Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/OsABVuzgI6PlBoXS1ZpjE9HbhnU.roa
File: OsABVuzgI6PlBoXS1ZpjE9HbhnU.roa (raw, json)
Hash identifier: KcpoR3DeZCcwRVkbIs0NeG07mhyxN4/ir6HYJvpHHjA=
Subject key identifier: 3A:C0:01:56:EC:E0:23:A3:E5:06:85:D2:D5:9A:63:13:D1:DB:86:75
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 04326F27
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/OsABVuzgI6PlBoXS1ZpjE9HbhnU.roa
Signing time: Sat 01 Jan 2022 07:04:25 +0000
ROA not before: Sat 01 Jan 2022 07:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205550
IP address blocks: 185.120.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70414119 (0x4326f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 07:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ac00156ece023a3e50685d2d59a6313d1db8675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:ba:7b:ca:f0:d2:e3:3e:57:79:16:e5:f6:
8b:7f:ff:bb:c4:69:b9:f7:42:9f:af:d0:56:95:08:
39:d1:0e:84:2f:c5:e2:a0:dd:76:bd:8f:f9:a2:3b:
dd:ee:a7:0f:24:3c:8b:9a:8b:2f:a2:52:50:66:27:
6f:a4:2c:85:58:45:31:7b:37:71:f6:e8:49:cc:44:
c8:ed:51:ba:31:82:e6:7d:2f:1f:df:7b:28:8a:37:
c5:84:eb:9a:90:49:2a:d6:48:e1:43:29:18:22:67:
02:d5:01:84:cc:37:40:aa:fb:6a:ea:77:6e:2b:da:
06:67:8c:36:30:f2:16:1c:88:4f:ee:de:86:10:ca:
0f:27:94:b0:c1:b5:38:b1:3e:1c:83:26:1e:11:5a:
ac:47:3a:5a:a7:ca:ae:eb:08:a0:91:f9:e1:a7:b2:
eb:fe:c0:97:ae:06:4b:27:28:9a:63:67:07:04:e2:
63:7d:f0:21:ae:2e:5c:5c:b7:90:f9:7a:c0:4f:7e:
88:a0:bc:f1:f5:9e:75:9d:38:d2:5a:b4:e5:f1:b9:
b6:a3:39:df:0a:5e:61:a6:02:77:6f:6c:3c:a3:7d:
27:58:94:8d:47:22:e7:b7:65:fd:af:5f:66:62:aa:
f3:40:f6:e6:21:76:41:38:1e:73:61:aa:56:f2:36:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:01:56:EC:E0:23:A3:E5:06:85:D2:D5:9A:63:13:D1:DB:86:75
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/OsABVuzgI6PlBoXS1ZpjE9HbhnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:84:a8:07:33:2a:49:c7:de:36:e0:3e:cc:8d:23:f8:83:e2:
0a:fb:34:91:63:96:b6:d3:f3:47:5a:e9:08:82:ba:e4:b6:4c:
02:01:ec:a4:90:a6:36:a4:c4:3c:75:1a:59:bd:41:ec:f1:7f:
dc:7a:e1:c8:4c:a1:53:13:3a:db:ff:a9:c8:f2:70:9a:f3:3e:
e8:34:13:6d:02:2f:61:f8:20:3c:89:e5:ca:74:e6:a9:fe:aa:
69:39:69:76:b0:0d:c3:d3:df:a1:d3:71:ce:f2:7e:cb:60:59:
19:80:99:19:49:1c:c0:b0:6d:2f:af:34:f9:96:f2:21:50:b0:
03:d0:74:77:f2:49:69:e9:ab:a3:57:a6:37:15:38:3c:74:41:
a6:c0:33:e2:c5:b0:eb:e6:73:69:00:61:48:b5:dd:d3:e5:85:
45:e7:44:eb:28:ff:f9:10:7f:4b:3f:3a:9b:84:31:f5:69:fb:
49:06:ba:65:ae:9a:21:c2:68:a8:99:7b:23:47:fb:c6:40:09:
0a:f2:63:cb:6e:a2:79:e1:c5:13:62:80:23:5a:be:f4:ea:27:
bd:08:b8:27:1b:36:33:9b:64:a7:97:9f:ea:05:5e:52:24:ee:
76:ff:8f:b5:f4:59:05:bb:6d:da:36:39:6e:43:0a:b8:c6:cd:
8f:4f:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-fra.rpki-client.org