Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa
File: S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa (raw, json)
Hash identifier: co5k4xs/B+f5Lmc4MAunB4827Ian0kWyAgrpT3yyk9A=
Subject key identifier: 4B:51:83:62:55:CE:30:CC:AD:37:76:5B:B9:46:07:3E:EB:8F:E9:96
Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial: 11164930
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa
Signing time: Sat 01 Jan 2022 09:56:07 +0000
ROA not before: Sat 01 Jan 2022 09:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395651
IP address blocks: 185.38.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286673200 (0x11164930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
Validity
Not Before: Jan 1 09:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b51836255ce30ccad37765bb946073eeb8fe996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:97:a7:00:db:08:b6:e4:ec:31:0e:b7:67:
67:f3:e3:41:14:25:84:2e:49:74:82:f4:13:9d:68:
cd:d9:07:dc:d1:1b:f9:cf:44:80:8b:1b:b5:37:9c:
47:e4:af:d7:c2:a4:14:6d:0a:fc:88:86:c5:57:4a:
46:c7:78:2d:8c:5c:64:96:82:ff:9c:a5:95:e0:52:
03:5f:66:f8:52:28:73:71:0f:b4:68:95:b5:b5:cb:
64:4b:60:d4:84:ff:1a:8a:2f:12:3b:4a:86:ee:21:
49:db:05:34:e0:a4:e5:76:43:7b:8b:cb:2f:38:f1:
9a:15:3a:dd:69:ba:b1:33:93:57:d6:fd:32:53:60:
69:be:cd:fc:b2:a8:67:67:ef:a8:5b:a5:5b:a4:16:
60:d2:f8:a1:50:8b:20:5e:cb:c2:2b:57:5e:d8:29:
60:00:e8:b2:c5:a8:46:67:4f:9c:79:64:5a:47:d5:
35:10:b8:d2:52:f7:fa:bf:a0:6a:d5:9f:14:75:6c:
ac:94:24:f5:2d:fc:22:72:4a:41:d2:bd:4e:28:61:
f8:64:39:03:cf:42:14:45:25:87:84:8a:1f:a9:04:
45:51:31:a4:a2:4a:32:7c:1b:bd:36:cb:7a:31:6d:
d1:33:43:4f:4a:f1:25:26:d2:08:70:1c:b5:a4:92:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:51:83:62:55:CE:30:CC:AD:37:76:5B:B9:46:07:3E:EB:8F:E9:96
X509v3 Authority Key Identifier:
keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/S1GDYlXOMMytN3ZbuUYHPuuP6ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.241.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f3:c0:1e:6c:d6:38:18:06:fe:1b:7f:38:de:f9:c0:4d:62:
0c:3e:f2:d8:2c:56:bf:5b:70:1d:b3:76:d8:c8:70:63:16:53:
5c:20:9f:b5:aa:e2:a1:eb:60:fc:a0:ac:ea:3c:d7:e6:3d:74:
da:92:cb:47:23:fa:42:50:ac:ed:d2:ae:30:c5:5f:57:57:96:
65:a1:d7:01:c7:a3:66:9b:3f:4e:d8:d9:d2:1e:87:00:67:c3:
e8:14:6e:79:9b:27:0b:17:4f:85:1a:bf:d5:01:33:1a:b7:17:
be:81:f0:86:a6:89:93:bd:05:bc:fc:d2:eb:61:55:ee:9d:23:
5d:d8:ae:27:00:01:07:7c:d7:79:33:a6:d7:82:d1:e7:39:53:
42:86:2a:ad:f5:b6:e7:6f:3d:40:99:b4:ce:d2:73:6d:fc:62:
15:72:a6:54:fa:58:10:dc:bf:3e:c5:13:78:b9:e6:9d:43:42:
c1:48:b4:36:48:af:d3:35:07:a6:a8:93:9d:2f:ae:27:bc:3a:
6a:b7:34:4a:17:7c:d8:e9:aa:02:c0:50:0a:86:0e:3d:05:ab:
50:ab:49:8c:d0:45:57:b3:9f:c2:ca:0e:91:31:4b:eb:49:4a:
d3:9f:b9:09:46:bc:a6:65:d0:40:d3:21:b4:1a:02:c1:43:34:
98:b3:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:41 2023 by rpki-client on console-ams.rpki-client.org