Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/8cP769Wy-YJOKM3rIq0bT_h2J5I.roa
File: 8cP769Wy-YJOKM3rIq0bT_h2J5I.roa (raw, json)
Hash identifier: eESd1pIVw+bWJkabzjgmSliCYakKk2v9BC4R+NtoBqA=
Subject key identifier: F1:C3:FB:EB:D5:B2:F9:82:4E:28:CD:EB:22:AD:1B:4F:F8:76:27:92
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 01830D1B96E3C5FA29618D0E5FC7BA67B547
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/8cP769Wy-YJOKM3rIq0bT_h2J5I.roa
Signing time: Mon 05 Sep 2022 10:04:15 +0000
ROA not before: Mon 05 Sep 2022 10:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62113
IP address blocks: 185.38.172.0/23 maxlen: 24
185.38.174.0/24 maxlen: 24
2a01:4260::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:1b:96:e3:c5:fa:29:61:8d:0e:5f:c7:ba:67:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Sep 5 10:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c3fbebd5b2f9824e28cdeb22ad1b4ff8762792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b5:84:28:64:6b:6f:36:73:e0:91:2d:28:ab:
db:58:87:aa:9d:61:55:28:1d:38:f9:16:22:8b:88:
a2:5f:57:a5:f5:6a:63:71:47:0a:06:4e:5f:52:68:
b4:d7:ba:39:b5:28:13:84:66:d3:d0:82:1f:f2:66:
a8:4d:3d:04:5c:2e:4b:00:80:5c:95:52:34:50:93:
1c:9b:4f:de:7e:51:d4:ce:fa:d7:c2:c7:90:a8:7e:
06:6c:bb:32:53:51:9f:03:ad:2d:3e:11:50:da:14:
3d:13:55:cb:48:2f:4d:ca:02:e2:da:4c:b5:fa:56:
02:25:26:c4:37:51:4c:12:35:a0:12:19:5e:aa:81:
d1:a9:61:32:1c:cd:90:73:83:4d:5c:c6:bb:8d:18:
11:83:a7:d2:3b:0b:23:3d:21:58:d5:1f:d8:13:c4:
93:4e:3c:39:aa:d1:d8:ca:a4:db:b7:be:93:6c:15:
93:e4:68:2c:70:f1:13:65:10:37:ea:5a:b9:70:d6:
59:19:5c:1e:df:11:50:dc:c5:fc:f4:a8:a5:66:74:
63:e8:eb:5b:c1:dd:ee:b7:a4:92:d9:1b:f5:21:70:
b5:90:f0:c1:81:9f:60:04:41:91:d0:b4:11:54:e1:
ae:52:ec:55:91:bb:9d:fe:dd:ee:47:93:2d:11:c9:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:FB:EB:D5:B2:F9:82:4E:28:CD:EB:22:AD:1B:4F:F8:76:27:92
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/8cP769Wy-YJOKM3rIq0bT_h2J5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.172.0-185.38.174.255
IPv6:
2a01:4260::/32
Signature Algorithm: sha256WithRSAEncryption
73:10:d7:8a:02:73:9c:95:ae:18:f5:1c:5b:27:07:73:d3:44:
c4:00:f5:99:c0:53:f3:63:ba:09:a4:a9:00:5a:b6:de:9d:47:
30:75:1e:82:97:1f:cd:f0:b4:d2:a5:e4:d1:45:81:b8:8d:25:
ee:85:ac:74:06:ad:10:91:1e:f8:0b:e8:fe:17:4a:0c:9a:fc:
86:61:80:e1:cb:a5:3e:af:cf:89:48:bc:f0:9d:cf:34:9f:ce:
97:8e:c6:7f:80:b1:fd:94:06:63:5d:f0:2a:f0:3a:b4:bf:42:
3b:1c:77:04:14:1f:26:ff:e8:0d:bf:00:8d:8a:38:63:a4:6d:
f9:34:09:d2:97:21:29:4a:7a:ee:a3:fd:3f:b7:29:f6:1f:0e:
30:21:00:60:d9:a7:f0:05:78:44:ca:99:9f:29:df:0f:25:8f:
75:07:af:5c:61:82:6f:75:af:9e:24:59:d3:a9:1a:1f:20:e4:
ca:a6:ef:47:02:bb:5c:ac:79:fc:e5:9e:67:a1:2e:44:42:59:
98:ee:f7:8e:9d:81:78:0b:b1:3d:39:01:2c:7c:3b:84:3a:2d:
31:f2:aa:f2:79:40:31:f0:31:75:03:06:41:1a:29:a0:24:88:
4b:39:54:6b:7b:3a:74:a5:fb:e7:85:e0:bd:5d:3a:d7:df:b2:
5e:a3:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:59 2024 by rpki-client on console-ams.rpki-client.org