Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/enxfGVD2dY3zK3J_O1SkObITf10.roa
File: enxfGVD2dY3zK3J_O1SkObITf10.roa (raw, json)
Hash identifier: QwX7t2HxSfwE36PfBH/MGxrCbzTlFeXqKMoNEwuV92w=
Subject key identifier: 7A:7C:5F:19:50:F6:75:8D:F3:2B:72:7F:3B:54:A4:39:B2:13:7F:5D
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 07D6FC6B
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/enxfGVD2dY3zK3J_O1SkObITf10.roa
Signing time: Sat 01 Jan 2022 10:56:59 +0000
ROA not before: Sat 01 Jan 2022 10:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59891
IP address blocks: 185.73.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131529835 (0x7d6fc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 1 10:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a7c5f1950f6758df32b727f3b54a439b2137f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:29:e7:5e:e7:16:25:e6:eb:76:92:07:7e:
4c:a2:49:23:ee:cb:af:72:0e:7e:61:e9:7e:6a:37:
0c:72:98:dd:ad:5c:40:21:71:f3:fb:7b:21:f7:70:
a6:9a:1c:92:24:83:cd:7a:65:fe:24:27:77:d6:21:
65:7f:53:db:bf:23:38:63:a2:9f:88:59:f8:63:87:
7f:c3:98:79:97:59:88:df:16:44:0c:e1:ca:6b:79:
80:fd:69:8f:2c:7d:ce:26:2d:d7:d8:af:07:cc:46:
e4:78:47:2b:0e:b1:df:c3:ec:c3:56:9d:79:17:44:
5e:02:04:2e:a6:c4:b6:31:8e:f2:0e:73:92:14:11:
df:22:1c:c1:97:c3:c1:95:57:04:0e:ce:fa:87:58:
c8:c9:45:61:a3:c6:72:0e:01:ca:7d:dc:c6:98:13:
96:83:1c:4f:14:77:e9:c8:b1:8e:c5:dc:e8:07:f2:
12:0a:20:10:9d:a5:fc:f7:39:67:51:b4:55:9a:9e:
77:7c:e9:f5:c2:61:db:ee:4d:84:9d:f0:9d:9c:48:
93:18:90:30:dc:28:5e:7b:e2:54:33:11:27:54:f4:
d5:8d:7e:27:52:8f:19:41:02:b6:58:69:79:42:df:
52:9b:bb:e8:ad:58:6a:b4:bb:5c:77:e9:5c:36:c8:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:5F:19:50:F6:75:8D:F3:2B:72:7F:3B:54:A4:39:B2:13:7F:5D
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/enxfGVD2dY3zK3J_O1SkObITf10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.242.0/24
Signature Algorithm: sha256WithRSAEncryption
35:47:22:37:ab:37:59:33:cd:84:fe:47:30:ad:52:28:ff:0d:
96:7f:64:95:51:0e:8d:b3:e2:f3:17:56:ea:2f:b1:d4:e5:11:
1e:4a:88:8f:b2:c0:0e:d4:ab:51:5e:36:77:b2:1e:21:04:64:
9b:34:bc:41:c1:2d:8b:7d:5c:b7:07:90:53:80:6a:6f:6a:41:
a6:9b:63:3b:1f:77:6b:07:cd:d0:5c:de:b3:b3:55:aa:61:14:
b3:8a:fd:ac:af:e6:5f:0e:4d:67:34:6e:26:8e:f3:40:7e:27:
6e:f9:dc:1d:97:1e:ec:f6:30:ec:ed:20:8c:dc:48:b7:ed:18:
65:7d:e0:88:e3:d5:17:04:69:06:cc:90:08:7b:06:aa:d3:e3:
a0:b0:08:0b:c6:33:bb:7f:83:91:b3:a2:78:98:5f:47:7b:f0:
c9:7d:eb:17:8e:96:d2:4a:62:60:64:fa:11:48:35:45:ab:e6:
b8:19:7d:a0:81:33:2a:3e:73:92:d8:9f:a6:39:64:33:21:a2:
80:46:aa:f0:06:c2:f5:58:20:c9:3a:be:6d:13:6d:c8:c2:42:
d6:b8:85:f0:95:46:0b:31:0e:91:aa:20:4a:dd:7c:2c:e0:06:
73:3a:8d:7f:01:85:75:77:a0:75:2b:6d:ef:08:1b:0b:78:26:
fd:21:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:59 2023 by rpki-client on console-ams.rpki-client.org