Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/o1i_HqndKF2jkGvtv_O7ecDeLfg.roa
File: o1i_HqndKF2jkGvtv_O7ecDeLfg.roa (raw, json)
Hash identifier: 9CRFZRSGAaQz1Ss7tbjcNZG6+Mf6Kxgns3Rv3v1Y/lc=
Subject key identifier: A3:58:BF:1E:A9:DD:28:5D:A3:90:6B:ED:BF:F3:BB:79:C0:DE:2D:F8
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0A8EFAFA
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/o1i_HqndKF2jkGvtv_O7ecDeLfg.roa
Signing time: Sat 01 Jan 2022 16:05:31 +0000
ROA not before: Sat 01 Jan 2022 16:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48629
IP address blocks: 185.170.128.0/24 maxlen: 24
185.170.131.0/24 maxlen: 24
185.170.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177142522 (0xa8efafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 1 16:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a358bf1ea9dd285da3906bedbff3bb79c0de2df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:cb:78:a6:d8:5d:8f:3b:0d:da:0e:07:29:
95:af:c3:64:4c:df:91:34:0c:e1:82:cf:3c:a8:0e:
a7:05:61:4e:6e:81:6a:36:15:72:b9:72:c6:f2:53:
7e:fb:a9:ae:5d:25:0a:fe:fc:07:ed:17:cc:02:0d:
20:a6:42:3c:3e:75:ff:10:54:fc:4f:29:8e:b2:c4:
bd:c4:e4:c0:fd:e0:e8:24:43:72:26:80:76:b2:61:
07:a9:21:ba:b6:9e:ca:0a:7d:b0:ba:b0:70:25:a6:
f8:bd:67:2a:3c:71:7b:25:50:39:f4:84:21:28:0e:
1c:cb:d6:b7:1b:00:e9:ea:39:e8:65:1a:12:ff:1e:
06:ae:a4:ec:f3:b6:36:be:57:5e:11:54:01:86:c8:
4e:65:13:58:47:dd:f3:7f:a4:02:36:40:fd:75:6e:
2e:98:e8:d5:39:ac:e6:e6:f7:05:79:90:b3:fa:93:
53:26:a6:f0:f9:07:11:3a:5d:7f:b8:4b:de:67:d5:
38:5f:c2:5e:92:ab:f6:c8:8f:53:43:2a:3f:e9:6d:
2d:b4:e2:b5:38:91:14:dd:01:4a:94:89:b0:a7:fd:
2e:f9:25:5f:40:67:1b:b6:77:ea:5a:c3:c7:32:cc:
d4:d1:49:a8:24:09:3b:a5:e6:46:ea:a9:17:c1:f0:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:BF:1E:A9:DD:28:5D:A3:90:6B:ED:BF:F3:BB:79:C0:DE:2D:F8
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/o1i_HqndKF2jkGvtv_O7ecDeLfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.128.0/24
185.170.130.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f7:f0:7e:c1:b7:f4:87:dc:e4:e3:5c:58:42:79:da:15:cb:
7a:f5:0b:bc:6a:2c:f5:2c:51:97:71:d6:20:f9:01:8b:17:16:
78:5f:d9:35:e7:6c:4d:3a:70:02:51:d6:1a:26:2e:0e:a8:a4:
42:ec:f4:50:f1:45:b1:b6:ef:bc:17:8b:15:79:41:ca:ae:46:
fe:1d:32:96:95:91:2d:a7:0d:33:4b:85:89:da:1d:7e:6d:78:
13:fe:6d:63:e8:2f:d4:08:c3:7d:1d:a8:44:ab:b3:a6:28:6b:
00:eb:5b:20:83:db:4b:26:3d:d6:d5:06:da:d8:43:23:fb:e4:
c3:54:3d:60:ab:71:11:b1:d5:e2:aa:51:7c:10:f6:3d:22:8e:
50:4e:06:de:d0:c7:17:f3:36:d9:17:57:47:1e:6e:cd:15:c3:
3a:4d:b4:47:cd:58:95:8d:d1:1b:8d:2b:1d:78:ec:c3:9e:88:
50:5d:f4:59:f5:71:3e:14:df:d1:43:8a:67:8c:09:8c:c8:d1:
20:26:88:ce:fd:66:85:e9:d1:0e:e7:df:95:d5:fb:09:0a:02:
94:ba:54:12:80:2c:16:91:ca:5a:f9:fa:0d:cf:7a:a6:f1:4c:
0d:1c:43:33:b4:9a:72:2e:d8:7d:5d:fe:75:f7:77:c0:cc:4a:
b3:78:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:21 2023 by rpki-client on console-fra.rpki-client.org