Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/sVnK3z00nVhFTsGdOKrHE_s79G0.roa
File: sVnK3z00nVhFTsGdOKrHE_s79G0.roa (raw, json)
Hash identifier: npzsyBpsL/7NjZwh50r/QcUAW9Q65xNp8Mfylb8Njj4=
Subject key identifier: B1:59:CA:DF:3D:34:9D:58:45:4E:C1:9D:38:AA:C7:13:FB:3B:F4:6D
Certificate issuer: /CN=97eac753379fd22ff6515033f513dc282463ad2d
Certificate serial: 0183F3FDAD2358C38BEB8149512F5C152290
Authority key identifier: 97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/sVnK3z00nVhFTsGdOKrHE_s79G0.roa
Signing time: Thu 20 Oct 2022 06:03:51 +0000
ROA not before: Thu 20 Oct 2022 06:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21211
IP address blocks: 185.184.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f3:fd:ad:23:58:c3:8b:eb:81:49:51:2f:5c:15:22:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97eac753379fd22ff6515033f513dc282463ad2d
Validity
Not Before: Oct 20 06:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b159cadf3d349d58454ec19d38aac713fb3bf46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:2e:2c:65:e5:05:22:cf:ea:96:ac:80:81:
ea:75:ed:79:13:26:95:3b:7b:eb:72:c9:13:f2:e6:
ee:ce:38:7d:64:a6:11:1c:19:81:b4:dd:d8:f8:a2:
53:af:3b:2b:fe:f2:5d:d3:01:56:b4:47:33:a3:45:
a6:e7:79:8a:8c:66:f3:df:06:d6:e4:bb:c7:ef:49:
ad:0e:fd:7f:ec:d9:a7:28:09:3e:bf:65:07:f6:6f:
82:86:3c:a2:d6:cf:0a:9b:2d:c0:6b:8b:89:84:c3:
c3:51:13:6f:90:77:ef:44:72:21:58:c5:43:40:eb:
19:e7:ee:6d:a1:10:a1:0b:c3:67:c4:e2:5f:74:66:
3e:16:c7:f5:b1:d4:5d:4c:69:f0:ce:79:0f:23:ca:
95:7a:31:1f:d6:33:8b:e5:da:6f:a6:26:49:be:a1:
e3:62:d2:48:8d:42:c5:76:3d:03:41:97:5b:65:c1:
96:a1:b6:ba:d4:c3:38:be:65:d3:10:73:d8:ad:31:
eb:d8:54:0b:20:6a:f8:cd:de:27:98:6f:b8:cd:29:
7c:d6:e7:0e:37:b0:07:ac:bf:90:38:4c:23:9a:5b:
c7:e8:f2:41:46:ae:62:9d:6c:7e:13:2c:be:1a:df:
17:c7:8b:5f:3d:7f:7e:78:c7:95:c4:04:86:15:0d:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:59:CA:DF:3D:34:9D:58:45:4E:C1:9D:38:AA:C7:13:FB:3B:F4:6D
X509v3 Authority Key Identifier:
keyid:97:EA:C7:53:37:9F:D2:2F:F6:51:50:33:F5:13:DC:28:24:63:AD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-rHUzef0i_2UVAz9RPcKCRjrS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/sVnK3z00nVhFTsGdOKrHE_s79G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4b08af-67db-42da-a094-ef590c1c8e12/1/l-rHUzef0i_2UVAz9RPcKCRjrS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.144.0/22
Signature Algorithm: sha256WithRSAEncryption
38:c8:59:75:b3:07:af:58:c4:bb:9d:dc:68:76:3e:f4:5c:cd:
76:5d:25:3a:73:af:81:55:9e:a9:9d:f4:8d:5d:d9:84:c1:d2:
29:83:44:95:08:2c:ea:7b:78:04:6d:76:68:f9:b9:3c:20:dc:
b7:c8:5f:50:75:31:b0:9f:6c:8e:aa:6f:9c:fc:69:f1:fa:cb:
31:ae:e9:fe:80:8e:a4:b0:ee:1a:01:a1:94:53:5e:54:95:03:
02:f1:09:ef:eb:97:73:ee:db:84:4f:53:3a:6d:08:7a:19:6f:
d5:1e:ec:27:df:34:59:94:c2:4b:ab:c4:f0:f4:b7:93:39:04:
f8:97:85:e0:39:3f:10:e9:32:b5:8b:e8:a3:0b:9d:d9:c9:92:
04:0a:2f:1a:0f:75:5e:d2:f4:01:7c:75:7a:c6:4f:8a:43:a4:
fc:60:15:7a:66:72:51:71:20:a2:dd:44:c4:39:9c:98:c9:4e:
b6:65:44:17:cb:63:a1:fd:21:b6:44:41:fb:74:af:fe:2e:8c:
18:88:cd:8e:54:78:84:8f:1c:34:1c:32:ba:1f:13:2d:df:22:
ce:40:09:a0:2a:12:73:12:b3:69:aa:5d:c0:7f:5e:bc:5e:4a:
9a:f4:4d:3b:16:bc:05:ea:ad:d8:7e:c8:e0:f6:91:e9:36:7c:
15:15:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org