Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/axFurOms9LoH7yBFGD_ckFHnAVM.roa
File: axFurOms9LoH7yBFGD_ckFHnAVM.roa (raw, json)
Hash identifier: cm8mEAUPxbX2kzPgX9TSxbhbEZGjAMuGp7WkbUs99kA=
Subject key identifier: 6B:11:6E:AC:E9:AC:F4:BA:07:EF:20:45:18:3F:DC:90:51:E7:01:53
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 01853C09846ABE2D93E70BE3730DB23E9C88
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/axFurOms9LoH7yBFGD_ckFHnAVM.roa
Signing time: Thu 22 Dec 2022 22:52:14 +0000
ROA not before: Thu 22 Dec 2022 22:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.76.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3c:09:84:6a:be:2d:93:e7:0b:e3:73:0d:b2:3e:9c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Dec 22 22:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b116eace9acf4ba07ef2045183fdc9051e70153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:ed:5e:4c:3f:19:2e:c4:d7:b6:52:06:52:
d7:dd:1b:70:f7:78:65:ae:71:dc:98:ec:53:dc:ca:
b2:43:ee:b3:99:ed:81:23:fa:6d:86:1f:a0:1b:65:
56:00:fc:9f:d8:6e:1e:bf:a6:a2:e2:6e:bc:12:d9:
a4:82:25:48:f0:90:54:6b:4d:21:bd:08:a2:a6:d0:
19:9f:b7:8d:b0:a2:9f:0b:79:5c:ec:e9:88:cc:54:
0d:4d:f4:54:15:6c:ef:78:65:5d:d6:78:0f:15:8e:
57:f0:f5:fd:80:29:75:94:53:a8:f8:16:4c:78:73:
06:69:d4:f1:78:b0:fc:46:12:e5:c3:3b:36:75:f8:
06:ff:86:1a:ee:56:47:0a:7a:06:c4:ab:ba:68:ba:
69:1d:b1:45:7f:84:1d:20:ae:6c:e9:0d:aa:17:28:
14:17:b0:e8:6b:c0:c6:15:f5:d9:d4:d1:4d:5c:59:
00:cb:6e:4d:9f:09:34:7e:ab:19:c7:bf:4b:90:ab:
e8:45:14:65:77:29:f6:35:ec:10:52:e1:8c:6a:df:
4d:d2:72:6c:d7:ba:1f:7f:01:b7:bc:ad:b6:59:9e:
be:eb:4a:ad:cc:91:82:72:ed:bb:25:42:64:64:f8:
13:74:68:39:86:94:fe:9c:53:34:bc:ee:55:b1:69:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:6E:AC:E9:AC:F4:BA:07:EF:20:45:18:3F:DC:90:51:E7:01:53
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/axFurOms9LoH7yBFGD_ckFHnAVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.41.0/24
Signature Algorithm: sha256WithRSAEncryption
19:53:bf:c2:59:0a:1e:38:f3:64:ea:83:bc:cb:58:26:89:13:
f6:c1:c2:16:56:e6:64:ef:ab:05:ec:9e:c1:0e:a0:d3:59:f1:
be:83:38:79:6a:d5:ec:85:6d:40:42:2a:2b:03:a6:cf:bd:c2:
5c:af:6a:ad:07:88:60:fe:21:c9:eb:53:16:f6:1d:f5:ee:e7:
54:50:7d:3d:7c:d0:d1:28:03:dc:86:5a:06:d2:79:7a:9c:06:
7f:aa:7f:de:8d:7c:62:67:39:c4:13:89:e9:15:ca:38:a1:35:
fe:87:19:43:66:05:a0:83:93:67:e2:12:13:fd:ab:e0:b1:e7:
db:41:4b:e1:ff:c6:04:16:7e:79:2b:e0:87:6d:21:fc:7c:ed:
7a:4f:df:1e:b8:2f:0f:37:fe:3b:d2:c0:84:84:f2:ca:0d:d0:
44:e9:e7:c7:36:f9:07:62:6f:1e:b0:a5:81:5a:18:11:16:0f:
5f:19:8f:8b:b5:b1:eb:7a:c7:50:5f:56:ad:b6:a3:59:17:6a:
72:9d:cc:e2:8d:34:a1:c6:d4:aa:51:de:8f:fe:c0:41:df:27:
73:6d:cf:25:8c:92:9b:24:fb:19:78:7d:c9:ca:f9:99:6e:71:
59:d9:d6:72:31:d5:07:3c:5e:23:fe:32:06:5d:13:85:39:e5:
4a:d1:74:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org