Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/68vP5QtgTclfyPA7GATeB234gik.roa
File: 68vP5QtgTclfyPA7GATeB234gik.roa (raw, json)
Hash identifier: y2NuccNmhjdLAP/Sm+bWCCsdO9HFpfhpoqxBvLuhon8=
Subject key identifier: EB:CB:CF:E5:0B:60:4D:C9:5F:C8:F0:3B:18:04:DE:07:6D:F8:82:29
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 1A936A40
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/68vP5QtgTclfyPA7GATeB234gik.roa
Signing time: Sat 01 Jan 2022 01:57:02 +0000
ROA not before: Sat 01 Jan 2022 01:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3175
IP address blocks: 185.45.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445868608 (0x1a936a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 1 01:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebcbcfe50b604dc95fc8f03b1804de076df88229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:64:76:c6:95:71:9c:4b:29:1b:56:ee:52:
78:dc:a6:83:ea:77:95:68:c4:8f:db:25:3d:66:af:
ab:3d:a6:da:fb:df:58:b8:77:f8:40:7c:99:58:fb:
1d:a8:0f:35:c1:9e:e3:28:1a:f4:7f:92:b1:f2:45:
d4:9e:ae:10:75:5e:ee:0f:34:47:c9:1a:b0:e1:ad:
02:2b:07:83:dd:45:3d:5a:15:c0:85:7c:79:26:c7:
0e:77:26:5c:12:03:c3:fe:20:b0:48:d7:4b:4e:76:
60:90:f2:bc:f8:85:4e:74:ea:95:2b:ea:b7:da:3c:
07:34:47:17:1b:12:be:c9:c9:83:0a:42:a0:a3:ed:
5d:30:6d:85:c9:49:9d:9e:09:36:4d:3d:27:49:d2:
4a:b9:79:d7:76:70:aa:aa:9d:e0:00:82:cd:21:fd:
d3:60:f1:b8:28:5a:a2:0c:e5:ec:24:8f:58:13:89:
96:a2:d1:53:35:39:86:13:18:35:d2:7b:53:e2:07:
ab:5e:31:61:34:57:1c:a3:71:dc:c6:f0:be:00:6a:
6b:b8:0d:c9:7f:5b:ea:f4:51:cb:18:dc:7c:76:b9:
4b:56:54:dd:ee:b8:ea:97:09:fb:24:ef:f3:cd:24:
b3:41:82:d5:62:94:1c:46:10:61:6e:00:86:c8:ec:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CB:CF:E5:0B:60:4D:C9:5F:C8:F0:3B:18:04:DE:07:6D:F8:82:29
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/68vP5QtgTclfyPA7GATeB234gik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.81.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:dd:4d:5e:2e:e7:9b:db:30:70:94:f4:1f:1d:68:9a:c6:63:
70:fe:ad:7c:5d:99:cc:19:ab:3a:4d:37:ff:b9:d7:20:8a:21:
fa:88:7b:9c:41:bd:e6:86:fa:70:7f:58:96:25:9d:25:46:c8:
da:72:c7:58:a8:f9:6c:6a:16:6c:4c:09:46:55:69:ea:21:af:
e4:e0:a5:2f:66:de:cd:09:7b:62:4e:9f:96:29:ba:25:df:92:
d3:c1:42:97:f0:34:e8:79:5a:4e:0e:34:f5:50:f7:3c:b8:49:
48:74:8a:2c:b2:11:0b:e9:5a:eb:37:fd:57:40:0e:ed:23:cc:
ac:61:70:56:7f:9e:23:6e:ae:f5:3b:fd:36:a4:2c:14:77:4d:
bf:4d:e8:b9:d8:eb:87:e1:36:02:a0:a7:1a:dc:53:2e:97:60:
b2:6a:ac:65:47:11:5e:3c:07:a3:06:16:22:bb:2b:97:d8:cc:
ef:8a:09:33:28:65:77:ce:e7:34:1c:80:ca:da:cb:ad:d2:b4:
ba:17:76:47:f8:76:f2:20:67:64:9f:79:7d:78:27:c6:a4:07:
a4:1a:40:08:6b:d6:56:5b:a6:61:1e:f0:95:74:9e:d4:8c:72:
19:03:48:d4:76:df:ab:1d:55:43:5b:e6:b3:e6:8a:9e:c4:ab:
3d:8d:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:10 2023 by rpki-client on console-ams.rpki-client.org