Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/aRGFP6K6eo0lIcWQx2hgL-0cTxE.roa
File: aRGFP6K6eo0lIcWQx2hgL-0cTxE.roa (raw, json)
Hash identifier: U8eclSba5x8nHvGLOFPhuGutGhIMYX0G0OyhQDS1OlA=
Subject key identifier: 69:11:85:3F:A2:BA:7A:8D:25:21:C5:90:C7:68:60:2F:ED:1C:4F:11
Certificate issuer: /CN=e726926b6e8970cf84d6b4756fa9c56211200537
Certificate serial: 9772DB
Authority key identifier: E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/aRGFP6K6eo0lIcWQx2hgL-0cTxE.roa
Signing time: Sat 01 Jan 2022 00:58:06 +0000
ROA not before: Sat 01 Jan 2022 00:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47701
IP address blocks: 185.144.41.0/24 maxlen: 24
185.144.43.0/24 maxlen: 24
185.144.40.0/24 maxlen: 24
185.144.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9925339 (0x9772db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e726926b6e8970cf84d6b4756fa9c56211200537
Validity
Not Before: Jan 1 00:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6911853fa2ba7a8d2521c590c768602fed1c4f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:f2:ab:00:4d:77:e9:1e:c2:3b:9e:db:d5:
74:2a:54:7a:8b:f5:af:e5:cd:33:80:e9:d4:44:53:
43:01:64:d6:cf:f7:9c:ab:bc:93:bb:16:2e:d0:0d:
e4:dd:ef:d8:59:66:ab:5f:38:1d:90:8a:88:1b:6b:
d6:3c:7e:c4:82:0b:64:6d:67:c6:3f:26:32:ba:ab:
b9:69:23:32:44:fb:3a:af:35:fc:fc:4f:56:33:de:
fb:8a:a4:47:b8:43:0c:a8:c6:bf:5f:9b:03:14:18:
b9:cf:fa:e8:49:18:c2:80:d1:cb:e6:54:7b:75:c9:
dc:54:f2:7a:6d:89:18:ab:2c:7d:b6:de:91:f0:09:
51:87:e4:e0:01:86:2d:18:a5:d7:b9:db:e1:b2:79:
80:7f:bc:ec:2a:4f:cd:e4:41:db:e5:db:18:a8:aa:
0a:22:84:da:7b:5b:78:0f:55:0b:e1:8b:a8:06:25:
15:41:9c:53:a3:4a:0e:55:ed:bc:a7:93:f2:1c:b5:
ef:51:dd:70:9b:45:c8:5a:fd:63:ec:5d:4f:8c:57:
85:1a:8f:27:a3:94:98:85:a7:b1:a0:bd:a2:13:4b:
19:a8:51:e5:d5:55:dd:a0:bc:53:e7:80:b0:8b:13:
2f:06:e7:c5:3b:13:2f:e8:ae:91:e8:50:01:f3:ce:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:85:3F:A2:BA:7A:8D:25:21:C5:90:C7:68:60:2F:ED:1C:4F:11
X509v3 Authority Key Identifier:
keyid:E7:26:92:6B:6E:89:70:CF:84:D6:B4:75:6F:A9:C5:62:11:20:05:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yaSa26JcM-E1rR1b6nFYhEgBTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/aRGFP6K6eo0lIcWQx2hgL-0cTxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d718e4-8abc-4b23-ac10-c102ee96858e/1/5yaSa26JcM-E1rR1b6nFYhEgBTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:46:18:ad:ed:2e:ef:75:a3:6c:fa:04:38:79:78:de:7e:c9:
c7:4d:b8:3a:6b:55:c5:6e:14:18:f1:1b:7e:e7:4e:31:3d:bf:
e2:e3:5b:54:10:b5:50:d1:2a:18:45:8e:ac:e4:65:62:79:83:
74:89:79:59:a6:00:b3:6a:2c:c5:cf:62:3f:5b:15:a8:5d:cd:
7b:71:e3:62:13:82:e4:8f:69:b9:77:da:33:27:fa:dd:fd:58:
17:0f:7a:8f:05:42:6f:98:9c:9b:5e:74:bb:12:ee:76:96:db:
e9:26:cf:76:b6:bb:ba:06:f2:fc:e5:22:22:fb:f1:74:af:0f:
3d:00:a5:da:7a:ac:06:a3:49:c6:5c:f4:a8:62:8d:cb:3e:5c:
a6:64:f0:dc:7b:04:6b:89:78:a7:fa:68:cc:c8:20:49:5a:68:
43:15:d4:86:20:dc:2e:9c:05:b3:bc:82:aa:9d:ea:9f:45:91:
87:ed:28:b7:e2:fa:1e:ab:fc:ce:c6:73:d7:9d:2a:57:a8:12:
ab:3d:50:73:d4:50:c4:3d:13:35:36:c8:c1:b0:bf:9d:de:75:
3a:2a:9f:ab:11:d5:d9:b9:e6:53:a3:56:25:69:7b:55:d7:19:
a0:c7:e4:d6:1a:2d:3e:f3:84:a3:2b:b1:49:7b:91:e4:f0:d4:
a1:d6:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:15 2023 by rpki-client on console-fra.rpki-client.org