Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/o3OTTrADImpzb38gt4KKWpzt2MM.roa
File: o3OTTrADImpzb38gt4KKWpzt2MM.roa (raw, json)
Hash identifier: LzPAzNtWktf9XKmMBeeoeS5wIQ+QPyRzhfj3QvmnqB0=
Subject key identifier: A3:73:93:4E:B0:03:22:6A:73:6F:7F:20:B7:82:8A:5A:9C:ED:D8:C3
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 30394B65
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/o3OTTrADImpzb38gt4KKWpzt2MM.roa
Signing time: Sat 01 Jan 2022 09:04:15 +0000
ROA not before: Sat 01 Jan 2022 09:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199643
IP address blocks: 185.7.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 809061221 (0x30394b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 1 09:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a373934eb003226a736f7f20b7828a5a9cedd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:43:ce:e8:65:42:15:ad:b1:fc:97:30:75:
53:4e:1a:7d:9a:78:e0:19:86:e0:b1:18:a2:58:7a:
55:c1:61:c0:21:3d:3e:03:d9:04:2a:1f:99:c5:f4:
9f:4c:cd:a5:0a:7d:cc:dd:af:0b:fa:91:e8:1a:12:
fb:79:e5:29:47:a8:10:1c:1b:ad:8b:14:cc:56:5e:
a7:a8:c8:b0:ab:54:75:7c:47:b6:ad:8e:4b:5b:68:
29:ab:6b:98:84:d8:1d:97:ad:66:7b:77:d9:b9:3a:
31:f4:8e:02:42:8b:11:fe:da:92:ae:c5:b0:dd:dc:
40:58:a6:f1:a7:7e:3b:5a:d9:c0:67:d8:ae:b8:21:
ef:9f:a7:54:a2:09:06:8c:dd:08:c3:f8:86:21:fe:
9d:de:b8:69:98:fc:41:be:ab:8b:ee:3f:4f:31:9f:
97:30:92:29:4e:ad:e8:90:14:ab:86:b0:31:0c:43:
a7:b2:e8:a8:2b:c4:4f:e5:08:3a:df:7e:98:b6:cf:
80:84:bc:86:f7:f3:e6:8a:6a:95:c4:5c:79:31:a2:
bd:ba:b9:7c:c1:51:93:fa:29:7f:24:40:ce:e1:70:
08:f1:55:da:c3:9b:6d:b5:a0:c8:e3:9a:19:8e:ff:
d4:a5:0d:57:6e:ed:ca:d0:4c:ae:87:49:60:f4:6b:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:93:4E:B0:03:22:6A:73:6F:7F:20:B7:82:8A:5A:9C:ED:D8:C3
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/o3OTTrADImpzb38gt4KKWpzt2MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fe:2f:77:5b:61:02:be:2b:df:85:55:4c:5a:69:12:e9:42:
8e:a1:36:24:44:b0:0a:57:6e:81:d5:7d:20:87:d4:71:d5:7a:
cc:ee:05:8e:d2:56:43:ad:70:36:64:28:a8:4c:34:f2:96:5f:
72:0b:0e:2a:b5:6d:6a:c6:9f:c1:13:59:a8:df:74:e0:2f:0c:
cc:f2:3c:24:9d:c2:59:fa:b5:59:24:11:59:e6:4b:e1:da:da:
ed:3f:f1:33:32:6c:4f:54:1e:42:77:46:5e:8e:87:2a:f5:21:
f6:3c:95:d6:69:fd:e6:10:f1:20:0d:31:20:e4:e4:ba:18:95:
0c:86:10:a0:4f:4a:6c:15:d3:24:be:e8:5c:1d:58:5d:50:c3:
19:b7:29:55:bf:65:c1:a8:52:af:54:c8:4b:e9:6f:4a:94:49:
cb:af:35:58:42:ef:11:92:b0:1e:b3:d3:9f:c1:ee:85:7a:32:
b8:91:d3:44:cb:6d:96:34:4b:3c:17:23:50:7f:ee:6d:c5:b2:
3b:41:6f:46:0f:a1:6b:de:69:29:e4:5f:8f:4b:b1:12:3f:bd:
72:07:b5:a7:3a:c8:07:ed:12:cc:fe:14:ea:23:2b:bd:60:44:
24:d3:71:3b:f2:d3:0a:ce:73:93:c2:d1:cf:63:6d:c3:a6:a0:
98:3d:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org