Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/0aQBYpyKzZkRVfwihk4Ep7tK1rk.roa
File: 0aQBYpyKzZkRVfwihk4Ep7tK1rk.roa (raw, json)
Hash identifier: DeRF7WixjuV3TV7k2aKxy7htMmAOvedLGHVt2ToiWZs=
Subject key identifier: D1:A4:01:62:9C:8A:CD:99:11:55:FC:22:86:4E:04:A7:BB:4A:D6:B9
Certificate issuer: /CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Certificate serial: CF1B6A
Authority key identifier: 04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/0aQBYpyKzZkRVfwihk4Ep7tK1rk.roa
Signing time: Sat 01 Jan 2022 12:03:40 +0000
ROA not before: Sat 01 Jan 2022 12:03:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35404
IP address blocks: 185.241.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13572970 (0xcf1b6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d9e5b0f9d1a7fdd3e6bc12e817e673a09ea193
Validity
Not Before: Jan 1 12:03:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1a401629c8acd991155fc22864e04a7bb4ad6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:2c:4e:97:95:86:a5:2e:27:cd:fd:f6:9e:
1f:f4:14:38:c1:c5:b8:2d:8a:88:97:ab:18:ab:e4:
22:ac:9e:b2:f0:44:92:e4:35:8b:15:8a:1c:6d:1f:
b4:47:47:ed:91:b2:c7:18:b8:ab:ff:e6:82:47:d1:
cb:8d:47:6e:a9:b1:3d:40:2c:a3:06:25:cb:af:c0:
38:fd:27:ef:2e:68:f3:36:f9:92:db:41:ac:8a:58:
9e:5c:db:ae:cd:c8:3e:84:96:35:4d:a2:f2:78:a7:
91:d0:1e:9e:58:d8:e2:91:1c:f5:12:51:6d:29:b4:
89:cf:d3:d4:72:16:65:7c:f2:25:86:f7:bd:59:3c:
0c:45:8f:02:a2:e0:be:fd:80:f4:5d:21:a7:74:b4:
08:18:bb:a5:57:eb:2c:0f:05:84:6b:11:59:33:59:
ae:bd:9f:b7:d1:5a:99:7a:06:b4:90:64:03:d4:36:
bf:b3:64:f6:07:69:e5:77:80:5e:18:46:3f:c2:d9:
9a:dd:e5:8e:bf:da:45:40:ba:eb:8f:ca:e4:8a:35:
37:ce:d0:43:92:87:ce:d9:63:25:59:68:05:a2:e8:
e0:25:77:6c:19:e4:70:3b:8b:9f:66:c3:2f:96:07:
d5:4b:b5:f8:98:17:bb:35:30:c8:67:fd:2a:3a:9d:
47:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:01:62:9C:8A:CD:99:11:55:FC:22:86:4E:04:A7:BB:4A:D6:B9
X509v3 Authority Key Identifier:
keyid:04:D9:E5:B0:F9:D1:A7:FD:D3:E6:BC:12:E8:17:E6:73:A0:9E:A1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/0aQBYpyKzZkRVfwihk4Ep7tK1rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/07dd67-e8c0-46b6-829c-e4c27d2e2376/1/BNnlsPnRp_3T5rwS6Bfmc6CeoZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:79:b8:a8:b6:43:88:41:36:75:f9:f9:be:59:15:9f:7d:61:
8f:bb:43:71:4d:2c:ec:24:e5:22:4c:85:0d:8c:b6:55:5e:53:
c1:7c:92:94:35:11:6d:27:a6:76:e0:23:65:41:e0:e7:af:7e:
11:90:24:c6:72:5c:98:38:38:b2:29:db:2f:fd:cb:3a:6b:a0:
20:2b:ab:4c:be:af:12:8e:ad:5d:9b:3f:d9:eb:25:99:78:e3:
88:b5:06:4b:d0:4b:a6:bf:9e:b9:77:95:fb:fb:96:d8:e5:87:
79:f7:50:bb:d9:d5:2a:a8:a8:c9:df:f6:41:09:96:37:60:7e:
b3:99:ec:89:65:6b:9f:73:3d:8e:bb:81:cb:46:0f:b7:39:6e:
24:b5:42:1d:75:a1:eb:56:b5:8a:34:b4:33:0c:8c:65:95:c8:
fe:47:16:6a:51:63:14:50:a7:e8:22:68:f1:e0:e6:b6:5a:bd:
73:0a:cd:44:69:fd:1c:6a:36:7c:fb:a4:e1:93:be:50:46:0b:
33:90:84:bf:39:78:cf:1c:d1:6c:2e:23:e3:90:24:fc:14:d8:
84:37:0c:ea:b6:90:8e:3e:db:57:ae:e4:89:04:1e:d2:b1:3d:
95:6f:c6:6b:2e:23:af:3b:19:08:0c:41:cf:d4:60:4b:74:19:
3f:c0:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:05 2023 by rpki-client on console-fra.rpki-client.org