Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rT85UXYOvN-jLoSt0p5a9mDYADE.roa
File: rT85UXYOvN-jLoSt0p5a9mDYADE.roa (raw, json)
Hash identifier: YFDLGc5mG8/QqJuS0/thAwBgeRh1mmTIQZeVYbZX8VI=
Subject key identifier: AD:3F:39:51:76:0E:BC:DF:A3:2E:84:AD:D2:9E:5A:F6:60:D8:00:31
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 020C50E3
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rT85UXYOvN-jLoSt0p5a9mDYADE.roa
Signing time: Mon 28 Feb 2022 21:11:45 +0000
ROA not before: Mon 28 Feb 2022 21:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.22.57.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34361571 (0x20c50e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 28 21:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad3f3951760ebcdfa32e84add29e5af660d80031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:68:33:48:8d:19:5d:81:d8:7f:76:46:82:6a:
53:29:b5:e1:0a:49:5e:ef:bd:c3:ed:9c:13:a0:ab:
a6:d8:9e:36:6b:73:82:e6:cc:22:67:6d:74:3d:9f:
57:1f:cf:c2:5d:4e:5a:e4:8c:3c:37:85:1d:a8:e7:
c2:b8:93:d8:99:49:d0:94:17:f1:b4:bf:f5:a0:94:
e5:40:5f:9c:85:84:2b:ec:5a:57:dc:92:e3:7f:d5:
24:20:49:a2:5d:10:cb:ea:66:25:94:27:ac:d8:fe:
80:bd:ac:dc:4c:e2:c7:42:e2:1a:d4:2f:25:52:de:
73:dd:33:e0:6e:83:80:11:c6:e9:08:b2:ef:c1:25:
58:0e:e4:c0:cf:a0:56:14:0c:8e:98:42:15:cb:b0:
68:2e:fa:51:d5:af:ee:86:e9:f6:e4:9f:4e:c5:2e:
f6:ff:af:7d:e3:d0:23:bc:25:7d:e9:3f:59:68:9d:
e1:64:b1:00:5e:43:71:98:01:ef:9b:63:30:e0:28:
07:43:14:78:f6:55:9b:8b:05:73:1a:4e:7f:78:6f:
3f:f3:13:cc:14:96:21:e0:1c:30:94:a0:f9:2a:d8:
ed:69:33:ae:e8:a9:99:84:b3:1e:21:ab:c1:8b:31:
aa:27:c5:f9:bb:82:ec:89:9f:26:77:96:3c:0e:dd:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:39:51:76:0E:BC:DF:A3:2E:84:AD:D2:9E:5A:F6:60:D8:00:31
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/rT85UXYOvN-jLoSt0p5a9mDYADE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.57.0-185.22.58.255
Signature Algorithm: sha256WithRSAEncryption
7e:61:26:61:55:19:98:33:30:26:ea:2a:2c:96:82:eb:46:67:
0d:53:73:67:71:c1:9a:9d:85:a0:ca:e4:fb:42:9e:3b:64:51:
4f:14:0e:4c:98:4e:fd:53:48:16:b8:64:52:a7:2c:3e:e2:39:
0c:ac:47:43:97:f9:33:42:71:84:73:bb:12:11:69:c1:56:b9:
4d:b1:31:2c:9f:6c:70:52:c7:fb:82:d4:9d:84:b2:24:44:35:
77:a4:37:c4:55:62:23:7c:6f:13:55:a0:a8:c5:78:91:c2:8a:
97:36:2b:38:89:89:fd:9d:da:ba:f4:ce:43:c6:9b:53:71:7c:
e3:5d:ac:93:d9:5c:01:ca:e5:58:82:6d:56:34:a5:cd:dc:32:
0b:7a:8b:5b:52:ab:6d:ba:2b:cb:7a:74:4b:b6:28:ff:88:c6:
9e:40:eb:42:42:74:57:8f:af:90:82:f3:fb:cd:2b:b5:7e:60:
d6:0d:06:07:b6:45:5c:2d:cc:70:1d:57:bd:10:f1:d5:59:2a:
29:ce:4d:6a:4a:da:b8:8a:be:9d:a3:e5:6b:ba:56:9d:3e:e8:
ae:94:6b:4f:9b:a6:bb:22:75:84:94:dd:eb:34:f4:1c:9a:14:
9f:a9:ec:1a:63:f3:f3:35:8d:12:75:c6:f1:81:0f:01:f4:ed:
e5:b5:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org