Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/AZPqGBoYdNraGFGJphboFrplaEY.roa
File: AZPqGBoYdNraGFGJphboFrplaEY.roa (raw, json)
Hash identifier: iNMwmTRWl75SXbXV6UFWoXCfDnt8/pKwaf5vFBid/f8=
Subject key identifier: 01:93:EA:18:1A:18:74:DA:DA:18:51:89:A6:16:E8:16:BA:65:68:46
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 07BD3CF6
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/AZPqGBoYdNraGFGJphboFrplaEY.roa
Signing time: Sat 01 Jan 2022 15:56:19 +0000
ROA not before: Sat 01 Jan 2022 15:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206642
IP address blocks: 185.179.143.0/24 maxlen: 24
185.179.140.0/24 maxlen: 24
185.179.141.0/24 maxlen: 24
185.179.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129842422 (0x7bd3cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jan 1 15:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0193ea181a1874dada185189a616e816ba656846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:3f:e3:e7:d6:1b:53:c0:9f:2f:c2:d5:d6:
c9:7a:f4:cc:bd:28:e8:d6:e3:bc:c2:c5:57:2c:c9:
4e:c2:12:8e:e1:09:77:fc:7c:62:5d:20:f5:21:4d:
fa:54:43:d1:ba:ee:0e:fa:7d:00:d2:85:eb:f2:c7:
9e:7c:27:5d:25:6c:7a:09:f4:72:51:26:a2:45:57:
d0:71:8e:af:e9:9a:8f:b9:16:21:9c:2a:a2:51:b9:
42:98:f8:a9:da:7b:0c:8a:1a:13:a4:24:37:54:ce:
f3:d0:82:df:d7:6a:c1:4b:ed:0a:a1:be:cc:14:c7:
c4:19:7e:24:26:5d:8a:d9:5a:cf:e6:00:6c:4f:12:
91:15:a5:30:1a:70:6e:47:79:dc:63:b3:2c:57:ed:
d7:12:aa:8d:6d:6c:2e:aa:59:f8:b1:6e:d7:a6:ba:
6f:1b:1c:f6:0a:e2:76:25:61:11:ac:0c:30:b8:da:
dc:bb:84:5a:5a:0c:1a:a3:22:50:6f:9e:b5:45:ae:
ac:f1:6e:48:cf:28:2b:2a:f2:a1:92:42:ef:ff:0f:
66:58:77:f5:33:f4:a6:f3:a4:9b:8f:bd:a2:13:17:
1f:9d:b0:0d:0f:5c:43:c0:e4:ba:9e:57:c1:88:fc:
80:16:7a:c0:bc:80:b3:3b:3c:26:f4:92:a2:4e:92:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:93:EA:18:1A:18:74:DA:DA:18:51:89:A6:16:E8:16:BA:65:68:46
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/AZPqGBoYdNraGFGJphboFrplaEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:99:e3:71:04:10:42:07:90:92:25:56:f9:f5:d5:c3:54:36:
19:86:38:48:ba:2e:03:28:35:02:60:8c:35:11:96:9b:e9:24:
99:cc:8a:b0:a2:bf:7d:77:13:67:fc:fc:68:ee:4e:06:19:72:
29:3e:b8:3f:9e:b1:82:3d:87:cc:8d:89:93:a9:a3:11:5f:a2:
41:cf:02:52:19:82:e6:fe:97:7f:16:9a:c4:6e:60:ce:0c:04:
5d:e8:47:7d:c1:4f:03:ee:c9:df:79:61:27:7f:b5:9a:af:2a:
dc:36:f9:cf:3f:71:e2:da:33:1f:55:84:1b:8f:32:a5:c8:15:
a3:41:ee:95:c1:16:4f:88:5e:66:62:a7:09:58:60:1d:f7:8b:
c6:ba:a6:b9:2e:01:ab:7c:76:0f:28:09:be:fd:ed:23:22:71:
f9:1a:3e:cc:b1:a4:a5:c7:32:87:ee:8b:ae:07:a0:51:b9:21:
c4:b8:e3:00:ea:c5:5a:b7:a9:37:0a:1d:e7:3a:3e:be:12:95:
0a:b3:8d:54:88:0a:73:22:71:9f:d9:62:a6:02:f0:1a:ed:af:
8a:34:56:5b:b1:2d:66:4b:dd:86:03:82:2a:57:8a:55:fe:a4:
04:0d:00:a8:8c:ac:71:03:c1:7b:d0:1c:ec:36:84:d9:d3:3b:
aa:c7:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:42 2023 by rpki-client on console-fra.rpki-client.org