Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8ml68kinpjW9hYsHjyUPVbMCln0.roa
File: 8ml68kinpjW9hYsHjyUPVbMCln0.roa (raw, json)
Hash identifier: 5hwisxDAwrGiza6F0gud4VbH6I5XcF8u5gD2zhHOuU0=
Subject key identifier: F2:69:7A:F2:48:A7:A6:35:BD:85:8B:07:8F:25:0F:55:B3:02:96:7D
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 0A401EE3
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8ml68kinpjW9hYsHjyUPVbMCln0.roa
Signing time: Sat 01 Jan 2022 15:03:24 +0000
ROA not before: Sat 01 Jan 2022 15:03:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20940
IP address blocks: 185.225.251.0/24 maxlen: 24
185.225.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171974371 (0xa401ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 15:03:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2697af248a7a635bd858b078f250f55b302967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:2c:67:16:c3:7a:18:5d:73:12:54:51:73:
8d:da:0f:f5:ae:1f:35:b8:45:a4:e7:62:66:0f:33:
ef:d3:93:13:1b:75:03:5a:51:ea:d7:6d:69:be:9b:
02:4c:17:56:3d:90:58:94:84:34:14:ae:6f:b9:c2:
ba:38:f3:8e:9d:7d:b8:88:92:05:d6:71:1f:fe:83:
a9:ad:e5:39:79:7e:7b:05:4d:30:f5:e1:a2:ff:fa:
e8:12:4a:c7:85:16:85:a2:d0:e9:10:18:6c:e7:af:
31:b5:3b:5b:a2:5d:1b:8e:55:33:e9:40:eb:24:47:
d3:57:c8:bb:8f:9e:5d:7f:48:c9:c7:73:2c:e4:5d:
08:a5:79:33:aa:a9:f9:dc:f0:2b:db:15:01:28:2c:
cd:9b:e4:71:bf:80:a2:85:8c:e7:c3:58:38:79:4b:
77:35:72:29:30:f1:0d:91:90:77:42:ba:c4:0f:f7:
ce:34:f7:6c:21:7f:88:e8:0a:2c:21:1f:32:c8:3b:
0b:cf:7e:f6:14:b5:05:c5:eb:5b:a0:ea:8f:e0:6f:
c8:ac:49:92:59:0d:06:7d:a6:58:9a:85:26:ac:96:
52:a6:ce:75:e0:a1:65:99:57:60:9c:56:1e:c9:ef:
ce:0f:63:e7:27:3e:fe:d8:fa:c8:aa:d2:89:be:17:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:7A:F2:48:A7:A6:35:BD:85:8B:07:8F:25:0F:55:B3:02:96:7D
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/8ml68kinpjW9hYsHjyUPVbMCln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:53:0d:ce:3f:3d:49:22:a0:c3:6e:65:10:8c:a1:c0:bf:7f:
6f:1f:5b:0c:3c:89:f7:20:74:7c:ef:3d:b2:13:11:71:dd:2c:
62:04:11:e0:0e:9e:2f:97:dc:ea:f6:fd:6c:9a:e1:d4:11:7f:
8e:45:38:55:6d:ac:49:f0:cd:86:a8:fd:49:44:33:e2:03:14:
b8:f4:cc:4f:26:4a:60:a4:84:df:e2:13:56:2d:fb:dd:d7:54:
65:7e:86:76:73:50:c2:75:78:c8:57:8f:34:45:87:de:1a:0f:
ba:7f:3e:7d:19:2a:f1:79:9d:45:fd:f3:fc:8b:6a:38:a2:5f:
21:9c:a6:70:b2:d9:d1:6d:2f:1f:79:9d:35:6b:7d:ac:34:c3:
c9:1d:f7:c2:91:f9:eb:a4:bf:a6:9b:4d:de:93:fb:7d:79:0d:
f8:e9:ef:46:a2:48:fc:3b:5f:4a:15:d6:18:b3:35:21:7b:ed:
93:5c:73:0b:4d:72:bb:4e:3e:58:d2:2f:31:fe:64:e2:df:eb:
d5:3b:90:51:f3:75:f8:4e:c1:53:5a:bc:94:90:9b:c2:db:0d:
44:09:ce:e1:0f:3f:c2:ae:ee:0b:80:e9:28:56:9d:9a:6c:d9:
d9:bf:c1:9d:30:b4:71:a1:c7:40:4a:da:83:f0:22:1b:ae:69:
cf:e7:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:47 2023 by rpki-client on console-ams.rpki-client.org