Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/PLqh1n1DzV0b8aPtxmVytVCbEJU.roa
File: PLqh1n1DzV0b8aPtxmVytVCbEJU.roa (raw, json)
Hash identifier: 1EUADci/EJmJlFdGFc46x8fdJP+exy+4FumzyN4KLE4=
Subject key identifier: 3C:BA:A1:D6:7D:43:CD:5D:1B:F1:A3:ED:C6:65:72:B5:50:9B:10:95
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A049EC4
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/PLqh1n1DzV0b8aPtxmVytVCbEJU.roa
Signing time: Sat 01 Jan 2022 14:00:38 +0000
ROA not before: Sat 01 Jan 2022 14:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200115
IP address blocks: 85.219.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973381316 (0x3a049ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cbaa1d67d43cd5d1bf1a3edc66572b5509b1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:0d:fa:9c:bd:06:1b:50:bf:e0:08:c7:49:
e3:8f:65:77:ac:99:8d:f5:a9:c2:f7:ec:e2:5a:a4:
cb:29:67:b6:41:6c:2c:af:75:bd:b1:ab:42:f6:6c:
a1:9d:31:11:21:3a:17:88:bb:d4:02:43:fa:31:6a:
da:8a:67:c7:84:0b:4a:56:68:1f:b6:85:61:28:9b:
d2:84:d0:b0:1b:62:50:04:68:4c:17:fa:f6:1f:34:
7c:35:77:cc:f6:db:37:dc:7c:e9:51:c8:8b:dd:b8:
de:4a:35:03:df:3a:6a:c2:87:6b:c9:2b:20:4b:05:
cb:0d:f2:99:c0:98:67:33:56:17:9e:9c:d7:0a:9f:
68:68:d8:f3:26:e9:1a:63:4e:f1:d4:2d:51:f1:93:
5f:88:5f:a9:da:7c:f3:44:95:e7:5e:68:ad:79:00:
e9:84:1f:e2:e6:d0:36:b8:5c:19:3a:5b:27:7b:5c:
74:7b:2f:6d:22:e2:91:53:81:98:04:a4:9a:12:20:
f0:d9:e3:72:09:04:30:d7:68:62:0a:62:63:1a:48:
16:25:b1:44:4f:55:7f:92:bc:57:8c:e6:30:16:b0:
dc:ab:a8:71:48:f6:c8:62:20:b1:99:c7:34:86:a5:
d1:da:f6:f6:f2:70:3a:f9:01:77:fa:e2:01:21:5b:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:A1:D6:7D:43:CD:5D:1B:F1:A3:ED:C6:65:72:B5:50:9B:10:95
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/PLqh1n1DzV0b8aPtxmVytVCbEJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.173.0/24
Signature Algorithm: sha256WithRSAEncryption
85:6b:7b:5b:df:ed:f9:f9:f5:54:80:7f:9e:a6:06:51:14:f8:
e8:85:db:f0:7d:7d:24:53:13:38:04:b9:3b:69:d8:60:ee:d3:
3b:b9:9e:51:ce:42:8f:4c:4c:35:ae:64:7b:d5:5b:46:15:fa:
ff:42:a9:b9:f6:82:e0:38:be:73:f8:a1:7d:9a:94:cd:46:8c:
0c:e0:71:c4:74:2c:d4:81:54:c4:c5:c6:eb:ba:68:84:28:63:
35:6f:dd:e4:2f:2f:ab:e1:c4:52:e8:6c:cf:41:53:f6:91:ae:
ee:45:d8:9f:4c:1b:db:70:f4:24:83:f7:9f:e3:f6:78:88:d1:
f5:f1:11:7f:03:03:4b:f1:eb:0b:7f:6f:56:dd:9d:ce:63:8d:
ca:b5:5d:9e:56:54:a7:e2:47:0b:40:0a:9e:d9:81:1d:f6:26:
f5:f3:37:3e:83:bb:3f:f4:b2:f4:7d:74:6d:3d:bb:ed:02:61:
88:e2:87:01:b5:58:c4:34:3c:ca:47:f5:1f:74:8d:2a:25:71:
f3:94:fd:cf:99:fe:76:53:1d:d3:e6:11:4b:ee:04:cd:0a:89:
1a:d5:27:43:de:e7:e3:f7:fe:4c:41:e4:9c:e0:4c:91:37:17:
c7:4a:f4:89:58:05:35:db:bd:f4:43:84:58:92:8e:ef:97:b2:
6a:34:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-ams.rpki-client.org