Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/xvcQl1y7gWQBCGIJ4JPXH4rCKqQ.roa
File: xvcQl1y7gWQBCGIJ4JPXH4rCKqQ.roa (raw, json)
Hash identifier: c/LwQGN+1u37l7SbqbKgqEHjpeCt02ZgmqwqKrIRVfA=
Subject key identifier: C6:F7:10:97:5C:BB:81:64:01:08:62:09:E0:93:D7:1F:8A:C2:2A:A4
Certificate issuer: /CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Certificate serial: 028405
Authority key identifier: 1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/xvcQl1y7gWQBCGIJ4JPXH4rCKqQ.roa
Signing time: Wed 27 Apr 2022 06:28:27 +0000
ROA not before: Wed 27 Apr 2022 06:28:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207681
IP address blocks: 185.199.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164869 (0x28405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caad93908aad8d246eb69f7e66aa70de5bd5a17
Validity
Not Before: Apr 27 06:28:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6f710975cbb816401086209e093d71f8ac22aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:fe:ac:7f:93:4f:f9:5e:07:38:28:97:97:
e6:e3:c2:8d:bd:be:11:ba:b1:1c:e6:00:7a:38:f9:
40:28:9c:3e:4f:a3:ea:55:0f:e9:53:b0:4a:12:be:
cd:89:0d:74:2d:4f:68:48:ba:5f:bf:d0:3b:ba:ce:
71:4a:33:e4:4e:70:80:90:21:f4:fd:a9:8a:82:c6:
90:22:71:55:30:e2:e8:45:fa:69:7f:41:50:21:1d:
e0:59:13:bb:f2:9d:2b:36:bc:39:a9:43:6a:6a:88:
78:d8:8a:ed:ca:b9:ec:25:41:a3:8a:15:da:13:ea:
ae:6b:fe:5f:f7:ad:f5:b2:00:30:fd:6c:63:21:4c:
b1:e3:f5:59:12:92:4e:47:92:a3:e7:44:a9:77:2e:
7a:0f:98:01:7f:d1:ce:df:95:81:09:43:54:5b:8d:
ec:60:96:a2:ec:2b:02:3b:1c:4a:d4:13:e7:4b:17:
f9:06:5c:cf:1e:4f:62:38:e6:78:b6:63:d6:0a:47:
1b:2f:4f:49:ff:4f:d7:8e:00:20:36:52:be:cc:ef:
4b:6e:77:43:96:43:08:5b:91:25:c7:75:88:97:84:
5d:4b:b1:c7:09:39:5f:88:67:64:74:55:3d:68:ce:
fd:be:53:a8:c4:9b:e0:73:ff:9a:bf:75:7d:d8:3f:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:10:97:5C:BB:81:64:01:08:62:09:E0:93:D7:1F:8A:C2:2A:A4
X509v3 Authority Key Identifier:
keyid:1C:AA:D9:39:08:AA:D8:D2:46:EB:69:F7:E6:6A:A7:0D:E5:BD:5A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HKrZOQiq2NJG62n35mqnDeW9Whc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/xvcQl1y7gWQBCGIJ4JPXH4rCKqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/abb6ca-1a11-4ba5-9ee3-a798bdc7311f/1/HKrZOQiq2NJG62n35mqnDeW9Whc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.88.0/22
Signature Algorithm: sha256WithRSAEncryption
04:6a:a8:12:bc:08:4a:25:d2:7b:3d:3c:34:c7:bd:08:59:3a:
5a:a5:17:d2:9f:86:d0:9a:bf:d4:9c:a1:c4:84:cf:45:90:d5:
d6:21:e3:48:49:54:a1:ba:85:f7:fb:a1:03:b3:67:79:36:77:
e9:d4:9b:ec:04:65:ad:1d:7e:6f:ed:ce:47:4d:84:6a:79:75:
a6:87:57:1e:46:9d:45:8c:13:e4:bf:2b:4d:33:8e:fa:3b:34:
b9:2f:c7:d2:b8:1f:78:f6:e3:ed:d6:24:59:ba:49:b4:01:77:
e4:52:2d:6a:0c:0a:4e:b6:c0:0e:8e:19:2d:4d:f7:4e:2d:b8:
c4:58:c7:7d:4e:bc:47:ed:01:70:fb:7c:22:03:9e:7a:d2:7f:
89:44:5e:d2:8e:a7:a4:8f:5c:9e:b3:8f:7a:b1:6c:c5:a1:dd:
9e:52:e2:1b:24:a2:35:1b:3e:5e:ae:97:60:94:da:e8:c9:5d:
ba:0a:70:22:44:0f:65:8e:74:f5:ec:d1:91:2f:1b:9c:1d:bf:
03:cd:56:31:e1:1d:97:52:87:8f:26:30:48:1c:2f:47:29:fe:
77:c1:ec:e7:4a:93:ed:1d:99:d1:11:04:fd:40:eb:b7:15:5a:
eb:64:01:02:cf:e1:72:c0:0b:10:d1:a1:e5:75:a2:63:c8:64:
78:be:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:38 2023 by rpki-client on console-ams.rpki-client.org