Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/1-AE9A1A6_I6kPZn_HyDgllT2ABg.roa
File: 1-AE9A1A6_I6kPZn_HyDgllT2ABg.roa (raw, json)
Hash identifier: 0559gvcAJN9V++KoLqdj1yG0zuEIbgFcxFFcBOeRPJ0=
Subject key identifier: F8:01:3D:03:50:3A:FC:8E:A4:3D:99:FF:1F:20:E0:96:54:F6:00:18
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 07BEC897
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/1-AE9A1A6_I6kPZn_HyDgllT2ABg.roa
Signing time: Sat 01 Jan 2022 09:55:23 +0000
ROA not before: Sat 01 Jan 2022 09:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.75.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129943703 (0x7bec897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Jan 1 09:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8013d03503afc8ea43d99ff1f20e09654f60018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:de:57:49:29:15:67:3d:c1:b7:5e:42:62:
ff:c0:79:23:2c:80:5d:7e:ce:f7:05:9c:d0:58:e9:
a8:1b:20:7d:85:db:00:3b:36:14:a5:cc:e1:23:98:
d8:64:4a:2f:37:b4:e7:95:ad:88:0e:dd:c7:8f:d1:
f2:d6:cd:6e:9d:4c:a6:3c:6f:ef:a9:5a:90:3b:ee:
43:84:64:0a:d5:2e:ed:a2:24:e1:b4:9f:f6:7f:f2:
ec:86:9c:ec:5b:91:5d:a3:7a:08:a2:27:9e:35:f5:
f6:81:03:20:b8:b8:9c:f9:12:97:7f:0c:eb:b2:b0:
96:e9:33:41:bf:ba:f8:e4:ea:50:7e:bf:fb:59:19:
8b:11:4a:ea:84:34:09:d8:27:00:e4:c2:73:d7:89:
d6:3b:92:72:94:72:1c:13:25:91:d4:70:5b:53:d3:
31:c6:32:f5:77:ec:75:5b:d0:49:a3:1b:cd:3f:88:
9e:4e:b1:73:00:bf:32:8c:38:77:45:1d:8a:3e:23:
e4:85:d8:5a:83:34:5c:d8:d8:70:ec:6e:4c:82:fd:
9c:20:d5:75:c8:3c:58:2a:e3:57:c1:06:22:2d:9a:
a1:03:88:66:b6:fd:55:bd:21:0f:37:01:16:01:e8:
36:d8:a9:5c:3d:21:ce:d0:9a:24:cf:bc:f4:ea:1c:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:3D:03:50:3A:FC:8E:A4:3D:99:FF:1F:20:E0:96:54:F6:00:18
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/1-AE9A1A6_I6kPZn_HyDgllT2ABg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.60.0/22
Signature Algorithm: sha256WithRSAEncryption
40:9e:ad:af:dc:0e:ad:37:2d:2e:30:20:e7:c7:99:e5:9a:4c:
69:39:43:49:6f:49:41:a3:03:2e:07:2e:57:0a:88:bd:2f:e4:
2e:29:62:af:b1:44:4c:af:57:4f:e8:e2:e6:f0:19:aa:88:a1:
27:04:ba:1c:32:12:16:98:6b:2d:e4:b5:3c:a5:87:14:5d:d9:
ef:19:f6:e8:65:1b:0f:05:60:40:c9:26:42:17:b3:39:b4:ce:
df:11:3b:24:41:c5:b5:b5:24:b4:67:45:09:52:46:66:60:44:
36:91:12:da:df:e8:01:d4:02:58:c3:a5:27:c3:8c:d1:ff:31:
80:5a:3c:ef:7f:1c:54:6e:19:cf:00:ca:c4:0a:e9:09:46:7a:
b2:eb:83:9d:51:ef:a5:5d:e1:95:52:de:52:8b:32:8f:e6:8b:
8b:60:16:04:65:55:ba:6e:9b:2c:9e:63:4b:c6:f7:52:7d:aa:
36:38:96:b7:98:43:fa:ba:55:91:14:6b:bc:94:8e:7d:86:ce:
d3:7e:87:87:c0:90:67:35:06:c6:b0:02:3f:37:84:31:28:e2:
54:8d:3b:5d:73:a3:14:20:e7:9c:48:dc:20:59:b0:58:af:83:
41:0f:98:5e:d8:74:05:3d:c3:ac:2e:38:89:87:10:47:7d:2f:
0a:ed:70:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-ams.rpki-client.org