Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/0dMan3inBSZI_qzIJfMuEDaab0g.roa
File: 0dMan3inBSZI_qzIJfMuEDaab0g.roa (raw, json)
Hash identifier: aj7szZ56vOorBlEAFnT/ipC+ZClZ1514vA9w/SsDd8o=
Subject key identifier: D1:D3:1A:9F:78:A7:05:26:48:FE:AC:C8:25:F3:2E:10:36:9A:6F:48
Certificate issuer: /CN=4aab65873cb2782f13c378f5543c691443d16f79
Certificate serial: 0181E95F3009B4F9F199BE9CF5D95D969C13
Authority key identifier: 4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/0dMan3inBSZI_qzIJfMuEDaab0g.roa
Signing time: Sun 10 Jul 2022 18:28:58 +0000
ROA not before: Sun 10 Jul 2022 18:28:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.201.4.0/24 maxlen: 24
185.201.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e9:5f:30:09:b4:f9:f1:99:be:9c:f5:d9:5d:96:9c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aab65873cb2782f13c378f5543c691443d16f79
Validity
Not Before: Jul 10 18:28:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1d31a9f78a7052648feacc825f32e10369a6f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:b8:5a:72:c0:3f:c8:52:0e:5d:a0:3a:d8:
90:a7:c1:27:a7:84:3c:99:6b:85:ad:dd:89:c0:da:
9a:bd:9b:6d:a1:b5:f2:e6:bc:c4:fc:87:32:54:9d:
1e:ee:41:48:78:48:6d:12:a0:c9:fc:d4:4a:8e:92:
f4:d1:22:62:69:17:80:15:17:6d:42:75:2d:48:de:
c5:fa:d7:50:2c:e8:fa:7a:7c:3d:d8:27:b2:ca:07:
3e:23:8b:8f:8d:8f:aa:8d:ef:02:6c:63:59:42:64:
5c:a1:26:d7:b2:e4:8e:08:c9:12:9e:93:87:5c:a8:
a4:8b:31:62:ca:bb:7b:d9:76:5d:21:f2:17:0e:47:
72:32:7a:93:7c:e2:04:51:a7:20:86:18:1f:68:1a:
8e:80:20:4e:74:92:b2:90:53:9c:ce:91:f7:82:ec:
10:2c:bc:52:31:0d:19:c7:b3:48:47:37:06:34:73:
01:b6:f8:53:98:16:9f:6e:96:12:65:cc:39:c1:d7:
8e:97:17:de:3b:18:ab:94:b5:d2:a2:49:e1:0e:4b:
67:b9:8a:05:47:12:e4:f3:08:ca:00:11:9f:a5:67:
7e:c0:3a:fd:ec:6e:09:a3:ed:b7:ae:32:96:b2:5c:
a4:6e:70:65:6f:1e:11:bd:f8:2b:cd:0d:1b:bf:2c:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:1A:9F:78:A7:05:26:48:FE:AC:C8:25:F3:2E:10:36:9A:6F:48
X509v3 Authority Key Identifier:
keyid:4A:AB:65:87:3C:B2:78:2F:13:C3:78:F5:54:3C:69:14:43:D1:6F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/0dMan3inBSZI_qzIJfMuEDaab0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/SqtlhzyyeC8Tw3j1VDxpFEPRb3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.4.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:20:b9:46:bf:0d:df:a7:32:98:89:72:8b:6c:8f:16:b1:a6:
c6:a3:f5:ae:11:c9:3e:80:58:e8:94:64:68:2b:a0:a6:98:23:
50:6a:1d:2e:56:e2:e7:7d:e5:8c:3d:cb:6a:eb:de:e7:9a:3c:
c4:e6:b9:e9:0a:69:14:c9:9c:28:99:3f:1f:37:ab:f9:6b:bc:
71:29:6e:cf:fe:27:14:bc:8e:2b:a8:95:81:c4:1d:ad:6f:2e:
57:51:85:e8:e0:52:9e:31:a2:7e:3f:33:41:f0:ef:85:9e:b2:
18:fd:85:03:48:c2:eb:b8:bc:d6:7d:d4:37:5f:b8:2f:30:b9:
48:84:de:28:61:0f:53:50:1f:5d:db:22:1b:ef:2d:e0:bb:c5:
59:1c:87:e7:36:2f:95:94:07:90:51:07:36:5c:37:8c:7f:37:
ec:36:c0:ad:b6:34:3d:0a:0b:df:6b:f6:b0:00:81:9d:d5:38:
bc:e7:f6:36:0b:00:6f:96:93:1c:92:1b:f5:f6:cc:10:45:d3:
a4:38:c6:40:f5:5c:fa:bc:a1:8d:5b:03:80:77:57:dd:c2:0d:
d9:80:b6:c6:82:5e:a8:6d:f2:f6:24:72:ed:c9:bb:6c:11:df:
2c:06:71:21:1a:9d:bc:d2:29:57:33:18:22:e4:46:3d:38:3c:
4e:86:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org