Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-APG4anQkjj7BC1yQlq1mR5Sf9A.roa
File: 1-APG4anQkjj7BC1yQlq1mR5Sf9A.roa (raw, json)
Hash identifier: rBVc7tHSAPlqQnY8foXeATgGXzSFKNLjTsMBXwXdxII=
Subject key identifier: F8:03:C6:E1:A9:D0:92:38:FB:04:2D:72:42:5A:B5:99:1E:52:7F:D0
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0722A9
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-APG4anQkjj7BC1yQlq1mR5Sf9A.roa
Signing time: Thu 26 May 2022 17:13:15 +0000
ROA not before: Thu 26 May 2022 17:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60604
IP address blocks: 84.239.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467625 (0x722a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: May 26 17:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f803c6e1a9d09238fb042d72425ab5991e527fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:8a:46:41:28:58:89:0c:73:a8:16:21:fb:
ab:d0:e2:4c:78:25:03:10:5a:90:db:09:cf:c9:30:
4c:43:4d:5f:5a:2d:0e:6e:93:c2:c4:76:29:2c:a0:
09:1c:11:c8:51:57:be:d7:fd:b9:4e:34:ad:99:31:
04:82:0d:e7:d0:bb:e0:c7:4f:f3:e3:26:12:c1:90:
76:10:ed:35:19:f7:99:f8:f1:4e:d3:9e:1e:51:f7:
ce:ed:93:fc:28:3e:85:ba:41:0e:32:b9:17:72:33:
7b:b1:81:92:b3:ee:1d:7c:50:47:2e:35:a0:30:3a:
51:e2:0b:c2:1c:c8:4a:8e:4d:7f:e2:5d:c5:46:ee:
1e:67:4f:a8:0f:23:54:78:11:3b:f2:b0:e2:7b:c2:
24:a6:f8:22:ad:05:90:cd:dc:78:01:5f:18:92:5b:
53:61:01:24:3c:fc:04:18:d3:24:e7:ff:ea:ef:f7:
b0:b4:80:cc:84:4b:a7:d4:a3:25:de:0b:0b:bd:19:
0c:cb:02:f4:c8:a3:c6:8c:77:c6:77:66:20:db:be:
85:cc:40:67:5b:6e:3e:09:ce:15:e8:be:0f:86:66:
86:ae:42:d6:60:21:13:7e:41:15:43:9c:de:11:88:
7a:e5:2a:ae:ec:a0:9b:39:d3:ae:a3:45:72:37:2b:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:C6:E1:A9:D0:92:38:FB:04:2D:72:42:5A:B5:99:1E:52:7F:D0
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-APG4anQkjj7BC1yQlq1mR5Sf9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
79:f9:05:ac:56:ab:79:52:d4:c6:9c:6f:90:ac:fa:9c:2e:b6:
29:7c:0a:e8:fc:8b:cf:ce:03:27:7a:18:37:5e:18:95:10:5c:
53:16:99:a6:0d:50:82:e4:c9:ef:8a:99:02:41:0a:ff:e9:6e:
80:16:01:88:8c:10:93:d0:26:14:05:9c:65:01:b5:98:f9:ae:
3c:bc:1b:5b:cc:ac:8a:fd:35:66:ea:6a:38:b1:c0:a9:7b:69:
5a:1d:a6:9b:49:f8:8a:cf:66:97:20:03:07:66:1d:97:66:fa:
66:08:62:b8:fe:55:80:a6:90:c8:7f:a8:c2:af:12:fe:94:29:
af:d8:b7:3f:b4:3e:a8:33:f3:83:7e:ca:51:0c:cd:78:cf:78:
4f:0a:00:8e:5c:94:e2:d7:0e:93:5f:75:4a:a9:5a:ac:a1:e8:
49:36:40:f5:ed:28:03:e3:c0:db:05:22:39:e3:2f:0e:07:ca:
13:7a:b8:06:e0:40:d9:94:0b:0f:dc:3d:b5:c9:45:77:06:f2:
fd:01:83:1a:c9:d0:fd:27:65:1f:f7:3f:ff:38:42:93:8c:3a:
f7:5f:22:91:5e:2f:01:94:34:7c:1a:f4:24:ac:77:01:bd:9b:
b8:ac:3f:44:b0:49:ab:87:f6:1a:89:82:ad:76:b1:7e:55:ec:
7e:1f:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:05 2023 by rpki-client on console-ams.rpki-client.org