Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/c7OaIG_mE9ADk_t-Pg4aiECV794.roa
File: c7OaIG_mE9ADk_t-Pg4aiECV794.roa (raw, json)
Hash identifier: AgzM1GDKzZryxnSRVJ45FvBFH0gUJ4Mdwz9vNm+oPx0=
Subject key identifier: 73:B3:9A:20:6F:E6:13:D0:03:93:FB:7E:3E:0E:1A:88:40:95:EF:DE
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 09093FD1
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/c7OaIG_mE9ADk_t-Pg4aiECV794.roa
Signing time: Sat 01 Jan 2022 02:54:58 +0000
ROA not before: Sat 01 Jan 2022 02:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3292
IP address blocks: 185.81.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151601105 (0x9093fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Jan 1 02:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73b39a206fe613d00393fb7e3e0e1a884095efde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:f1:60:aa:02:7b:29:d2:31:65:18:23:04:
e8:0e:15:1d:69:0a:d2:d4:22:cf:61:3a:e1:c0:9d:
4e:b3:67:ef:3f:f8:62:24:a7:96:2d:e8:26:e4:cc:
62:a2:2e:91:f7:ab:65:f9:6b:f5:91:0d:20:d2:c6:
1c:53:bd:94:44:60:75:78:d3:be:77:53:03:ac:d4:
ff:4a:f8:39:9d:b2:c0:ce:30:e9:3d:a9:39:79:f4:
68:40:d1:fb:b1:42:3e:af:6d:fa:be:00:18:ba:f0:
03:b9:81:d5:fd:b3:a7:cb:6c:e8:65:70:2a:76:9f:
d6:b4:74:17:2f:12:81:cc:2a:c1:52:de:00:6d:4d:
c8:a8:4f:e5:46:5e:88:ad:0b:c2:b5:76:ac:d0:67:
80:c1:e2:d7:77:11:6b:f0:fe:bd:cf:cc:74:43:3a:
3c:24:95:cc:2b:40:c5:78:f2:13:2d:0b:c8:d5:5f:
5b:8f:2b:b0:49:d2:41:b7:dc:29:79:a2:c2:94:16:
ab:d2:c8:e9:13:2c:d9:56:47:5f:5b:4b:00:f5:e7:
49:2f:b8:33:84:17:b3:ce:7d:c9:fe:f0:ce:ab:8f:
5b:42:e8:08:22:d6:c0:ff:27:1e:b9:68:4e:2f:e4:
f9:2b:fe:ee:6c:9e:75:a5:dc:c8:1d:3d:6c:4d:71:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:9A:20:6F:E6:13:D0:03:93:FB:7E:3E:0E:1A:88:40:95:EF:DE
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/c7OaIG_mE9ADk_t-Pg4aiECV794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:6f:71:41:e9:b5:68:1a:aa:ea:57:c5:8e:88:4b:4a:fd:42:
94:8c:ae:d5:da:db:27:8b:7a:fe:f5:6f:82:6a:67:9a:a2:fd:
21:65:b3:92:ad:4f:1e:7c:4e:61:3f:82:ca:ea:bf:22:77:9f:
99:b4:1b:b7:3b:43:b7:79:b8:e8:ea:eb:32:2c:de:87:2c:62:
f5:66:aa:4a:fb:8b:4b:83:af:ab:a5:99:10:4b:57:2a:3e:07:
e3:69:66:3f:7d:23:0d:e1:39:0b:e0:bf:6b:9d:55:6e:84:50:
ea:42:6e:83:4e:b1:db:57:cf:1e:df:56:1e:f9:e5:45:4c:03:
0d:9f:11:c9:7b:ff:c5:53:fd:1a:07:cc:5a:c8:d4:e6:e0:b4:
5b:14:ae:c2:b0:19:90:0a:ae:c3:38:c8:a6:ca:3e:25:c3:c0:
bb:3c:cc:b5:75:7f:c5:b5:55:1d:1d:44:c0:c0:d2:fa:09:df:
84:af:03:b5:9f:6e:e5:fa:f2:02:43:4e:24:f8:5f:54:ef:90:
9e:9c:7a:30:dd:c5:0a:f0:58:6a:92:1f:58:9b:9e:52:b5:74:
30:4c:51:1b:f5:d5:6c:21:40:a5:f9:92:95:46:0e:86:f7:63:
c7:b2:01:f0:99:21:d9:44:e8:ab:6f:65:b1:4b:ba:22:76:a9:
97:9e:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org