Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bQsO3h1Ruzk6AIafSsSys5W1tWQ.roa
File: bQsO3h1Ruzk6AIafSsSys5W1tWQ.roa (raw, json)
Hash identifier: JKRaci3mkYSStcG1D9V7BDxVNrKc+cW0z8sfdPw6MCI=
Subject key identifier: 6D:0B:0E:DE:1D:51:BB:39:3A:00:86:9F:4A:C4:B2:B3:95:B5:B5:64
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01838F0A1D9B37C13C223EAC57CCBA22D6F9
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bQsO3h1Ruzk6AIafSsSys5W1tWQ.roa
Signing time: Fri 30 Sep 2022 15:35:48 +0000
ROA not before: Fri 30 Sep 2022 15:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.174.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8f:0a:1d:9b:37:c1:3c:22:3e:ac:57:cc:ba:22:d6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 30 15:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d0b0ede1d51bb393a00869f4ac4b2b395b5b564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:bf:05:49:39:cb:e3:63:9a:8a:15:f7:1a:
af:26:ba:84:d2:e6:37:1a:f1:b8:96:95:9c:4c:52:
04:7a:8a:7a:d0:8c:f6:6c:73:e3:ae:63:52:ec:98:
7d:0b:d3:dd:92:6a:a8:b7:f3:70:3f:f9:5e:16:d6:
b3:16:52:5c:ab:1e:2d:02:3d:95:c5:5b:e9:82:26:
1b:e7:e0:7c:2f:c2:a9:85:b1:83:92:95:be:f6:7e:
f3:ed:ef:82:aa:5e:c1:1c:11:66:72:02:05:3b:7a:
c8:17:c1:ff:e7:62:d0:0f:e5:15:d7:12:20:2c:65:
cb:ea:e7:a9:78:cb:f6:97:76:69:cc:2c:62:a1:e2:
fe:92:27:ea:4b:de:f7:69:db:d1:af:6f:0d:6d:80:
f4:96:a8:96:42:2e:0a:37:1a:f7:ba:0b:05:75:d8:
9e:d4:73:f7:6b:2f:5b:40:a6:d7:26:19:8b:a1:64:
e5:23:fe:a2:e3:aa:a4:5a:94:7f:c0:1b:14:e4:64:
da:7f:1a:8e:3e:e5:c5:84:29:c1:d9:ff:77:5b:c1:
c5:3c:85:35:ea:80:90:d5:cf:ce:37:4b:2f:93:c3:
40:51:f1:dd:08:4b:45:b8:b6:c9:11:98:7e:68:cc:
3b:4d:03:54:b3:18:28:21:32:bb:01:8c:c4:9c:2a:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0B:0E:DE:1D:51:BB:39:3A:00:86:9F:4A:C4:B2:B3:95:B5:B5:64
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/bQsO3h1Ruzk6AIafSsSys5W1tWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.41.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a2:81:7b:2c:d4:3a:ba:05:b7:b5:1a:f8:1e:fd:8c:14:13:
25:58:79:7d:73:51:b9:4a:b5:fe:e4:5a:f5:8c:f0:b0:df:76:
b2:d1:c9:9b:79:80:3c:10:dd:47:ca:61:12:3a:4c:5f:dc:5f:
4d:a7:c3:c9:79:c8:e5:7b:77:9d:24:b6:da:8c:75:65:7e:b3:
d8:91:e0:c1:bb:cf:b9:ba:50:f5:b2:5f:50:56:5e:7c:8f:9c:
60:aa:f8:15:49:c5:ab:e2:e9:32:bd:e7:dd:38:68:96:17:5a:
a2:8d:4b:86:21:5f:cd:f8:dd:bc:66:f5:40:94:f7:95:39:8d:
b0:20:37:d3:7d:8a:08:d8:0a:97:7b:3f:5c:56:87:10:08:e2:
ea:d6:89:73:45:08:e5:57:31:af:38:f1:88:91:3d:f2:2a:79:
fe:9b:89:39:1b:f4:02:c2:33:53:1b:13:fb:f4:5c:eb:60:36:
22:da:4d:20:a8:26:78:b4:56:ca:eb:76:7e:32:5f:17:b9:2f:
5a:76:19:8f:0b:1f:45:76:30:66:c7:44:37:1c:4b:09:9e:2d:
ec:56:03:bd:01:33:8f:07:24:d6:eb:d2:0c:c1:b7:9a:37:93:
17:b5:42:2d:5b:65:60:58:2b:d2:e2:55:63:57:fc:3a:0b:ed:
28:b4:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:21 2024 by rpki-client on console-ams.rpki-client.org