Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/1-hp3nTRID09q4NEZ8UuH4HctQe4.roa
File: 1-hp3nTRID09q4NEZ8UuH4HctQe4.roa (raw, json)
Hash identifier: LU4ZfdQZUFd3Sxs0B6ZDtm6Y7+pn0+lDr2MsJz8wmwE=
Subject key identifier: FA:1A:77:9D:34:48:0F:4F:6A:E0:D1:19:F1:4B:87:E0:77:2D:41:EE
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0A914B21
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/1-hp3nTRID09q4NEZ8UuH4HctQe4.roa
Signing time: Sat 01 Jan 2022 16:05:32 +0000
ROA not before: Sat 01 Jan 2022 16:05:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207590
IP address blocks: 185.162.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177294113 (0xa914b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 1 16:05:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa1a779d34480f4f6ae0d119f14b87e0772d41ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:ca:4a:bc:78:5c:7b:b4:41:f9:16:eb:2a:
85:65:7e:1e:44:3d:4c:2a:35:5c:55:4c:33:ce:b9:
77:7e:f8:fd:ab:67:06:4d:32:82:4e:65:19:6a:aa:
2a:28:23:df:10:31:6f:be:b8:cf:41:e2:24:85:16:
0e:fe:5b:44:28:0f:40:24:dd:7a:e3:ff:80:8f:9f:
ab:00:46:b1:6a:e6:2f:fd:cc:e0:57:8e:74:16:49:
7b:af:eb:ef:8a:0b:ea:45:05:d6:45:68:16:0d:d7:
c4:67:06:e6:1a:52:93:50:67:fa:77:fb:8e:35:3a:
ca:b4:8a:6c:5a:f0:67:ea:2e:5f:c9:53:33:d5:02:
5a:c1:15:43:45:7e:ee:85:1d:6b:b8:79:50:12:e3:
f2:8d:6a:36:83:2a:0f:dc:f5:fe:9e:66:a0:80:43:
4b:1b:f4:a3:5d:1b:02:10:c9:d4:17:fc:73:9d:52:
74:4e:e1:90:92:b5:3c:20:4a:af:19:b3:57:29:26:
95:8a:d3:a6:5f:4c:ae:2e:69:f7:1e:a2:13:fe:ef:
b0:16:85:32:7a:ec:56:74:1a:e3:a3:4a:8c:3e:ac:
d3:e5:5f:40:84:f9:9b:0c:e0:89:19:4a:3b:f2:e9:
ed:6b:d0:66:79:b1:18:04:26:db:7a:42:b6:71:d0:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:77:9D:34:48:0F:4F:6A:E0:D1:19:F1:4B:87:E0:77:2D:41:EE
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/1-hp3nTRID09q4NEZ8UuH4HctQe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.88.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2a:9f:16:61:6a:bc:05:64:4a:25:d1:06:a7:66:58:d5:1c:
77:96:5e:2d:a5:fe:62:4a:57:46:2c:cd:e2:54:18:a9:43:30:
a6:fe:e6:86:d4:80:29:66:62:17:bd:b3:e3:35:d8:8e:3b:fd:
aa:c4:7a:87:ca:38:9f:12:d2:91:5a:c5:28:ba:e9:29:9d:98:
9c:19:99:90:4b:50:bf:aa:5e:68:54:9a:d9:02:f5:d9:2b:3a:
43:a8:67:f8:9b:52:b3:2d:4e:25:b8:ed:b8:4e:32:82:11:85:
4a:f2:00:35:04:f2:8f:f0:d4:df:e1:4a:88:a9:6c:48:4e:b9:
f1:37:84:a8:96:e1:69:28:43:11:f1:a1:c2:b6:75:b5:cb:93:
de:b2:43:f7:b2:b8:61:c0:e3:2c:b8:1d:15:e1:29:da:ee:3f:
4f:cd:0d:13:63:20:5a:5a:da:92:4f:4f:05:d1:ae:19:b7:96:
c4:0f:96:38:0a:a1:9f:1e:56:26:6f:2f:22:d8:73:1f:5c:ec:
03:e7:55:fc:23:8f:43:98:69:99:f8:6f:8c:08:5b:91:5d:bd:
bf:b2:21:e0:7b:84:d2:71:e5:08:5a:88:a4:3a:7c:27:7d:62:
7d:00:5e:37:ec:a9:b0:78:16:85:c6:ec:d3:ae:cf:42:3c:ef:
0d:f5:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:16 2023 by rpki-client on console-ams.rpki-client.org