Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/AkY-H61u6JdWRAJ-XVx53Y2berE.roa
File: AkY-H61u6JdWRAJ-XVx53Y2berE.roa (raw, json)
Hash identifier: GU0/78JSOngG5/iMwIORK7PR9rp6zGa+bvqTphWesUI=
Subject key identifier: 02:46:3E:1F:AD:6E:E8:97:56:44:02:7E:5D:5C:79:DD:8D:9B:7A:B1
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 16B78E53
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/AkY-H61u6JdWRAJ-XVx53Y2berE.roa
Signing time: Sun 20 Mar 2022 07:42:08 +0000
ROA not before: Sun 20 Mar 2022 07:42:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.182.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381128275 (0x16b78e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Mar 20 07:42:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02463e1fad6ee8975644027e5d5c79dd8d9b7ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:1c:dd:33:1c:3b:d4:d7:f6:bf:35:5a:0d:
eb:90:5a:70:6d:96:aa:5c:3c:da:b3:a1:cf:33:11:
a0:03:c1:0f:83:1c:af:68:17:dc:bb:cd:12:58:d4:
5e:05:16:00:ee:11:31:d6:1c:8e:0e:1b:6a:dd:c9:
45:e1:e5:cb:11:70:e4:fa:3b:d7:22:e9:78:68:09:
20:91:29:5a:74:e6:92:ca:3a:21:05:ef:45:7b:be:
59:42:4e:11:e3:63:a0:2e:6a:8a:c9:02:59:54:3f:
63:d0:af:8c:ca:35:b1:53:21:5d:2a:ee:8f:1c:5a:
55:24:34:dd:ae:24:2e:86:85:26:35:49:0a:00:1c:
b2:ec:4a:e0:46:b2:bb:ac:e5:53:78:0b:e7:c1:88:
ad:b1:8b:86:22:36:85:63:c1:eb:5c:5c:94:9d:a1:
a3:19:74:7d:5c:b7:0b:78:84:8c:98:52:9b:09:a8:
be:0a:9c:7c:00:36:37:4e:7d:70:51:c5:ee:23:20:
2d:07:b1:18:50:45:c2:c5:06:10:79:0d:0f:1b:41:
49:55:07:1f:8d:42:7b:d4:89:b5:fe:4d:28:f8:05:
42:4d:fb:21:3e:6e:30:86:98:25:91:fd:77:82:8d:
88:67:19:1c:36:16:75:94:c6:e7:91:5f:4c:d1:52:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:3E:1F:AD:6E:E8:97:56:44:02:7E:5D:5C:79:DD:8D:9B:7A:B1
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/AkY-H61u6JdWRAJ-XVx53Y2berE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.108.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0f:8e:55:14:bc:ff:63:54:9d:2b:34:ed:a0:d4:ca:c9:62:
cb:f0:2f:ae:e9:7a:d4:28:e3:3d:7b:b4:89:b5:8b:7a:1c:2c:
68:f4:a9:92:ce:f0:ec:71:da:cf:78:0f:6b:dc:17:f9:01:0c:
3c:1f:f6:ee:2a:b0:2d:fd:32:e6:4d:b4:dd:cf:3b:50:c3:1f:
8e:72:a5:3a:06:c1:3c:ae:68:58:09:f0:3a:17:26:81:91:73:
90:1a:6f:48:20:1b:5b:13:c5:16:1e:fa:58:8c:9b:5b:05:b4:
13:ca:b2:38:48:0f:95:c8:10:23:d2:66:4c:86:26:a3:b9:9b:
6c:6d:7c:1a:52:89:fa:1c:fa:58:59:78:68:fd:08:e7:e6:52:
e5:94:29:ca:aa:11:61:54:5d:1e:02:44:40:8b:f8:2b:e0:7c:
56:aa:0b:c9:4a:eb:db:e8:3a:f3:20:75:e6:ed:c4:7c:f9:3e:
cc:b0:e4:59:97:d6:e1:51:c1:5a:16:64:c8:29:bf:76:c2:b9:
11:53:1d:13:d5:83:86:c9:7e:59:be:24:bf:bf:75:ec:74:07:
fe:e9:1c:7f:61:b9:fe:24:87:a0:81:88:8d:cc:32:f9:6f:25:
66:be:8d:88:eb:53:98:e8:71:1c:64:90:32:09:86:37:ea:c1:
25:18:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:32 2023 by rpki-client on console-ams.rpki-client.org