Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/ob2Ld-7wJiAmto4b31gyD81PZaA.roa
File: ob2Ld-7wJiAmto4b31gyD81PZaA.roa (raw, json)
Hash identifier: umgCklz12G4fsBkNcsx0r5PX1Lqwh/T8I2I5owsfZhE=
Subject key identifier: A1:BD:8B:77:EE:F0:26:20:26:B6:8E:1B:DF:58:32:0F:CD:4F:65:A0
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 0182C520C77A778BBADCD4CAA6527C577B38
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/ob2Ld-7wJiAmto4b31gyD81PZaA.roa
Signing time: Mon 22 Aug 2022 10:37:15 +0000
ROA not before: Mon 22 Aug 2022 10:37:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213151
IP address blocks: 185.125.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:20:c7:7a:77:8b:ba:dc:d4:ca:a6:52:7c:57:7b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Aug 22 10:37:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1bd8b77eef0262026b68e1bdf58320fcd4f65a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:f6:87:4f:9e:59:e3:80:b0:42:4b:5b:59:
12:a3:e0:e7:ff:d0:9a:1a:3f:ff:e0:35:71:fd:35:
a3:18:8b:6a:90:0e:26:72:9c:4e:6a:a6:f8:d4:c7:
d0:a9:9b:69:9e:ab:69:ea:2b:2a:d8:47:58:37:28:
81:29:bb:1d:41:b2:11:b8:56:8c:8b:07:dd:31:c5:
1d:37:69:9a:3c:66:1c:1f:0c:18:6f:0d:08:6c:37:
fd:29:c5:d9:5c:81:f1:0c:e6:d7:2f:2b:e2:d1:f3:
70:85:fc:7d:a0:2f:82:b1:63:17:f1:ff:85:c9:ba:
49:5d:f2:f9:d9:f6:cf:8e:4a:93:b6:c0:05:f1:f9:
86:c4:47:83:7c:ba:4e:e3:15:0c:98:53:dd:3e:4e:
70:50:b3:04:4a:47:c4:56:12:3e:4d:de:55:be:47:
a9:0a:3f:28:b2:a2:34:64:08:28:38:a8:f4:42:8f:
30:72:04:d5:9d:c8:04:5b:bd:9e:63:e1:5e:db:0b:
65:bd:fc:38:0d:3c:4c:c3:ca:aa:8e:53:0d:ea:41:
67:fd:fb:98:72:35:20:22:f4:11:f6:a5:12:fc:9e:
36:a6:ed:ce:4e:43:d8:3a:a5:64:86:fb:c4:41:1f:
52:97:a8:38:61:79:e3:3b:7a:f0:8f:86:e2:48:af:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:8B:77:EE:F0:26:20:26:B6:8E:1B:DF:58:32:0F:CD:4F:65:A0
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/ob2Ld-7wJiAmto4b31gyD81PZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c0:c7:28:84:ca:a3:0e:d8:01:1d:a6:1c:be:9e:6e:bc:a5:
a8:3c:86:f2:80:88:11:41:47:6b:a8:8c:15:c1:a4:f6:dc:28:
c4:a9:36:de:0c:78:b2:0b:2b:4f:36:9f:a0:07:87:35:c9:bb:
83:d9:68:7a:33:43:4e:59:11:cb:a0:d9:a8:08:7b:7d:36:6f:
d8:99:88:5d:8b:69:c3:19:48:21:b9:eb:71:0d:4f:cd:a4:83:
09:ae:f1:d0:f4:11:67:b8:7d:fe:3c:f6:58:8b:26:a4:e7:72:
33:50:55:a9:e1:66:49:f4:6d:17:0b:7f:97:91:9c:a0:28:09:
12:22:17:3c:03:ed:25:87:d1:39:c7:13:f6:0f:59:f0:51:c7:
64:99:34:00:11:68:20:eb:8f:e9:ad:12:68:39:f9:1e:80:5e:
a5:da:04:a2:0f:61:8f:d3:0f:41:9e:e6:b2:05:e3:5e:34:16:
ca:af:fb:93:85:c6:6c:45:bd:5a:56:4a:34:5d:40:33:43:0f:
94:5c:7e:4b:ba:c6:40:b8:42:fa:a2:a0:c7:b7:36:e1:b5:de:
9b:c9:3c:c1:d0:28:f6:0a:c6:62:ef:ba:f2:e5:10:02:34:78:
f6:fe:2f:4e:eb:b9:f2:c2:9e:79:7b:5b:2f:ba:da:77:66:84:
b9:df:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org