA9B
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/1-JVtyDoWaQEGkyqLCZjZmNz4G8E.roa
Signing time: Mon 27 Jun 2022 13:29:41 +0000
ROA not before: Mon 27 Jun 2022 13:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34636
IP address blocks: 185.63.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64155 (0xfa9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
Validity
Not Before: Jun 27 13:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8956dc83a16690106932a8b0998d998dcf81bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:2a:10:9d:3d:07:c9:42:77:7f:85:49:01:
7c:1a:41:5e:40:ba:fc:f3:49:b3:bd:63:53:fe:68:
38:19:47:2b:46:48:98:72:4e:80:74:91:ee:ec:ac:
5f:ee:ec:74:a7:bc:8d:49:8b:cb:01:84:1c:1b:52:
f0:a7:88:47:16:d1:b1:01:1d:81:b3:fb:74:8b:69:
8f:11:4f:4b:43:be:c8:60:d4:27:0b:9f:f9:d8:db:
bf:35:30:0d:1b:ab:5a:be:e3:92:c0:77:41:7b:02:
f7:22:0d:c0:b8:e7:a8:be:3b:db:74:0c:52:8f:c4:
50:dc:12:69:0a:b0:5e:87:2d:86:f5:93:34:24:2f:
df:ff:7b:25:5a:04:83:b3:50:13:95:bf:3f:a0:bd:
d0:2e:26:85:d4:a5:03:11:30:5a:59:d8:f1:04:5c:
67:81:ff:1e:04:ef:af:ab:71:8d:86:fc:2b:fd:ec:
ff:07:bd:61:3d:3d:40:a9:9e:3b:cf:4f:5e:ed:c0:
0c:bf:8b:4f:10:95:d7:43:00:9f:7a:5a:9e:51:52:
59:80:b1:d3:de:4c:64:6a:ff:1c:78:a3:0b:9d:8b:
8f:3a:c2:bb:03:af:27:19:19:21:83:f8:47:dd:b5:
ac:ad:d7:40:1d:9e:66:e9:d7:89:cd:31:8f:78:56:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:6D:C8:3A:16:69:01:06:93:2A:8B:09:98:D9:98:DC:F8:1B:C1
X509v3 Authority Key Identifier:
keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/1-JVtyDoWaQEGkyqLCZjZmNz4G8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.113.0/24
Signature Algorithm: sha256WithRSAEncryption
09:fc:f7:2b:ca:67:bb:34:b6:54:40:e7:06:b4:49:d3:57:65:
89:57:03:2c:85:fd:42:02:d3:50:e7:35:02:e6:39:75:0c:51:
ae:0e:80:aa:77:9f:4f:2e:bb:fc:dc:5a:8e:2b:c6:76:8b:c8:
ab:99:46:ef:2f:a3:11:e9:3f:a8:ee:8e:74:90:17:b7:3e:9b:
d6:1c:d4:47:f2:0b:69:5b:40:ca:7c:3d:63:16:9b:f6:05:02:
da:63:bd:de:d1:73:b4:67:71:0d:21:91:92:6c:71:26:63:e3:
3b:1b:18:6b:d2:a5:1c:5d:e3:b1:04:1f:57:fe:6a:c5:99:4a:
19:d5:89:04:fd:be:a3:bf:53:e2:2f:74:17:5d:9c:7b:18:1f:
f6:87:0b:74:83:ed:a6:12:af:e6:bd:3f:d4:45:00:82:9d:25:
4b:7a:f7:25:97:bb:e2:d6:aa:87:e8:52:a1:be:e4:d1:b8:6f:
b3:a7:d4:af:12:2b:32:18:12:b6:36:ad:6d:1b:f7:f5:90:b6:
3a:07:60:7c:17:5f:19:5a:33:e3:48:c4:9a:57:c9:cb:01:76:
1f:d8:62:6f:9c:84:2b:e6:63:56:8b:f6:33:0a:7f:ae:2b:14:
2e:19:33:1a:74:d5:2d:58:31:86:13:1e:ce:54:d7:11:da:d7:
4a:75:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:07 2024 by rpki-client on console-fra.rpki-client.org