Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rFrBHJn4hoEZG8_2r_B5OLEinng.roa
File: rFrBHJn4hoEZG8_2r_B5OLEinng.roa (raw, json)
Hash identifier: GpgVNDCoqEbbhA//rxnvis89p7DC7hmza+dj7qkWAlo=
Subject key identifier: AC:5A:C1:1C:99:F8:86:81:19:1B:CF:F6:AF:F0:79:38:B1:22:9E:78
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0184CCE44332EA1EDEEC13178CB866865261
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rFrBHJn4hoEZG8_2r_B5OLEinng.roa
Signing time: Thu 01 Dec 2022 08:53:42 +0000
ROA not before: Thu 01 Dec 2022 08:53:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201255
IP address blocks: 185.179.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:e4:43:32:ea:1e:de:ec:13:17:8c:b8:66:86:52:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Dec 1 08:53:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac5ac11c99f88681191bcff6aff07938b1229e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:1e:b7:28:df:be:4b:ba:54:36:e0:b7:47:
96:fd:99:32:11:a2:51:20:ee:05:db:8d:0b:5b:bd:
67:5c:19:67:be:63:2b:82:25:a3:53:f5:99:54:2d:
91:85:e5:7a:b1:2e:5d:7d:16:ee:1f:ee:72:96:28:
5a:b6:5a:1a:64:9b:cd:b0:f3:09:6f:0a:a0:00:7c:
5a:f5:89:43:89:3e:07:37:40:0b:7b:fc:bc:ce:75:
0a:66:fd:63:96:93:4a:7c:77:d8:57:77:e2:47:98:
3c:78:e3:9b:79:bd:3e:a0:80:8c:94:f6:56:13:01:
06:af:a1:e5:00:66:a6:82:71:ee:20:e0:90:2b:bc:
6e:82:bd:6c:17:41:c2:17:db:a6:3d:27:2a:33:1e:
b9:f5:f1:ed:6b:4e:12:dc:93:03:51:38:5e:77:c5:
7c:7a:9f:5a:7f:cd:8b:a9:7e:d8:ac:22:0e:8c:77:
35:28:d5:ad:2f:26:5a:96:cc:b1:f0:f3:30:68:ab:
34:a7:13:68:2c:55:36:cc:1c:85:77:b5:8f:03:6a:
3c:4a:bf:b5:a1:3a:60:73:b8:d0:13:cb:fa:19:99:
99:fb:02:51:1d:fa:05:47:5e:52:f1:f5:9d:c8:41:
81:09:c7:c6:32:66:2e:85:1e:9c:ce:7d:d7:fb:c8:
36:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5A:C1:1C:99:F8:86:81:19:1B:CF:F6:AF:F0:79:38:B1:22:9E:78
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rFrBHJn4hoEZG8_2r_B5OLEinng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.42.0/24
Signature Algorithm: sha256WithRSAEncryption
35:94:f2:df:1b:eb:b9:77:af:1e:ef:b6:2e:3c:d4:03:cd:ec:
40:bf:09:21:c5:98:5f:3b:02:c5:66:70:b0:8d:16:50:d0:37:
13:0d:d6:5b:4e:51:b7:fc:73:dc:1b:e8:12:56:64:eb:ee:38:
4c:b8:da:cf:5c:ad:cf:37:f5:d8:c7:cd:50:7d:dd:26:e9:26:
a9:3a:c4:db:c1:cb:49:c6:1f:48:5a:58:52:6a:c3:97:34:ec:
fd:dc:fd:e3:11:a0:16:08:7f:7e:da:6b:2e:73:c1:f0:5f:1f:
b4:16:b1:cb:f1:ad:c8:53:99:9b:6a:04:78:ac:41:92:b9:cb:
ee:39:39:a7:c0:c5:c9:fb:7d:69:55:cd:cb:e9:5e:ef:57:1e:
13:36:a9:05:ea:5d:7b:14:04:18:84:13:a8:ba:62:c1:90:fd:
eb:df:7c:9e:7b:dd:b7:93:43:be:63:c6:12:46:de:e8:63:85:
3f:48:92:c2:ff:95:52:ed:32:ad:33:2b:f3:51:76:e0:5d:bd:
e6:5d:1e:3e:55:16:ce:41:a6:dc:20:7a:21:4a:33:58:75:69:
07:4c:af:e3:83:45:f4:c5:99:2c:f5:10:ad:90:04:bb:49:b1:
e4:46:6b:bb:b2:b0:e4:59:7d:97:5f:98:68:ee:e3:f2:bb:26:
05:4f:46:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:47 2023 by rpki-client on console-ams.rpki-client.org