Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/qj2flSEnnjHA9BsRYIqzXSLOU-8.roa
File: qj2flSEnnjHA9BsRYIqzXSLOU-8.roa (raw, json)
Hash identifier: Gbs50HA/nGngxAM3vszpAsK/10Q8DA6E/Tmmg8gYQ6I=
Subject key identifier: AA:3D:9F:95:21:27:9E:31:C0:F4:1B:11:60:8A:B3:5D:22:CE:53:EF
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 036905C4
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/qj2flSEnnjHA9BsRYIqzXSLOU-8.roa
Signing time: Sat 01 Jan 2022 14:54:40 +0000
ROA not before: Sat 01 Jan 2022 14:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210571
IP address blocks: 185.115.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57214404 (0x36905c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Jan 1 14:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3d9f9521279e31c0f41b11608ab35d22ce53ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:b5:f7:24:41:88:5a:18:f2:a1:4a:91:5d:
b7:d9:22:60:f4:3b:33:8f:fe:ab:5b:a3:4c:43:3e:
d3:11:c9:2b:54:0e:bb:77:46:68:75:3a:1f:ef:d2:
1f:70:e2:b2:45:72:2f:09:4e:7f:6e:61:10:7f:af:
eb:4a:61:39:d7:d6:28:2d:3f:05:9b:1d:20:b1:26:
15:4e:5b:43:9a:82:2e:9e:d3:74:11:b0:98:5a:2a:
18:78:47:f2:cd:13:5f:9a:2e:72:6d:bf:43:ed:08:
68:0e:d3:31:ea:98:3b:8f:be:3f:ec:c9:3f:38:a3:
ae:2e:f9:0f:50:d3:4f:4c:ed:d4:c9:ba:c3:8c:11:
24:85:14:4e:4e:60:af:83:0b:75:2c:3a:50:e3:10:
d0:7a:f2:05:e8:0d:69:92:6d:64:5b:06:77:ee:8c:
45:2d:cd:e2:ab:00:b4:0e:3c:df:b7:5f:44:3e:c9:
87:81:b2:65:d2:a7:1e:6e:e3:f5:93:d6:8d:b4:2a:
36:4d:36:49:04:03:10:93:a8:8b:eb:e9:e4:4d:bf:
f9:cd:80:33:3e:bc:2c:4b:a6:e4:5e:e6:76:b9:c4:
68:bb:9a:6d:84:7c:b2:1c:ed:dc:bb:65:23:3f:d4:
89:66:01:76:3e:2c:24:ba:0d:21:cf:84:71:69:0f:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3D:9F:95:21:27:9E:31:C0:F4:1B:11:60:8A:B3:5D:22:CE:53:EF
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/qj2flSEnnjHA9BsRYIqzXSLOU-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.170.0/24
Signature Algorithm: sha256WithRSAEncryption
80:58:4b:2a:26:25:78:ba:41:30:bd:55:e1:60:62:ba:a4:36:
9f:46:75:c7:d0:41:de:58:94:79:bc:b6:21:9b:de:be:42:d2:
24:9f:5a:b2:cb:be:3a:4d:72:c4:07:16:96:b6:94:13:4f:cd:
da:be:3f:dc:5d:30:f6:82:3b:de:0d:17:dc:65:76:35:0b:87:
f0:aa:f1:fd:97:12:d1:b1:71:86:60:f5:09:5b:9b:7f:89:e4:
88:f9:6c:e5:8e:ba:83:1f:cc:b0:00:e7:ef:bc:85:9d:46:3c:
b5:57:6e:72:53:44:5d:6a:fe:d9:0b:b9:c5:d1:75:47:1b:d5:
b4:bb:9e:b7:b3:49:65:fc:92:86:0a:89:6c:f6:ca:47:2d:8c:
5d:10:fe:0b:16:d7:d0:bb:b4:fd:c0:7e:49:5c:73:7e:ea:e4:
56:47:82:f9:8f:a1:73:ae:6a:73:a4:28:39:70:17:62:50:b0:
7e:46:69:02:85:c9:61:58:54:51:ad:af:db:dc:a6:89:45:dc:
23:27:a5:c4:84:23:d0:8e:32:53:2c:8c:8b:11:89:5c:29:da:
06:64:ab:35:be:34:35:c4:f1:86:f2:22:bc:86:04:d9:e3:d6:
3f:b7:fa:4f:2c:51:09:6b:6f:3b:eb:26:b3:a3:a0:8e:6c:7d:
70:9a:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:01 2023 by rpki-client on console-ams.rpki-client.org