Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/0qRl61gv9yLwvGF3CBQpoESsoAc.roa
File: 0qRl61gv9yLwvGF3CBQpoESsoAc.roa (raw, json)
Hash identifier: gzLlgpZMokJuw0bjMLQ2PBE7K3u0SUEc3a7PGfCTlYk=
Subject key identifier: D2:A4:65:EB:58:2F:F7:22:F0:BC:61:77:08:14:29:A0:44:AC:A0:07
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0183653271B12DEFD6D3371C881E0E71C9E0
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/0qRl61gv9yLwvGF3CBQpoESsoAc.roa
Signing time: Thu 22 Sep 2022 12:35:48 +0000
ROA not before: Thu 22 Sep 2022 12:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 185.129.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:32:71:b1:2d:ef:d6:d3:37:1c:88:1e:0e:71:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Sep 22 12:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2a465eb582ff722f0bc6177081429a044aca007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:c0:fb:85:5d:a8:1f:72:7b:26:71:2b:76:
ac:8e:92:ea:0f:5f:22:b6:96:1c:c9:ba:42:71:73:
19:9c:cc:04:6c:e0:50:8c:d2:95:2e:ff:71:6d:6b:
ee:c8:a2:c5:7b:03:75:eb:f4:e4:14:3d:e4:fc:3a:
dc:4a:b5:3c:e9:60:90:e7:3c:6a:46:2e:f1:42:51:
6a:8e:a7:91:db:eb:cc:3c:be:ad:f0:8e:a9:d6:4b:
53:19:09:79:2a:75:12:7f:4c:2f:bb:31:d1:56:20:
97:d6:9a:e1:9c:c3:8a:a0:b5:51:47:e8:ab:a6:39:
55:bc:eb:b3:68:5a:27:c4:05:47:c4:97:aa:8e:43:
5b:d0:2a:97:e6:6d:15:35:52:fb:5f:19:7c:23:41:
10:40:10:9d:f2:6d:bc:61:45:30:78:91:d4:67:e1:
35:70:ca:7b:1e:b2:68:ca:7f:5d:78:74:55:19:39:
c3:b1:ff:7b:ea:3e:d3:8a:f2:c0:e2:12:7a:d6:aa:
75:6e:c5:62:0c:f1:96:f6:f0:ab:a3:49:f4:c4:31:
d2:05:1e:52:53:dc:55:b8:29:60:a3:62:be:a4:be:
7b:be:24:68:3a:d2:43:2f:c8:b1:f2:6f:6b:49:57:
da:e1:51:00:92:d5:33:55:15:22:d4:57:7f:4c:4b:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:65:EB:58:2F:F7:22:F0:BC:61:77:08:14:29:A0:44:AC:A0:07
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/0qRl61gv9yLwvGF3CBQpoESsoAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
45:54:20:bd:61:e5:85:3a:1a:6d:53:eb:a7:ea:81:e5:3c:a6:
e3:bf:ed:86:23:3c:99:a8:f8:14:df:91:ae:5b:34:a9:5f:b2:
59:91:41:07:88:7a:40:63:60:b6:eb:ee:fc:8f:e4:ac:fc:05:
d3:d3:47:fc:d5:22:3b:df:b7:e9:88:bd:32:f9:c3:80:3c:a3:
37:da:40:60:9d:e8:2e:db:51:9e:f3:31:36:7d:2a:34:dd:0b:
8c:a4:9b:c5:b6:f9:69:10:08:e2:26:30:d4:9e:1c:7e:97:27:
fe:81:9d:18:4f:20:33:f6:da:5e:1f:1a:64:b4:f6:57:8c:ce:
0c:b5:18:ef:61:c0:87:71:41:9f:10:8c:5f:de:67:d6:11:f9:
86:47:e4:df:3c:0c:7b:f5:2c:72:3a:18:4d:32:6a:fd:18:31:
c9:ae:ec:12:2d:78:51:a6:5a:9c:85:b8:a3:dd:63:66:bd:18:
54:14:97:36:c3:f7:0b:e7:c8:b6:ca:3f:db:af:d1:3d:3d:f4:
35:b8:86:59:e1:10:af:79:17:1e:8b:39:36:24:09:5e:29:d4:
5a:b1:14:13:02:c3:e9:f7:29:c5:37:e5:95:fc:77:aa:02:82:
a1:54:bb:98:3f:b8:be:ee:a2:df:ec:df:f8:1d:52:af:49:ae:
9d:10:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org