Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/3Aqg6Im90fdmQTWS73c1p60hXkY.roa
File: 3Aqg6Im90fdmQTWS73c1p60hXkY.roa (raw, json)
Hash identifier: ef4UKtH05NdH4nqSBzgbSldQmATgDwO+njBnwzfrEeQ=
Subject key identifier: DC:0A:A0:E8:89:BD:D1:F7:66:41:35:92:EF:77:35:A7:AD:21:5E:46
Certificate issuer: /CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Certificate serial: 066E1E19
Authority key identifier: 29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/3Aqg6Im90fdmQTWS73c1p60hXkY.roa
Signing time: Sat 01 Jan 2022 04:59:53 +0000
ROA not before: Sat 01 Jan 2022 04:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.97.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107879961 (0x66e1e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Validity
Not Before: Jan 1 04:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc0aa0e889bdd1f766413592ef7735a7ad215e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:72:3e:83:a6:89:21:6e:11:c9:35:0d:44:
87:06:92:33:91:48:32:fe:b3:cd:9a:46:b8:a6:12:
15:7a:ac:a0:4a:7d:2e:fd:65:14:33:55:73:50:b7:
61:df:56:99:43:9e:ca:d3:b1:8d:98:8c:80:24:30:
10:f6:9e:85:42:02:c3:de:5c:a0:b8:25:ff:c9:ce:
ee:57:d9:63:8a:1d:b4:29:7e:0d:72:49:12:21:d8:
29:94:10:bd:a5:d3:04:2a:63:f9:19:e3:87:2d:1e:
9c:3d:c1:1d:7b:88:a6:aa:bb:bb:55:2e:43:48:59:
31:32:da:05:6c:10:1d:9a:63:eb:29:c9:89:28:48:
f7:e1:28:29:f9:cb:2c:12:d1:33:bc:a2:43:fb:e6:
62:8a:43:45:59:6d:02:a8:a5:a4:64:03:e2:e9:4a:
6d:db:4c:ea:31:2e:9c:1f:29:2a:22:91:e8:bb:55:
9e:dc:67:4a:18:bb:31:3f:53:16:10:a5:04:7d:ce:
53:47:5d:01:fd:62:25:79:c0:fd:2f:40:af:60:9a:
3d:1a:1e:35:8c:99:d9:3c:ed:39:a0:85:73:45:7a:
91:c1:3e:23:7e:37:e2:25:18:5d:3d:d5:e1:94:bf:
fd:ee:59:f4:b1:d7:b0:94:7c:ca:c3:bd:1c:6c:da:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0A:A0:E8:89:BD:D1:F7:66:41:35:92:EF:77:35:A7:AD:21:5E:46
X509v3 Authority Key Identifier:
keyid:29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/3Aqg6Im90fdmQTWS73c1p60hXkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.212.0/24
Signature Algorithm: sha256WithRSAEncryption
16:83:43:85:3f:0e:5a:b7:86:ee:78:22:f2:1a:c9:59:52:2a:
8a:0c:6d:e9:35:5f:28:7f:2a:51:c3:f4:be:25:e0:6b:66:13:
ec:e8:b2:aa:f3:25:4e:54:5e:12:30:ee:77:df:73:a6:17:93:
be:2a:8a:14:61:85:b0:8f:5a:f6:1d:b2:ee:d2:da:47:25:f3:
f5:09:00:8e:d0:87:48:20:8f:67:cc:09:b8:49:7b:a3:d7:2c:
e4:36:6c:bc:82:b0:b6:a4:ba:eb:0a:b3:0c:23:4a:7d:42:f6:
3d:55:04:65:f4:e9:05:4e:1f:9d:e9:9f:01:f6:f2:24:34:c3:
55:46:fa:42:f9:ec:69:42:0b:7b:b1:da:3e:69:d8:95:5b:89:
05:e0:61:84:62:34:64:6c:42:2c:c8:56:6d:59:80:d2:fd:66:
06:e8:bf:33:3d:d9:ce:97:77:67:2e:12:b4:d5:08:aa:77:44:
39:73:8e:7e:93:8f:58:7e:67:97:0a:fa:55:77:ac:55:81:60:
67:64:a3:2e:1c:ea:28:71:66:41:98:22:e2:00:6a:77:e2:1e:
8e:92:40:ae:ab:d7:42:a8:43:cd:17:8a:ac:21:81:b6:3b:d3:
a5:bf:b7:34:cb:87:5a:76:35:54:3c:52:a5:ca:ab:02:bd:5e:
8f:db:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:31 2023 by rpki-client on console-ams.rpki-client.org