Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/Qf4MYLlVOjbT8eNoIL38iDerI0w.roa
File: Qf4MYLlVOjbT8eNoIL38iDerI0w.roa (raw, json)
Hash identifier: 7Tb/gPN+qkamgGaGqG0dRFu+S+MceRsnkqIaFZQ9wqY=
Subject key identifier: 41:FE:0C:60:B9:55:3A:36:D3:F1:E3:68:20:BD:FC:88:37:AB:23:4C
Certificate issuer: /CN=019b3116ee4b29d1c6b54f29b80efd92bcc01190
Certificate serial: 0F5AC64C
Authority key identifier: 01:9B:31:16:EE:4B:29:D1:C6:B5:4F:29:B8:0E:FD:92:BC:C0:11:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZsxFu5LKdHGtU8puA79krzAEZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/Qf4MYLlVOjbT8eNoIL38iDerI0w.roa
Signing time: Sat 01 Jan 2022 14:05:44 +0000
ROA not before: Sat 01 Jan 2022 14:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35280
IP address blocks: 185.196.72.0/24 maxlen: 24
185.196.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257607244 (0xf5ac64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019b3116ee4b29d1c6b54f29b80efd92bcc01190
Validity
Not Before: Jan 1 14:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41fe0c60b9553a36d3f1e36820bdfc8837ab234c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:4e:67:3f:1e:e0:3d:0a:fc:9d:07:4c:07:
6c:e4:70:81:eb:9e:cb:60:64:b4:0b:e0:b1:fd:f1:
dc:31:40:0f:2d:90:1c:ab:0f:ae:f7:a3:fe:97:e8:
b0:af:c5:60:33:11:e5:5a:8f:52:4a:69:4c:f4:c8:
85:ef:cb:46:77:6a:30:41:3a:01:94:81:d5:68:0d:
30:e1:1d:6c:5f:e4:73:3e:b9:db:ec:09:3b:85:04:
71:02:22:9e:14:44:7e:cf:1d:41:6d:4d:ae:01:c6:
6f:a2:c2:74:ec:c1:e8:d4:3a:00:18:0b:18:2b:66:
9f:67:b6:88:6a:c9:a9:7d:6f:1c:77:b8:f4:4a:aa:
a1:2a:73:fd:80:eb:50:03:17:4b:b2:9a:b4:83:2d:
5a:b2:49:6c:73:6f:e9:1d:05:a3:cd:1f:f8:e5:51:
29:f6:a8:9a:27:5a:99:37:27:71:b9:62:3a:54:4e:
85:b2:fb:89:a7:c8:d1:39:bc:6d:bc:d7:df:25:03:
5a:da:32:f1:56:1d:bc:6b:3d:cd:82:c8:95:27:3c:
4b:78:bd:38:12:25:ea:8f:20:04:52:43:f7:fb:a6:
d7:d9:25:a7:da:e3:33:f6:e0:b6:74:4c:55:b4:ca:
d3:69:ce:a9:12:78:f7:f3:d7:7b:85:96:f1:63:6a:
d6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FE:0C:60:B9:55:3A:36:D3:F1:E3:68:20:BD:FC:88:37:AB:23:4C
X509v3 Authority Key Identifier:
keyid:01:9B:31:16:EE:4B:29:D1:C6:B5:4F:29:B8:0E:FD:92:BC:C0:11:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZsxFu5LKdHGtU8puA79krzAEZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/Qf4MYLlVOjbT8eNoIL38iDerI0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f5dd4b-bd74-48cb-b468-7c6afd085c4e/1/AZsxFu5LKdHGtU8puA79krzAEZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.72.0/24
185.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:16:a1:eb:20:10:ec:b7:b0:5e:d8:8a:ce:2f:4f:44:41:3f:
43:b2:0f:ed:75:de:74:35:3c:90:40:a7:65:c3:18:4e:0d:ae:
3c:d7:e2:09:7a:a5:24:39:55:ca:18:e2:3d:1f:e0:9f:05:3c:
d9:56:92:01:84:9f:eb:37:48:dd:72:69:a9:10:11:62:3c:d5:
8a:3c:04:96:6a:cf:39:e8:ef:c4:bd:4d:a0:12:06:88:95:19:
95:18:b8:56:8d:4d:1a:79:9b:7c:15:7d:1e:3c:42:0d:db:fd:
e8:fd:95:bc:41:9c:68:24:4f:98:dd:cd:ab:7e:ac:13:1a:7f:
be:15:2c:1c:5e:ad:9e:b1:81:ac:02:d5:1e:4d:aa:13:73:81:
03:55:ee:c9:90:9d:6e:69:92:e0:3d:c8:f1:62:7d:5c:ac:9b:
02:63:f5:db:fb:56:49:1a:0d:b2:da:39:d3:e9:61:6e:97:bb:
f6:b4:29:d5:cb:40:0c:d8:32:76:2b:90:4f:4c:86:c5:45:f7:
7b:47:b0:c4:43:0d:6a:82:45:c2:66:94:fd:17:ba:15:1a:0b:
2c:a8:22:50:45:30:a2:8c:9b:32:f1:50:dc:46:c9:7d:46:7f:
d0:ac:54:3d:66:bb:11:53:2f:4f:be:c9:9b:e1:34:c0:3d:db:
1b:2a:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:11 2023 by rpki-client on console-ams.rpki-client.org