Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9I_ExHzR11ntop5CMRPSuzfJnVM.roa
File: 9I_ExHzR11ntop5CMRPSuzfJnVM.roa (raw, json)
Hash identifier: Sz3Eokcm75gmGpglJlb6T8Q+Wi+bXpAWUOgTaOEAcBk=
Subject key identifier: F4:8F:C4:C4:7C:D1:D7:59:ED:A2:9E:42:31:13:D2:BB:37:C9:9D:53
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0184D345B94EA14BBA376E0BE338CC544A8C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9I_ExHzR11ntop5CMRPSuzfJnVM.roa
Signing time: Fri 02 Dec 2022 14:37:52 +0000
ROA not before: Fri 02 Dec 2022 14:37:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48940
IP address blocks: 185.128.106.0/23 maxlen: 23
185.229.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:45:b9:4e:a1:4b:ba:37:6e:0b:e3:38:cc:54:4a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Dec 2 14:37:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f48fc4c47cd1d759eda29e423113d2bb37c99d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:a5:d4:38:4a:01:30:51:6c:d2:53:25:1d:
46:ee:ef:ff:fa:4c:5f:68:a2:3d:1c:76:c7:4d:77:
4e:04:5d:e5:50:f6:7c:7c:d3:18:68:d2:24:a2:f4:
d2:aa:b5:79:bf:5e:2c:2a:4e:5c:c9:e8:6f:ab:a7:
57:d6:70:43:4e:48:18:3c:84:81:9f:a0:b1:f4:c9:
dd:d8:c9:f0:d5:0e:6e:30:6e:2f:ea:b7:87:d0:89:
22:e0:81:b5:10:cd:69:d9:a3:15:b6:e6:03:35:fb:
4e:36:33:9a:5e:8a:a7:68:16:5b:aa:b7:55:ad:d5:
cc:19:dc:4b:ed:c6:1b:6f:bc:9c:3d:84:58:b5:28:
7a:0e:13:51:54:ad:76:76:e8:82:58:2b:46:94:e2:
f1:cc:4b:01:26:b4:07:81:12:3e:f3:e1:57:e2:7d:
d9:c0:2a:56:5e:02:7f:f1:de:90:65:1c:4c:45:6e:
5b:3e:09:6b:8d:f1:7d:4d:7f:6f:71:d3:98:d0:33:
53:4b:f2:73:89:e6:94:be:19:7f:17:47:1c:dc:cc:
54:b5:84:74:de:da:5f:c7:05:7b:e0:11:4b:96:bf:
d2:38:5d:21:2e:93:2b:ba:31:e0:bb:e7:69:f8:42:
e8:ac:8a:be:05:19:31:4b:e1:6a:20:e8:da:21:ed:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8F:C4:C4:7C:D1:D7:59:ED:A2:9E:42:31:13:D2:BB:37:C9:9D:53
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/9I_ExHzR11ntop5CMRPSuzfJnVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.106.0/23
185.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d7:a3:af:c3:37:b3:18:40:bc:39:e2:9b:2b:53:ee:27:0c:
27:4c:a6:3f:36:3f:59:48:dd:4c:e3:30:e1:36:aa:c8:08:3f:
54:ef:40:62:9d:d1:3f:46:a9:cd:c4:cf:85:af:49:93:d7:0a:
82:db:23:1c:d9:7a:cf:7c:0b:9b:df:01:8e:30:c7:97:c3:04:
bd:78:29:19:93:72:5e:bf:cf:de:a6:1d:5d:10:eb:b5:30:c9:
44:81:64:64:6b:7c:27:15:3f:b2:d9:50:b4:5f:fd:2c:98:b5:
06:68:e7:cd:86:22:7d:bc:0b:75:d9:57:29:e7:23:a0:8e:02:
a3:3e:3f:2d:a8:69:4d:bc:d4:7a:c9:7f:c3:d1:98:6e:36:92:
72:d2:2b:71:df:b8:68:9f:4e:58:d9:0f:41:3c:53:d5:71:4a:
9d:a5:6a:16:b9:21:4b:49:e5:86:10:d5:e6:46:e0:70:0a:9c:
00:93:b8:5f:9a:c4:7e:48:06:1d:a5:3f:cd:ee:e9:e7:43:4f:
3e:8e:e8:ae:0b:63:c6:2a:0f:5e:a2:0c:71:f3:49:89:0c:2b:
5b:31:90:81:be:c9:6c:27:e1:3c:90:17:d9:ee:7e:af:13:5e:
89:c0:06:96:27:c6:d3:67:8b:33:b0:f8:c7:88:86:38:67:3e:
79:65:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org