Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7s9Wtpy5kYLVXtvsTQQOuMW44J8.roa
File: 7s9Wtpy5kYLVXtvsTQQOuMW44J8.roa (raw, json)
Hash identifier: mylIz+Ck8G7+ThMbhAou4IqdNoON8Hx/UmiRBhqoGL0=
Subject key identifier: EE:CF:56:B6:9C:B9:91:82:D5:5E:DB:EC:4D:04:0E:B8:C5:B8:E0:9F
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: EFA5
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7s9Wtpy5kYLVXtvsTQQOuMW44J8.roa
Signing time: Thu 16 Jun 2022 13:54:46 +0000
ROA not before: Thu 16 Jun 2022 13:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61349 (0xefa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Jun 16 13:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eecf56b69cb99182d55edbec4d040eb8c5b8e09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:02:7a:9c:4b:7d:b1:87:44:23:4f:8b:22:
0b:f1:3c:6f:42:ab:ff:16:63:a6:9b:78:ef:fb:2b:
04:57:da:cd:19:e2:d0:94:e8:f2:88:0e:a2:0b:a2:
35:56:61:80:01:b3:08:64:b7:df:47:60:a9:92:04:
f5:e1:84:d1:fb:81:fa:ee:39:79:c7:27:f7:30:b8:
be:81:c5:8e:8c:97:f4:1f:a6:33:6e:55:16:49:c6:
53:5f:2c:f7:80:7b:47:d5:ec:df:62:5c:52:81:f2:
94:2a:e6:d9:c6:7a:d6:26:48:56:3e:6a:f1:80:14:
db:9d:49:a6:46:ad:81:03:e5:63:ea:bb:10:45:81:
ab:e7:1b:1b:50:e4:65:e5:cd:36:50:09:f5:49:79:
6d:2f:64:e6:f5:ec:5a:a4:b7:0b:a4:62:f0:e2:3a:
90:f1:c0:85:14:9c:aa:da:cb:ba:cc:29:ab:55:95:
70:b2:8b:15:2c:b5:5c:1b:00:79:73:c6:61:0b:ff:
c3:5a:51:89:3d:9f:b9:3a:75:0b:92:87:be:b7:5e:
69:c8:01:cb:e2:a7:a9:1c:ab:4f:c7:c0:d5:73:5b:
78:a4:cf:06:a7:da:96:98:fd:e8:c2:5e:1f:8c:38:
93:52:3b:ae:c5:8d:29:1a:4a:67:e4:d3:a2:a4:27:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CF:56:B6:9C:B9:91:82:D5:5E:DB:EC:4D:04:0E:B8:C5:B8:E0:9F
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/7s9Wtpy5kYLVXtvsTQQOuMW44J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
60:84:34:ee:f3:fa:79:59:80:39:dd:75:f6:31:c9:b5:a9:de:
e4:8d:a8:b0:81:ec:1b:29:1c:06:5b:71:65:d9:f5:a8:2b:0e:
15:04:58:0c:f8:99:c2:b2:72:41:cf:7e:fb:73:a4:b1:5b:b6:
d8:63:af:a7:da:00:c5:33:46:8c:b5:7b:aa:e0:0c:6e:17:a1:
c3:a3:af:b9:fb:4b:11:3d:ee:b6:c9:2c:97:11:52:bc:c9:a8:
30:8a:9f:4c:5e:63:7a:8a:bf:98:55:e1:69:aa:fa:63:7c:92:
0a:1e:81:1c:4f:67:cc:00:98:d0:99:0d:67:8e:8a:75:2d:5d:
33:59:3b:b9:37:60:32:7d:d4:1a:58:6b:5e:d9:c1:c3:b9:58:
1e:96:3c:83:41:44:d9:4b:44:69:74:7c:9f:51:8a:d7:63:76:
b7:5b:f1:00:2a:25:22:d4:c6:e6:bc:17:b1:bf:a2:b1:90:0a:
f8:45:7f:27:4c:1b:55:d1:67:2e:f8:43:77:48:21:cd:ea:01:
b4:3a:3c:b3:2d:69:f5:88:9b:e2:34:fe:39:24:65:49:85:01:
34:5e:02:36:fa:b8:95:e5:66:4e:ac:ab:2f:84:51:9d:b0:53:
ea:c0:7c:1f:d5:70:ff:19:4e:28:94:e7:8f:3b:35:d1:ef:21:
07:e3:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org