Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/OzSXaiuQ1FjJsHRC-KaT2oI-Xvk.roa
File: OzSXaiuQ1FjJsHRC-KaT2oI-Xvk.roa (raw, json)
Hash identifier: e0RI3fDtCtmmQytVRu5JsJf0bCmPMvYBRWOOm844kH8=
Subject key identifier: 3B:34:97:6A:2B:90:D4:58:C9:B0:74:42:F8:A6:93:DA:82:3E:5E:F9
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 0423998C
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/OzSXaiuQ1FjJsHRC-KaT2oI-Xvk.roa
Signing time: Sat 01 Jan 2022 05:57:21 +0000
ROA not before: Sat 01 Jan 2022 05:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 185.164.64.0/23 maxlen: 24
84.252.84.0/23 maxlen: 24
84.252.86.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69441932 (0x423998c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 1 05:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b34976a2b90d458c9b07442f8a693da823e5ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:90:54:13:68:78:58:06:b8:5b:b4:fb:64:
52:35:13:e6:72:a0:12:56:e9:49:de:99:73:10:43:
c5:c4:10:c2:c4:b8:93:7a:08:db:d1:5b:72:32:63:
98:fc:f7:66:4f:ef:c2:17:5f:4f:94:95:be:a9:8b:
ba:97:7f:ec:91:27:b5:7a:e4:42:fc:0d:f0:e4:c8:
0f:06:b6:24:e6:d0:57:cf:33:34:23:0d:db:62:5a:
56:7d:b5:ca:2b:ec:ce:a6:60:c9:d9:ce:13:cf:fa:
7a:83:5c:27:bc:99:ab:55:7c:a4:a5:a8:cf:17:5b:
61:2c:c6:6d:21:47:24:8f:ef:39:01:f1:89:2f:d6:
21:96:12:9a:4f:eb:23:a6:03:b3:ae:cb:2f:f8:ae:
ef:3d:ce:6f:f6:74:ea:7b:28:6c:9b:9e:54:1d:8d:
70:cd:21:24:72:a6:f2:0f:ce:91:d6:a9:6a:d5:bd:
06:58:54:cc:be:2e:72:02:5c:6b:e8:84:f6:cf:2b:
94:26:5e:29:d1:14:b2:85:7f:f1:30:c2:02:1f:a1:
0f:10:87:20:74:30:ec:6c:09:da:04:6d:be:21:20:
79:55:b2:b9:f9:96:bc:58:48:d9:a5:ad:a6:e0:76:
27:e2:c0:6a:19:e3:c2:51:55:dd:12:96:37:d3:d8:
4d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:34:97:6A:2B:90:D4:58:C9:B0:74:42:F8:A6:93:DA:82:3E:5E:F9
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/OzSXaiuQ1FjJsHRC-KaT2oI-Xvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.84.0/22
185.164.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:cb:34:b4:7f:ea:d4:3b:2a:65:5a:83:8c:ea:6c:63:b3:85:
e5:19:33:f2:d9:0a:78:15:1c:96:1b:fd:9d:e3:43:88:66:8d:
c6:96:ad:5a:31:8a:ae:76:a2:56:1e:5f:a0:1c:8d:60:96:3d:
a0:cd:f4:fc:fe:ee:8f:c9:8a:b5:78:af:42:69:f8:5a:39:f1:
fb:cf:ad:c3:ae:26:aa:9f:8b:b7:ac:07:88:39:11:3f:78:a9:
e5:66:6f:c3:ff:fb:34:8f:26:33:2d:85:d5:d0:e3:ca:66:6f:
69:62:95:f2:0d:42:28:6f:d5:77:6b:e5:8f:ac:95:fd:26:bf:
fe:34:07:b2:fa:00:06:2f:8a:cd:fc:34:ad:bc:6b:56:b8:6b:
69:23:a4:2e:83:ef:e9:2c:b7:d5:a3:fd:ba:0b:24:84:10:5d:
b1:3c:2d:fe:81:ec:af:fe:47:95:f4:b5:c7:00:ef:a1:3c:2a:
55:c7:c1:74:ba:76:a9:67:74:26:f4:5d:6c:fd:16:67:2d:d1:
d9:05:4f:f7:f9:7c:94:0b:e0:64:d7:85:b0:d7:18:ec:54:0b:
4f:d5:ac:2c:dd:f5:a6:c8:4f:43:a4:3c:87:b3:b3:e2:25:34:
0e:ef:44:e8:2b:db:11:a5:91:1e:38:7f:7c:7d:0e:d1:1b:1c:
8b:7e:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org