Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/CONwnUkAKfLUJrUUZQh7gHQaMuc.roa
File: CONwnUkAKfLUJrUUZQh7gHQaMuc.roa (raw, json)
Hash identifier: rd/u84bYlILOCDj6IABN3FCZeIXmpLfwuGZfxg6DnOs=
Subject key identifier: 08:E3:70:9D:49:00:29:F2:D4:26:B5:14:65:08:7B:80:74:1A:32:E7
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 0195B240
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/CONwnUkAKfLUJrUUZQh7gHQaMuc.roa
Signing time: Mon 10 Jan 2022 17:49:47 +0000
ROA not before: Mon 10 Jan 2022 17:49:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.22.57.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26587712 (0x195b240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 10 17:49:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e3709d490029f2d426b51465087b80741a32e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:65:a7:bd:38:74:29:8f:7c:6b:ef:36:c2:
56:24:a6:2b:fd:6c:4f:41:f3:cc:0e:20:26:ba:b9:
0e:db:05:3c:7f:05:ac:83:1c:b2:f9:c8:3b:d9:33:
1f:4f:84:50:78:42:0e:c4:b2:f8:7a:e3:f8:27:c0:
b7:0d:32:14:99:b3:79:e1:8e:05:14:2a:c5:a9:82:
ab:15:a4:b8:04:69:58:b7:1a:88:ff:d6:a1:14:0a:
41:ee:f4:47:77:1f:63:6c:f2:8d:ea:62:98:58:2e:
ed:5d:d3:1b:e8:06:d7:11:d7:3e:37:26:92:05:3e:
fc:ca:83:c0:35:73:5b:14:68:a9:c4:46:2e:f7:d7:
e2:95:25:f5:8f:e5:90:1d:ed:ce:7d:6f:69:5f:70:
36:60:b3:61:45:7d:de:aa:8a:d3:b3:14:07:58:68:
83:e5:f7:70:60:a7:70:b3:73:97:57:59:9f:09:ac:
4c:6f:58:46:b2:c1:90:32:5a:24:c7:5e:b6:7c:3d:
a8:28:a6:07:8a:f6:d9:95:c0:1f:b7:d2:9f:54:a0:
8a:fe:f1:37:5f:2a:46:f0:e8:98:74:88:ca:73:bb:
58:06:cb:6a:8e:ee:ac:94:db:d5:d2:0f:2a:f2:26:
66:f1:0f:3e:9d:2f:89:11:ff:09:ce:9f:e2:2c:43:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E3:70:9D:49:00:29:F2:D4:26:B5:14:65:08:7B:80:74:1A:32:E7
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/CONwnUkAKfLUJrUUZQh7gHQaMuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.57.0-185.22.59.255
Signature Algorithm: sha256WithRSAEncryption
6a:c8:66:30:65:f9:05:57:5b:ea:f2:71:56:69:8b:be:ae:5b:
66:13:d7:d4:08:a2:7c:18:5d:a9:31:f8:ff:c0:98:95:16:0a:
52:46:db:16:7f:86:31:c2:22:9b:79:23:9e:31:d4:99:af:77:
c0:b0:79:b5:18:03:7f:71:03:d8:33:e0:cf:e6:24:79:0f:b0:
ad:0b:5f:ca:e3:d8:71:8f:31:5d:24:e4:96:fb:ea:e1:22:8e:
34:9a:a5:76:b5:47:55:13:24:30:16:10:5c:c5:94:d6:63:24:
53:65:96:50:65:4f:f4:25:ae:95:bf:e4:c8:73:0d:9c:31:e6:
4d:03:2d:13:f1:de:66:06:86:32:3e:74:cf:58:33:cc:72:7b:
57:16:69:40:96:08:62:31:aa:a3:96:07:04:e5:b8:76:d9:8e:
d6:ca:2c:cd:7c:5c:b6:ca:f2:23:26:8b:5d:e5:f7:d0:c2:0e:
b4:e1:e8:ea:2c:5a:5a:cc:45:6b:c1:ed:1a:31:5a:ef:70:55:
8e:a9:99:96:60:e7:b5:38:92:f5:a2:ca:5d:6d:cc:a9:79:15:
c6:96:f8:08:7d:21:8f:d3:f3:21:19:72:cd:31:71:8f:4b:d7:
fc:8e:6b:13:9e:b3:cf:64:71:d5:d0:28:b2:e9:90:f5:4a:0d:
fd:5e:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org