Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/0RqTzfhMAQKngScKhfzucP8eGK4.roa
File: 0RqTzfhMAQKngScKhfzucP8eGK4.roa (raw, json)
Hash identifier: NcVqMOCdbMGmjVC9822sjffAWP5zSGesgEFMcLo+gUQ=
Subject key identifier: D1:1A:93:CD:F8:4C:01:02:A7:81:27:0A:85:FC:EE:70:FF:1E:18:AE
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 669E73
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/0RqTzfhMAQKngScKhfzucP8eGK4.roa
Signing time: Tue 14 Jun 2022 22:45:56 +0000
ROA not before: Tue 14 Jun 2022 22:45:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28952
IP address blocks: 185.103.144.0/22 maxlen: 22
90.176.0.0/19 maxlen: 19
90.176.13.0/24 maxlen: 24
2a06:2c40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6725235 (0x669e73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Jun 14 22:45:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d11a93cdf84c0102a781270a85fcee70ff1e18ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b4:80:ab:7b:e2:ae:d2:81:90:84:9d:93:95:
1f:7a:f6:4b:a4:cf:12:c0:39:87:65:18:0b:2b:3a:
da:5d:10:87:72:7d:0c:c6:70:5e:f5:9f:ec:3d:c7:
92:b3:7a:5c:06:85:0d:7a:f4:2d:e6:7d:e3:85:64:
18:90:04:09:d0:d3:b4:69:52:1e:af:18:90:f6:bf:
1a:3b:cb:12:3a:b7:ef:81:bb:fd:6b:90:b4:ae:d6:
b0:07:0d:4a:99:6f:9e:96:2e:28:17:87:b4:bb:2c:
00:19:63:c4:12:ca:76:fa:a7:11:e1:33:ef:fb:bd:
cc:97:d3:3b:78:c5:0c:ac:c1:f3:f5:0a:e6:d2:36:
80:8e:48:1c:ae:77:4d:01:fb:ff:ac:07:ba:82:c6:
67:b1:09:fe:cd:c5:74:89:c3:ea:75:4d:9f:4a:b7:
a3:f4:bd:c7:2c:3b:7b:83:7b:ea:ab:34:b6:a0:ab:
cc:81:1d:b7:ad:6f:4c:25:3c:eb:59:b7:e8:02:38:
15:f9:57:bb:20:45:2c:6c:6b:fe:af:29:39:b7:0b:
cb:c2:8b:13:52:d0:f4:66:4e:6b:11:fe:1e:77:97:
65:c0:02:1f:e3:a4:5e:6a:af:37:94:7d:5d:e8:6c:
a1:35:ed:0d:59:95:8b:45:8c:26:5b:d4:f3:35:b0:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1A:93:CD:F8:4C:01:02:A7:81:27:0A:85:FC:EE:70:FF:1E:18:AE
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/0RqTzfhMAQKngScKhfzucP8eGK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.176.0.0/19
185.103.144.0/22
IPv6:
2a06:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
73:c4:d5:85:c1:bf:e3:06:92:08:ea:2b:0c:18:76:39:f7:3d:
0b:02:b5:65:44:4b:88:1a:02:51:e4:6d:52:fb:70:9d:2a:ef:
c5:e1:51:ea:17:52:1c:1f:ea:93:93:33:e4:39:b6:72:8d:3d:
be:ac:71:12:c2:d1:65:b5:12:d0:78:db:1a:6d:a6:86:03:e7:
db:09:67:f1:d8:d4:c7:36:c5:8c:d8:39:54:04:09:07:84:fa:
e6:3a:f9:00:c2:7c:f7:00:5e:4f:a6:fc:82:08:bf:52:36:96:
8e:ec:67:1d:1b:0d:2d:71:dd:60:a7:c8:e6:09:3a:77:b2:c3:
02:68:4f:4e:c1:36:ef:4a:87:5d:fe:f3:72:2f:38:6f:01:e7:
1c:1c:4b:ff:f7:63:3b:f6:cc:73:6b:a5:ea:6c:a3:c5:81:68:
4d:b9:4e:84:eb:21:0d:8f:8f:c7:b8:ee:a9:be:bd:9e:61:65:
ab:64:63:a1:7e:dd:99:b9:99:58:9c:6e:3e:bf:2d:8d:63:9f:
12:60:fc:71:29:16:83:c3:08:bb:c9:91:1a:c3:cd:c4:c8:c3:
ad:a8:d8:9b:b7:49:41:ed:79:7e:72:c3:6b:a6:ef:3c:77:3b:
c6:7b:bd:b2:b9:69:35:9a:e4:d4:70:73:f2:a0:79:73:8d:a0:
e2:7f:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:43 2023 by rpki-client on console-ams.rpki-client.org