Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/g-I0IxMdZL78a2wPzpUf4oLIz14.roa
File: g-I0IxMdZL78a2wPzpUf4oLIz14.roa (raw, json)
Hash identifier: qV6MONm/mmRnfpNIqfmboJu0ObWeGeYP3oUPBRAcf8k=
Subject key identifier: 83:E2:34:23:13:1D:64:BE:FC:6B:6C:0F:CE:95:1F:E2:82:C8:CF:5E
Certificate issuer: /CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Certificate serial: 01A66C93
Authority key identifier: 02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/g-I0IxMdZL78a2wPzpUf4oLIz14.roa
Signing time: Sat 01 Jan 2022 10:55:52 +0000
ROA not before: Sat 01 Jan 2022 10:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.76.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27683987 (0x1a66c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=026fd6b65a11a3a72c22faada06c31f2f6331637
Validity
Not Before: Jan 1 10:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83e23423131d64befc6b6c0fce951fe282c8cf5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:37:41:80:70:eb:62:37:4f:e6:f5:c9:5b:
38:f3:2c:07:50:46:a3:22:ee:f7:6a:54:46:ae:33:
7c:b9:ba:84:7b:19:ce:a6:05:f4:a8:eb:43:8c:0d:
2a:76:02:ba:a9:5a:c6:4f:cc:3f:83:34:bb:92:c9:
87:b4:f3:db:3e:54:1d:ef:24:d2:43:88:59:07:6d:
e3:8d:bf:e4:58:f2:56:10:92:1a:1a:61:9a:73:1b:
d2:96:65:56:02:cf:38:d5:54:8b:64:a3:83:39:6d:
d0:7a:f8:0a:61:b3:b7:a6:c3:25:4c:44:de:5b:58:
c9:03:99:ea:a5:31:c4:bb:07:fd:c2:a5:7e:ba:a4:
e4:1c:c7:8f:84:ed:22:85:19:15:4b:84:3f:75:31:
41:2c:40:73:bb:cd:f1:30:93:e6:df:e1:69:ad:93:
94:d1:36:24:ba:81:c9:24:da:7a:b1:16:c2:b7:76:
49:55:5e:b8:d9:02:6e:7b:87:15:72:b8:47:86:d1:
f7:81:7a:69:ab:4c:22:58:cd:e0:e6:a8:eb:8a:b5:
76:71:f8:06:72:1e:15:d7:cf:7c:df:48:41:70:bb:
dd:84:f3:c8:b7:27:4f:f1:28:bc:40:f7:be:ac:a7:
d6:6d:bf:70:3a:aa:5f:41:a0:f1:bc:26:f0:27:7c:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E2:34:23:13:1D:64:BE:FC:6B:6C:0F:CE:95:1F:E2:82:C8:CF:5E
X509v3 Authority Key Identifier:
keyid:02:6F:D6:B6:5A:11:A3:A7:2C:22:FA:AD:A0:6C:31:F2:F6:33:16:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am_WtloRo6csIvqtoGwx8vYzFjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/g-I0IxMdZL78a2wPzpUf4oLIz14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2148db-a1fa-4011-8917-4eabe3c5e418/1/Am_WtloRo6csIvqtoGwx8vYzFjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:08:1a:da:39:b4:f2:84:31:46:5e:63:73:b0:83:27:eb:4b:
f0:8c:b1:01:ae:1e:22:fd:6a:88:74:70:7f:5e:0c:d2:a9:60:
ca:78:47:b5:2b:4a:be:1f:a6:24:3a:f8:6d:69:b9:49:2d:9a:
c4:1e:27:73:46:af:2e:ef:3f:0a:fa:c0:ef:d2:20:5a:29:ed:
da:6d:84:c1:c8:63:be:10:37:ee:82:83:86:db:2b:52:ab:a7:
8f:b4:8d:b7:d9:e5:b3:47:b8:94:ab:d1:fa:ab:01:39:e1:a9:
20:7d:8e:9c:3e:4f:47:fd:2f:02:60:dc:07:1a:01:ee:68:61:
57:e8:53:24:2d:94:d0:fd:11:4d:44:3b:a8:8c:c9:b4:97:a1:
3e:4b:ce:38:47:1d:b3:72:5c:10:86:cc:33:d9:5c:d2:cf:49:
f2:3f:81:07:85:2f:93:ff:1e:be:15:53:74:aa:06:2e:bc:ff:
4a:c5:fc:78:09:b3:d8:40:82:b2:28:88:93:63:4d:63:1c:a3:
c1:10:a8:27:e4:2c:29:17:d8:66:df:a8:7e:5b:d2:96:e7:61:
e7:52:85:0e:71:e5:e4:2e:30:53:e5:c4:5a:81:8b:7d:64:0a:
31:83:17:4f:57:ba:2a:32:25:9e:fe:42:8c:17:c0:cf:83:e1:
c6:bf:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-ams.rpki-client.org