Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/H_gUzDqk8gc2YuXUXnaTKEahOv4.roa
File: H_gUzDqk8gc2YuXUXnaTKEahOv4.roa (raw, json)
Hash identifier: h95yt+tFQnP+cGewgaS2pgjifluQ0uSS3mQXW2/eHDM=
Subject key identifier: 1F:F8:14:CC:3A:A4:F2:07:36:62:E5:D4:5E:76:93:28:46:A1:3A:FE
Certificate issuer: /CN=05285129a41cdc7291b48d35f6f033add5596506
Certificate serial: 01C90825
Authority key identifier: 05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/H_gUzDqk8gc2YuXUXnaTKEahOv4.roa
Signing time: Sat 01 Jan 2022 14:57:50 +0000
ROA not before: Sat 01 Jan 2022 14:57:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41155
IP address blocks: 185.34.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29952037 (0x1c90825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05285129a41cdc7291b48d35f6f033add5596506
Validity
Not Before: Jan 1 14:57:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff814cc3aa4f2073662e5d45e76932846a13afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:af:87:8f:b9:25:e9:41:0d:94:34:2a:5f:
1d:d0:f6:f0:29:27:f7:79:12:88:21:84:4b:fb:27:
38:aa:5f:8d:1a:64:38:48:04:2e:d1:4a:e1:10:39:
91:9c:89:27:e2:a7:a3:ff:85:ce:a4:64:ba:a4:c1:
38:b8:8e:07:6a:e7:3a:30:a4:6b:22:c2:1e:8d:20:
99:6f:26:bc:10:09:94:e8:4d:f0:f7:88:11:16:c1:
ec:4f:d2:c8:ac:51:2d:5d:6e:cc:43:6c:8e:d1:35:
5a:86:26:9c:c8:d9:04:ca:b8:69:b6:0a:55:37:28:
c9:23:6c:fa:8f:a8:27:bc:d8:f9:4b:40:7b:3c:ad:
07:32:bf:33:42:90:c7:77:e8:d9:e9:95:5b:51:a8:
90:55:93:59:e0:74:eb:bf:11:25:cf:21:0b:30:c5:
a7:33:b4:a0:e3:20:74:7b:8c:19:48:e6:a9:80:d3:
cb:87:66:59:8f:b8:63:77:7b:53:31:e5:7b:2d:3e:
cd:dd:65:0d:03:9d:c6:7e:81:c1:62:96:a8:aa:63:
a7:f9:be:b9:87:16:ce:d0:36:d2:32:68:5e:0a:a2:
89:56:74:44:d8:6a:e4:4f:d1:6d:3d:a6:5e:d0:fe:
f9:08:26:28:f9:94:4c:9b:3e:9b:b2:c4:cd:03:87:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:14:CC:3A:A4:F2:07:36:62:E5:D4:5E:76:93:28:46:A1:3A:FE
X509v3 Authority Key Identifier:
keyid:05:28:51:29:A4:1C:DC:72:91:B4:8D:35:F6:F0:33:AD:D5:59:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BShRKaQc3HKRtI019vAzrdVZZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/H_gUzDqk8gc2YuXUXnaTKEahOv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ec2163-7d15-4746-8abb-6e367e7bf6db/1/BShRKaQc3HKRtI019vAzrdVZZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.103.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c3:78:7c:d9:b8:0a:0b:ad:26:e0:b8:fa:cd:ac:1c:dd:ef:
c4:f0:ce:33:36:4c:59:14:20:1f:4f:12:d5:1d:d0:3e:d8:5b:
04:85:16:ab:00:51:04:38:bb:88:66:31:a3:4c:1c:e7:be:59:
58:20:d0:ef:1c:74:83:c6:54:a4:cd:6e:0e:16:2c:04:f8:dd:
c0:ad:2e:e1:d8:9c:3b:c8:e6:1a:d6:87:0a:26:38:97:de:cb:
19:c3:38:4e:f2:b0:84:e0:b8:4b:1c:20:0e:a8:72:11:16:a6:
ce:a6:62:12:07:c9:25:42:5d:b1:02:dc:02:19:23:6b:3a:f3:
a5:f5:d0:10:89:f9:01:4c:0d:0f:96:01:d1:1f:4f:de:ef:87:
23:08:09:29:2b:22:90:44:b8:a3:15:99:13:1d:f4:6a:ac:db:
f3:f6:04:f4:80:08:ff:13:a9:52:8d:58:f7:73:97:9e:ae:10:
1c:de:bf:91:ee:82:6e:47:e4:34:1b:8f:49:df:a3:37:d4:47:
15:b6:38:ed:aa:82:37:83:54:d4:d3:75:1b:71:f3:b9:0e:4c:
7a:05:9b:60:9e:63:4c:e4:ab:fb:f7:fe:8e:e3:ba:72:42:de:
46:e3:53:27:b9:4b:49:85:b5:2f:b4:f7:d3:de:01:a1:41:e4:
0b:ac:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:35 2023 by rpki-client on console-fra.rpki-client.org