Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/RtjrAUie-QB75USb4FDct0_gSq0.roa
File: RtjrAUie-QB75USb4FDct0_gSq0.roa (raw, json)
Hash identifier: jKSAzsCVLMOJqqVQCAwi+llIqRwIFXsXhFae9/w48fU=
Subject key identifier: 46:D8:EB:01:48:9E:F9:00:7B:E5:44:9B:E0:50:DC:B7:4F:E0:4A:AD
Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial: 01821B3E98123E657945332453F76568025E
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/RtjrAUie-QB75USb4FDct0_gSq0.roa
Signing time: Wed 20 Jul 2022 10:54:23 +0000
ROA not before: Wed 20 Jul 2022 10:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 185.238.212.0/23 maxlen: 24
185.238.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:3e:98:12:3e:65:79:45:33:24:53:f7:65:68:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Validity
Not Before: Jul 20 10:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46d8eb01489ef9007be5449be050dcb74fe04aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:20:b8:cb:cc:7f:81:1d:8e:c8:4b:68:aa:
a4:ed:7a:69:29:cd:e1:75:cd:72:4a:42:8e:05:8d:
66:14:52:f9:8c:91:b9:6c:18:d4:d5:71:f9:74:d1:
a0:87:97:e9:50:0c:a2:83:21:7f:b9:0b:e5:48:eb:
5c:71:5e:8b:62:3c:02:16:55:b5:b9:c8:fe:6c:f8:
4c:18:84:ec:31:a7:a5:03:66:3d:1b:a4:7e:bc:5d:
df:d9:29:ee:f3:71:57:de:12:5f:dd:11:29:be:d2:
27:ad:25:ac:01:c1:77:ea:ed:34:d0:11:c0:27:6c:
2c:80:47:6b:ad:cd:80:b4:74:d8:ca:01:bd:17:31:
02:be:79:ae:52:c1:d4:8d:86:6e:ac:41:f2:18:30:
3d:80:62:e7:ec:70:54:2e:a7:71:20:2f:e9:84:85:
a8:bc:d6:df:93:b2:27:50:21:9a:bf:65:59:09:ad:
4c:d2:31:38:c6:5a:19:1f:3a:d0:37:48:df:5b:11:
51:a9:eb:b2:18:3f:19:b1:9a:94:07:c7:a8:3e:2c:
cc:6d:a4:40:4f:63:a6:88:c3:d9:f4:0e:88:53:ce:
9c:47:4c:3b:4d:f6:81:70:67:ce:b6:10:d7:2e:ca:
5a:b1:50:9b:45:c7:15:7d:88:1c:b8:15:03:75:01:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D8:EB:01:48:9E:F9:00:7B:E5:44:9B:E0:50:DC:B7:4F:E0:4A:AD
X509v3 Authority Key Identifier:
keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/RtjrAUie-QB75USb4FDct0_gSq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:87:f1:6f:89:c8:50:84:b5:af:a6:83:3f:8c:e4:2e:08:1c:
50:3f:1e:c8:f7:81:06:37:6f:a9:ba:26:29:d7:c1:e3:4e:e9:
33:6c:bc:41:56:2a:d3:9e:21:4b:38:6f:dd:17:8a:56:17:93:
e6:2f:cf:6a:6f:1b:0c:f3:0d:03:02:ae:8c:0e:99:8e:aa:83:
b7:20:63:71:c0:d6:95:3c:79:a7:18:60:12:06:d8:e3:62:8f:
eb:5d:26:af:91:e2:04:fb:36:af:2e:78:6d:c6:01:ae:45:c4:
77:36:a1:6c:fa:36:a3:94:2b:63:6a:42:a5:3e:84:4d:c6:c9:
c8:67:6b:04:08:72:1c:aa:c1:23:1b:32:21:3c:da:3f:65:05:
16:09:0d:7d:0d:41:58:7c:58:5f:6f:4b:70:fd:66:82:fe:6e:
69:8d:76:72:21:73:65:35:84:5f:48:9b:0d:a2:38:39:43:d8:
f8:5b:98:46:d5:af:82:94:31:87:9e:4a:43:09:88:b9:b1:fb:
d1:a7:85:c4:10:46:1d:95:32:0a:a2:11:f9:28:fd:6f:e8:e5:
df:ea:db:d8:76:65:8f:4c:c6:8c:bb:b5:ba:7d:fc:d3:b8:a2:
94:17:a3:a1:96:fc:79:68:be:39:b2:2a:01:17:46:72:8e:1f:
d4:34:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-fra.rpki-client.org