Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa
File: 3r0U67FqlwxnmJhHgFMy67o_NBo.roa (raw, json)
Hash identifier: wAR4Tx9QD2xOb7F5PnBJBUWXr1F2iTaKCbgHhRhjOek=
Subject key identifier: DE:BD:14:EB:B1:6A:97:0C:67:98:98:47:80:53:32:EB:BA:3F:34:1A
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 08E83E26
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa
Signing time: Sat 01 Jan 2022 08:05:16 +0000
ROA not before: Sat 01 Jan 2022 08:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41059
IP address blocks: 185.1.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149437990 (0x8e83e26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 1 08:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=debd14ebb16a970c67989847805332ebba3f341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:f4:dc:0b:0a:75:c5:1f:a7:58:ee:f9:3c:
16:c3:cc:cc:d3:1d:4f:c8:b2:1a:18:97:86:57:41:
af:37:da:cd:7b:99:5b:a9:5e:5c:f7:e9:8d:6d:3d:
1f:55:d4:56:da:5a:cc:d6:b7:d3:54:db:2e:3b:4c:
fb:3e:73:2f:94:92:50:a6:26:e5:68:79:55:03:2b:
79:91:6a:85:1a:5e:cc:d4:6d:24:e3:6f:74:85:61:
32:b1:63:74:ae:04:cd:ef:07:af:7c:f2:c3:26:7c:
8d:26:e1:af:1c:d1:06:28:8d:a0:50:d6:01:18:f3:
ee:72:81:a5:dd:64:fc:66:f5:87:1d:8e:58:e1:af:
cd:53:11:85:f2:7f:20:ce:34:94:26:90:c9:53:5c:
fc:70:1b:e8:eb:3e:1f:c7:e4:d0:80:fa:c5:59:e1:
0a:53:0f:f5:70:5f:a1:66:d1:62:42:9a:1b:d6:9f:
e9:05:16:ec:62:c6:0b:e5:34:81:62:90:69:54:59:
a9:5d:99:3f:19:b5:75:30:d9:fb:00:c6:f3:04:42:
b9:ac:e0:17:3d:39:fb:84:54:47:58:18:2e:fc:93:
e5:49:64:8a:a0:7e:26:18:54:7e:e2:5d:bf:f1:d9:
5a:7f:36:cf:ff:1c:d3:69:ce:7b:5c:cb:ff:3e:00:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BD:14:EB:B1:6A:97:0C:67:98:98:47:80:53:32:EB:BA:3F:34:1A
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/3r0U67FqlwxnmJhHgFMy67o_NBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b8:c7:86:8c:92:77:53:5f:23:0c:32:e2:96:b4:7c:d0:d3:
39:68:55:fe:ff:f7:73:09:5f:4b:57:72:ca:28:c4:7a:c4:3a:
60:e7:f8:78:b7:ba:6e:30:f4:aa:a6:42:d5:d2:26:50:cc:d0:
17:94:5d:2c:dc:3a:a7:79:6d:80:8d:1c:61:a6:1d:d1:31:37:
08:35:aa:c3:cb:92:00:ca:59:cf:76:ee:d0:db:4e:8f:9c:8a:
5b:0c:38:a1:9a:b7:21:35:2c:80:ac:54:92:d7:36:47:60:a1:
24:2d:75:82:5b:06:44:46:d8:b4:76:08:08:42:b0:28:eb:0f:
93:ae:bf:e5:87:12:09:5f:4a:d8:e5:50:67:cb:3c:db:e5:02:
24:88:5e:d0:89:58:38:b2:6f:34:5f:35:ee:f5:49:ac:62:8c:
9a:9a:3f:34:c3:78:1d:f2:15:24:c5:52:ac:67:a9:d9:15:48:
c1:1c:cb:34:d3:b6:28:bb:f0:ad:f0:2a:86:8c:03:4a:64:4f:
be:ed:32:3c:5b:ec:0d:45:92:4f:f7:a4:55:a8:dd:81:5b:7c:
79:c3:2a:b4:50:d3:04:63:30:3b:f0:c8:53:05:ec:29:40:03:
76:80:32:47:66:f0:e9:26:75:bd:dc:dd:d1:1c:0d:31:f1:8e:
a1:59:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-ams.rpki-client.org