Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/A61Ik-30DQ5-dAeNA0tdsFFMCo8.roa
File: A61Ik-30DQ5-dAeNA0tdsFFMCo8.roa (raw, json)
Hash identifier: kUTcYJUORHblw9mmqoHi/pRnMRU9ja/OSyLfZLlvWyI=
Subject key identifier: 03:AD:48:93:ED:F4:0D:0E:7E:74:07:8D:03:4B:5D:B0:51:4C:0A:8F
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 37FECC21
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/A61Ik-30DQ5-dAeNA0tdsFFMCo8.roa
Signing time: Thu 17 Mar 2022 17:03:45 +0000
ROA not before: Thu 17 Mar 2022 17:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 185.11.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939445281 (0x37fecc21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Mar 17 17:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03ad4893edf40d0e7e74078d034b5db0514c0a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:63:62:c2:ac:53:ad:75:3a:8d:8f:77:47:
e4:c7:60:27:ee:78:6a:13:d6:cf:7d:45:91:4c:f0:
c5:b2:51:fa:b9:20:17:f9:67:54:2d:1d:4d:cb:3c:
ec:9a:fc:7b:8e:5d:0b:f0:14:3c:b9:56:d5:62:e3:
e8:14:65:2d:26:09:e5:dd:8f:3b:dc:81:15:97:d0:
e8:9a:fe:b3:e5:b6:a6:01:e4:a3:d2:65:07:3c:e1:
9c:32:2e:c2:cd:0e:b4:37:bf:18:75:a3:56:e1:4b:
57:57:b5:4b:7b:26:3c:f4:9c:5b:e6:b0:05:17:25:
82:79:00:8e:91:c6:84:40:3d:a8:1f:68:1e:93:c7:
09:15:12:ec:66:6c:ed:49:12:ba:7d:78:dd:5c:7a:
5c:99:2c:d9:12:35:45:fa:92:32:01:9c:0c:21:35:
6f:28:1e:48:eb:f9:b3:27:9d:bf:b8:4f:63:1b:e6:
65:5d:96:91:e2:42:47:9c:bb:c5:28:32:0a:ed:2a:
92:1e:f5:cc:e4:99:0f:2d:b2:c1:94:7c:b0:29:6d:
49:7e:94:d9:4e:60:a9:56:a4:30:80:01:9d:f1:6f:
85:8e:e7:6d:87:a0:47:2f:96:35:af:3b:22:1f:bc:
74:31:23:d4:05:53:7f:5e:09:98:26:1d:54:85:70:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:48:93:ED:F4:0D:0E:7E:74:07:8D:03:4B:5D:B0:51:4C:0A:8F
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/A61Ik-30DQ5-dAeNA0tdsFFMCo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.140.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:62:24:06:10:04:ef:9a:9d:87:2d:2e:a7:a8:66:f2:47:f9:
53:d1:cf:90:b5:cc:f1:6c:a3:7d:19:c4:ff:d7:e7:cc:df:08:
fe:23:0e:49:32:a4:6b:f7:e9:13:2d:da:c1:ec:1b:f2:19:75:
cb:74:4e:45:3c:69:17:10:b1:86:4e:df:e5:bb:4e:7b:7b:ca:
72:9e:9e:63:aa:31:db:9f:e5:7f:87:52:cb:6c:be:3c:36:57:
e0:ba:bc:8b:42:53:d6:79:28:9b:ee:0a:ac:9e:4a:80:d6:97:
18:a3:42:dd:59:32:ab:3b:57:ce:40:5b:8a:75:48:2e:ff:db:
6f:9a:79:6a:d0:9e:dd:bf:12:2e:db:ed:e7:5b:cf:50:bb:be:
48:6b:05:e6:6b:b1:c5:0b:04:fa:57:8a:df:53:43:fd:0a:41:
9e:fe:ac:d3:61:7e:2e:96:18:1e:1a:43:d6:ba:99:db:fc:a4:
8a:9a:ee:36:65:f6:c0:ca:3f:33:e3:19:12:ed:bf:f3:f0:6e:
9f:f8:9b:9e:4f:bf:23:0d:6e:6a:5d:4c:d5:85:30:fe:06:ba:
63:a3:29:a4:50:6e:cb:02:ee:4d:be:77:24:55:69:1a:66:15:
de:31:64:6c:89:3e:66:3a:44:85:da:c8:0b:59:3f:67:68:2c:
d5:21:c3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org