Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PAdnSgd-zzMccT6xbB82B4dtbC0.roa
File: PAdnSgd-zzMccT6xbB82B4dtbC0.roa (raw, json)
Hash identifier: CALkO5WOhsI229LWAS9VI7PYSASyClfLOTXxuRprg60=
Subject key identifier: 3C:07:67:4A:07:7E:CF:33:1C:71:3E:B1:6C:1F:36:07:87:6D:6C:2D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 179B7E0D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PAdnSgd-zzMccT6xbB82B4dtbC0.roa
Signing time: Sat 01 Jan 2022 04:53:57 +0000
ROA not before: Sat 01 Jan 2022 04:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25926
IP address blocks: 185.120.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396066317 (0x179b7e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c07674a077ecf331c713eb16c1f3607876d6c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:19:4b:20:95:f2:8c:6b:ca:bb:b5:29:b8:
3d:44:3b:6b:29:ff:c4:17:d7:07:e1:9e:ac:db:7c:
82:d3:9d:91:2b:d9:e4:47:9d:a3:25:f6:68:8b:12:
6a:6b:cd:79:9b:06:3f:9c:4c:c2:a9:e3:19:68:fc:
e8:ad:1b:bc:f0:0b:43:3d:f5:1d:21:fa:60:e1:c5:
62:cd:e2:8b:92:3d:45:6f:51:1a:1a:c4:0b:78:df:
63:e5:7b:70:93:76:c8:b6:27:9b:3e:76:c7:2e:d4:
00:64:ac:81:92:cd:f7:4e:96:e1:c6:5d:c0:b5:8c:
da:ff:a3:c6:92:0f:ef:da:e4:58:9e:4f:bf:d9:32:
ec:19:e3:4d:00:25:78:9d:e9:bc:d7:cc:43:e6:9b:
a5:21:80:bd:6d:72:6e:d5:08:74:94:5d:ef:48:05:
05:7d:5e:97:35:bf:e7:38:2e:d9:43:09:57:87:fb:
b3:d7:88:8e:3d:d0:14:e8:4c:42:78:c8:e5:fc:64:
79:11:be:6d:3c:7a:f2:08:7d:7f:cf:67:15:d5:cf:
cc:3f:dd:db:d9:18:83:1f:01:d8:56:bb:9e:cb:64:
fc:c2:6f:95:88:dd:f3:01:27:a8:a9:11:11:bf:c0:
c6:45:e6:0b:5e:fe:3a:db:c6:ef:c7:13:58:f6:85:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:67:4A:07:7E:CF:33:1C:71:3E:B1:6C:1F:36:07:87:6D:6C:2D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/PAdnSgd-zzMccT6xbB82B4dtbC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.7.0/24
Signature Algorithm: sha256WithRSAEncryption
15:60:82:94:f7:59:42:49:98:7b:9c:03:20:32:3f:5b:7b:3b:
83:e3:50:72:c9:de:10:01:26:5f:06:e4:5e:d1:1e:a5:ca:77:
5f:b7:7f:18:e8:7a:1f:a6:2e:cc:6c:f0:1d:60:ef:5a:5a:a8:
20:85:e6:f8:c9:f5:a1:0e:e8:03:63:76:bd:88:70:af:7b:34:
c4:bb:94:bd:96:fc:a1:65:b2:cc:ef:50:a1:06:ad:73:02:40:
53:6a:9d:b5:8b:b5:b2:cb:72:ee:48:fe:94:a3:5e:4c:f2:1d:
db:68:8e:f3:e3:c2:a4:2f:4c:b3:7b:c0:e6:1e:c5:8a:a0:92:
05:28:30:5e:14:1b:1f:a8:f6:5c:47:2f:96:10:a5:3a:47:55:
87:47:39:4d:a9:f6:52:b4:71:44:aa:7c:1d:28:9e:5b:38:ff:
6b:66:80:46:ca:3c:1d:91:e0:54:36:ed:7a:3c:05:0d:d4:5b:
de:a7:25:5d:b8:06:04:66:98:af:c1:2f:2b:f3:0f:1f:f9:69:
79:91:d9:f6:6e:be:2e:c8:20:fc:82:e7:9e:5c:ab:8d:65:21:
61:3c:7a:ac:76:8a:7c:6c:03:a2:3b:8b:2a:bf:4e:d9:04:55:
cc:77:4e:a4:c3:60:bb:e8:16:97:cd:23:3f:96:6e:f9:31:22:
e5:5f:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org