Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/RnYhYJMyPdJy3wQDp_5Pp3frQ4I.roa
File: RnYhYJMyPdJy3wQDp_5Pp3frQ4I.roa (raw, json)
Hash identifier: fU/g6tJNKZU/8k9uaxOd+UK1nST+TUMCVcuk2qMeKvw=
Subject key identifier: 46:76:21:60:93:32:3D:D2:72:DF:04:03:A7:FE:4F:A7:77:EB:43:82
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 0182CEC7C8655EE4996C0059248809052E5B
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/RnYhYJMyPdJy3wQDp_5Pp3frQ4I.roa
Signing time: Wed 24 Aug 2022 07:36:15 +0000
ROA not before: Wed 24 Aug 2022 07:36:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 185.191.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:c7:c8:65:5e:e4:99:6c:00:59:24:88:09:05:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Aug 24 07:36:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4676216093323dd272df0403a7fe4fa777eb4382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:f2:4a:1a:af:00:02:b5:1b:9d:35:19:5c:
eb:34:4b:b0:a9:d9:e6:07:f2:2c:13:7c:e9:35:88:
30:f7:f5:fa:df:b5:98:bd:25:8e:16:85:d5:50:99:
0a:ad:24:a4:1f:f4:e7:7d:18:e6:6b:fb:1a:da:f3:
0e:01:c0:d7:42:f9:78:6f:d5:73:e5:62:7c:dd:50:
65:3f:80:79:cd:57:b9:0e:36:41:00:bf:f3:29:ed:
23:ee:de:7c:7e:e7:8e:86:b0:bc:9b:d1:6c:79:6d:
a6:c3:e7:50:f2:1f:91:e7:bd:1d:16:c0:e6:bf:0d:
38:f6:d5:63:9e:c4:f9:bb:d9:00:1a:18:c0:28:26:
3f:55:bc:0e:f1:ff:95:4a:a6:83:77:ab:e9:c5:51:
97:62:67:4d:9a:57:e9:e6:29:bd:e9:3e:a3:b7:54:
b3:21:75:4a:47:bc:46:13:1a:94:33:fc:4d:71:7e:
aa:54:0a:c1:3c:af:63:21:d4:41:c2:5c:84:25:4c:
5f:2d:7e:7e:5d:3e:87:6c:ab:39:31:1d:bd:36:e6:
9f:ec:2c:9d:a1:a4:87:87:25:8b:2e:f7:a7:60:5b:
2f:58:ef:5a:ea:83:4a:ed:4e:33:52:a8:9a:d9:b8:
3f:9f:0a:9b:ef:02:d6:36:46:e5:d9:3c:fa:2e:43:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:21:60:93:32:3D:D2:72:DF:04:03:A7:FE:4F:A7:77:EB:43:82
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/RnYhYJMyPdJy3wQDp_5Pp3frQ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.147.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bd:04:3e:b9:0f:f4:12:50:bb:be:6d:92:24:e6:26:18:0f:
fa:74:7d:fc:fe:77:99:d3:e5:cc:6b:1a:3f:13:ee:ea:78:14:
d8:16:3e:20:11:ad:f8:c2:a5:f7:fe:15:30:d3:3e:a8:cf:33:
d6:16:3b:68:37:24:ae:86:e7:cb:81:b2:15:07:4c:4e:3c:fa:
bb:33:b4:e1:f3:f9:a3:e5:04:1e:7e:eb:6a:96:76:9d:41:e2:
10:d7:55:0d:12:b0:f6:ec:91:98:83:e4:51:e4:29:7a:ef:5f:
1b:0d:b0:a4:37:c3:d9:81:53:5f:0f:97:ad:32:c8:f3:30:1b:
b0:4b:03:00:0d:09:6b:50:39:2a:1a:d2:45:e5:63:93:24:9e:
6c:a3:62:a7:93:db:5f:07:4b:a1:8d:8f:d0:cf:2b:6c:d6:53:
f1:52:ef:02:8b:18:64:3c:e0:5c:25:5c:34:69:ea:6a:01:1d:
c9:d6:c1:64:26:3b:2b:e4:ea:c5:2e:52:d8:27:b0:d5:70:a7:
e9:f4:82:56:f7:9d:7f:d3:7e:b1:7f:b3:ff:43:6b:c2:3b:c3:
34:6b:59:14:9c:a5:d7:d4:81:2b:8c:cb:f0:7f:d5:04:5c:07:
37:d6:30:f9:15:fd:c7:ab:db:00:56:b8:ff:02:9b:11:3b:d2:
62:47:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org