Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/av1lEliWM9GpusoRcKStPBgpdrw.roa
File: av1lEliWM9GpusoRcKStPBgpdrw.roa (raw, json)
Hash identifier: rMqM+buqoYGLeFhear7RUPpFM4OPoEIZSeIo0hRcPzo=
Subject key identifier: 6A:FD:65:12:58:96:33:D1:A9:BA:CA:11:70:A4:AD:3C:18:29:76:BC
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 05CA890A
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/av1lEliWM9GpusoRcKStPBgpdrw.roa
Signing time: Tue 26 Apr 2022 20:36:12 +0000
ROA not before: Tue 26 Apr 2022 20:36:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49584
IP address blocks: 185.179.112.0/24 maxlen: 24
185.179.114.0/24 maxlen: 24
185.179.113.0/24 maxlen: 24
185.179.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97159434 (0x5ca890a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Apr 26 20:36:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6afd6512589633d1a9baca1170a4ad3c182976bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:7b:46:9f:60:42:6a:d5:fa:d6:05:61:40:
d5:a3:9d:dd:16:a5:fc:cb:80:75:07:0e:a1:bc:23:
1a:12:cd:9d:3b:1f:dd:ea:41:ac:d6:f8:ed:9f:8b:
45:04:e9:51:b3:8d:c7:fb:bb:fb:f2:ad:70:a7:3c:
82:7d:4e:a5:29:e6:2a:a0:b6:54:b9:3d:31:1a:3c:
9b:93:09:94:f3:6a:fe:e8:b2:54:c6:72:c7:92:88:
72:cb:f0:89:7a:d3:e0:cd:35:5b:d1:3d:3f:fa:50:
c8:ec:6a:fa:4d:fb:ac:20:76:99:f2:4c:b5:53:41:
6f:32:55:a8:c3:e9:40:9e:ec:17:21:eb:b9:2c:e9:
bf:14:0f:4c:2b:e2:b9:73:93:23:de:c5:3e:8b:b8:
94:88:8a:fc:81:d4:09:07:4e:38:13:81:31:0e:fb:
4b:9e:5a:11:1a:2c:8d:76:06:34:93:e8:ea:b9:31:
a0:74:7d:76:c8:ec:5b:c1:75:ca:0f:37:64:b9:07:
ce:90:05:c6:48:54:12:59:09:7e:7f:b7:33:e9:e9:
b3:f6:09:21:d2:77:d0:41:b8:11:eb:a0:14:65:eb:
75:f8:36:c8:05:3d:76:f5:a4:28:30:4f:0f:22:96:
6f:25:9f:69:33:77:21:99:51:fb:b0:3e:ea:d0:1d:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:65:12:58:96:33:D1:A9:BA:CA:11:70:A4:AD:3C:18:29:76:BC
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/av1lEliWM9GpusoRcKStPBgpdrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.112.0/22
Signature Algorithm: sha256WithRSAEncryption
79:7b:8c:9b:39:b6:63:a2:b6:ca:7f:41:f6:55:bc:e4:98:35:
8c:19:78:77:74:7e:22:00:c0:99:84:f8:0f:e5:e6:f1:cf:38:
8a:47:51:a7:55:68:85:1f:a6:3e:d0:d6:e0:c3:73:4a:b9:92:
1a:95:60:0b:46:de:59:2b:66:66:fd:66:23:30:f6:b0:2c:9b:
42:de:3a:3d:08:b7:1e:ad:4a:c8:6b:e0:17:7b:5e:e0:12:50:
9a:fb:9d:9e:3b:57:df:ac:bb:c9:0b:eb:0d:56:0d:61:79:13:
2a:92:eb:90:02:71:d9:58:d2:04:a9:11:ae:a9:56:c9:16:8d:
04:d5:61:35:1a:bb:c0:c7:bd:3a:bd:65:f5:6f:7f:59:29:15:
88:e5:03:b9:c7:6c:81:03:7e:10:f4:e8:96:a2:9b:74:43:5f:
1b:98:77:c6:b3:11:ba:db:6b:a1:0b:c3:d8:5f:6c:76:a8:1a:
f3:64:ec:20:b4:ca:b8:08:10:9c:58:da:af:8a:b3:14:af:24:
10:04:42:25:3d:2c:4a:f7:d3:4f:b1:9d:7c:56:a9:fc:ed:f8:
3a:9c:e7:01:ae:10:dd:9c:76:bb:e5:77:bd:7d:fd:a8:69:7d:
77:98:7e:eb:f1:10:cc:3c:73:84:21:a2:c0:86:91:e3:88:e9:
e8:24:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:30 2023 by rpki-client on console-fra.rpki-client.org