Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/AQjLFsTH69K2tX3GD1vdMqIgqBA.roa
File: AQjLFsTH69K2tX3GD1vdMqIgqBA.roa (raw, json)
Hash identifier: OGrZrlKXcPLj7eTiJnfvKpkQ5Ym6Xvr0qT5nRIx1zbc=
Subject key identifier: 01:08:CB:16:C4:C7:EB:D2:B6:B5:7D:C6:0F:5B:DD:32:A2:20:A8:10
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 02CB1725
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/AQjLFsTH69K2tX3GD1vdMqIgqBA.roa
Signing time: Wed 15 Jun 2022 11:53:44 +0000
ROA not before: Wed 15 Jun 2022 11:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212257
IP address blocks: 185.160.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46864165 (0x2cb1725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jun 15 11:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0108cb16c4c7ebd2b6b57dc60f5bdd32a220a810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:85:82:2d:eb:76:59:3a:b7:5d:6a:a5:57:
b6:49:53:bf:99:ab:eb:a5:e1:fa:f2:fa:76:10:dc:
72:be:51:97:ca:c2:12:d6:a8:99:4f:07:15:56:37:
69:f8:02:a3:ab:17:97:9e:5b:1b:37:83:1f:ab:f7:
95:34:55:7b:36:5c:71:43:42:9b:ff:90:16:6a:da:
1e:94:04:01:2e:4e:64:ad:8c:5c:65:bd:66:07:93:
41:b0:f6:7f:de:42:6c:5f:2c:dc:04:e0:75:63:93:
14:98:6c:20:2f:b6:c8:7b:0d:3a:93:8f:70:22:77:
10:5b:38:ed:ad:e8:7f:dd:92:76:f3:f0:ee:cc:4f:
fa:a5:a5:45:91:19:11:e7:27:cd:a6:2f:81:f3:b5:
de:2e:c1:79:95:a5:be:4c:25:b8:6f:ab:74:3b:80:
35:34:65:52:9a:2d:8d:7a:25:13:62:cf:1a:3a:90:
73:cd:1c:b4:96:a4:d5:8f:9d:2f:94:bd:11:91:0b:
9e:9d:dd:4e:24:37:af:ef:b0:92:93:13:79:38:27:
c3:3a:49:6e:24:63:b3:89:fb:fc:db:2c:ff:85:5c:
2c:f0:e4:31:56:75:a2:1f:49:8e:78:57:9c:0d:17:
79:7c:48:5d:a9:7a:d1:65:74:d7:0d:b6:03:b6:c0:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:08:CB:16:C4:C7:EB:D2:B6:B5:7D:C6:0F:5B:DD:32:A2:20:A8:10
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/AQjLFsTH69K2tX3GD1vdMqIgqBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
18:9f:b6:c1:dd:a9:2e:0a:04:9f:6e:41:ca:1f:07:50:b2:50:
eb:84:fa:be:91:46:62:4b:bc:6f:45:c0:ab:ca:c4:a7:64:2d:
b5:57:ba:25:49:e6:fb:e0:f3:ad:96:65:5c:33:0d:d5:27:01:
78:5a:93:25:d9:7f:7d:ba:57:21:83:3d:48:74:ee:57:65:a0:
41:6f:91:21:d5:0a:b4:81:03:a7:46:51:a0:9d:b8:67:7b:30:
79:b7:08:ea:eb:79:22:c5:22:23:03:46:04:0b:36:a5:ed:5b:
38:39:72:a9:e2:4c:64:10:e1:1c:72:f6:84:d2:7e:e0:8e:d1:
a9:b9:6f:a5:43:a3:0a:59:b2:dc:a2:18:31:54:23:c8:ee:d9:
80:fe:cc:d4:de:30:5d:fe:45:e9:fe:89:07:88:d4:d5:bb:a0:
ea:a0:59:af:db:9b:12:49:64:92:48:1d:4b:fd:ea:70:2f:3d:
f4:7f:f0:23:13:a4:bc:97:5b:cc:92:16:8e:88:2d:93:2e:71:
40:e4:5d:96:00:28:84:b8:bb:af:a3:58:5d:25:8f:65:5c:af:
03:c9:fd:6b:fb:bd:3a:e9:d1:e1:2c:bf:16:c7:1e:eb:f6:27:
d6:81:73:e1:52:97:14:b1:c5:36:aa:69:04:2e:16:d1:bc:c1:
93:90:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:08 2024 by rpki-client on console-ams.rpki-client.org