Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/c_dcT2itojoHUdJMnUPELhsAtHQ.roa
File: c_dcT2itojoHUdJMnUPELhsAtHQ.roa (raw, json)
Hash identifier: oHcFQ51Lj3dKVqMzbAdrLsbH2AWVoAsPFTdbqZhUVB8=
Subject key identifier: 73:F7:5C:4F:68:AD:A2:3A:07:51:D2:4C:9D:43:C4:2E:1B:00:B4:74
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 7FBEAF
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/c_dcT2itojoHUdJMnUPELhsAtHQ.roa
Signing time: Fri 08 Apr 2022 08:48:30 +0000
ROA not before: Fri 08 Apr 2022 08:48:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31034
IP address blocks: 185.94.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8371887 (0x7fbeaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Apr 8 08:48:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73f75c4f68ada23a0751d24c9d43c42e1b00b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:71:01:e8:d2:a9:df:ab:92:da:a0:ee:fd:
6e:82:5f:47:11:0a:bc:be:10:ed:42:0c:00:bb:60:
82:f7:4d:11:c4:c8:a8:ec:ea:b6:45:9e:50:37:5f:
fe:5f:7f:24:69:f0:4b:de:ed:29:a2:34:43:8d:06:
a3:f8:16:e5:ec:a7:82:53:c2:a6:eb:8b:4f:cc:5d:
b1:a8:c3:93:e6:73:60:3b:ce:84:6d:1b:15:50:04:
da:4b:76:c2:04:31:6c:6c:9a:a5:6a:aa:1c:9f:8a:
04:83:b4:cf:11:0c:63:32:ce:bc:88:9f:97:72:33:
1b:b9:ac:38:10:93:69:05:4f:e8:ad:15:6a:71:ad:
e4:98:be:a0:ba:f8:36:80:04:eb:11:6d:59:b1:30:
c9:76:bb:16:a3:5d:3e:c8:a8:78:53:b5:20:b1:65:
ff:1d:bf:4e:f6:c0:e6:dc:a6:78:00:73:3d:a5:9b:
b2:91:cb:2e:97:61:64:60:90:a3:f4:1e:6c:87:5c:
b6:a9:10:31:1c:5f:41:22:c4:6d:a0:7f:37:59:c4:
ae:c9:e3:83:98:e3:c7:f0:63:16:7f:4a:81:64:87:
eb:d9:cc:b3:c6:fc:9a:54:bd:69:05:9f:cd:f0:31:
6f:72:cd:63:72:70:13:68:86:79:b8:f6:08:ac:c5:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:5C:4F:68:AD:A2:3A:07:51:D2:4C:9D:43:C4:2E:1B:00:B4:74
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/c_dcT2itojoHUdJMnUPELhsAtHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a2:20:eb:dc:e4:b6:a8:8f:bc:99:ba:0a:2f:46:66:8a:30:
7e:85:3b:b6:92:dc:3c:c8:21:d4:6e:67:2b:db:53:34:98:d3:
38:fc:2f:85:db:f5:25:ff:67:c6:27:63:c0:8d:ff:4c:24:64:
e7:53:46:1d:00:5e:3c:cd:88:71:82:f5:41:19:14:71:63:3d:
32:c9:61:50:12:5e:49:3b:1d:66:ea:98:f2:d6:8f:e8:f1:82:
4c:d5:a0:e8:65:27:2c:4a:0f:c5:80:2e:8e:9f:ce:7e:cc:62:
42:1b:99:b4:3c:f8:f6:0d:bb:78:e7:62:c9:e8:c4:bd:4a:4a:
2d:eb:e2:e2:74:08:3c:60:03:2c:42:8c:47:40:c5:1a:6a:78:
d7:b4:65:30:d3:ed:38:7b:47:67:f5:49:c9:27:ce:10:95:e9:
a9:1b:5b:8c:63:38:4a:34:c9:42:2f:fc:cc:2f:ca:7e:9d:b3:
69:80:22:3a:37:6c:ef:12:f2:b6:c9:72:5e:0b:17:b2:25:04:
d5:2b:e7:b0:0e:39:5f:18:c4:08:ee:f1:d7:38:68:3e:40:72:
02:54:32:1e:6d:b1:87:89:fb:1f:d5:53:6e:86:41:79:1b:69:
50:66:67:ab:73:e6:ed:e2:93:df:1c:54:03:ab:be:20:c9:4d:
9c:6a:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:26 2023 by rpki-client on console-ams.rpki-client.org