Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/fjVGjStMdeqymDL3PsCH-sKn69A.roa
File: fjVGjStMdeqymDL3PsCH-sKn69A.roa (raw, json)
Hash identifier: FHXumgrki/vZRS3F0cFrSXjz0Ldug5pX3U08++kiZsU=
Subject key identifier: 7E:35:46:8D:2B:4C:75:EA:B2:98:32:F7:3E:C0:87:FA:C2:A7:EB:D0
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 0A441C24
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/fjVGjStMdeqymDL3PsCH-sKn69A.roa
Signing time: Sat 01 Jan 2022 15:03:26 +0000
ROA not before: Sat 01 Jan 2022 15:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62081
IP address blocks: 185.165.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172235812 (0xa441c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 15:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e35468d2b4c75eab29832f73ec087fac2a7ebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:d4:98:fa:d0:98:52:4f:c9:2c:77:95:92:
3a:00:54:ad:0f:62:02:f9:3d:a4:b6:fc:3a:4b:02:
b3:c9:6c:c5:d6:c2:78:66:0c:f4:ef:04:4d:f2:80:
55:93:3a:76:10:40:d3:18:3e:58:70:81:52:03:71:
b5:6a:b1:9b:c7:37:df:ae:5f:4f:ea:bd:8e:f2:9f:
0c:a5:c2:d3:62:0f:11:23:d7:a7:c0:7b:95:e6:39:
a6:66:d1:de:e9:fc:2a:40:fc:7a:2e:6c:6e:d0:71:
7d:00:d9:08:b9:44:11:f1:30:63:b5:40:c8:0f:a4:
00:e1:d7:f9:9a:50:a0:a1:62:af:d4:3b:b8:35:8f:
ae:06:95:95:c4:be:46:2c:12:f8:72:76:f8:50:75:
65:3b:5d:c7:18:89:e4:4c:7f:8a:fa:aa:c2:7a:be:
29:7c:64:90:21:62:6a:87:c9:c6:03:3a:f6:5c:7c:
f0:46:dc:81:4b:c3:33:28:a9:7e:73:b7:e1:b1:fe:
e2:af:b8:90:b8:72:4f:83:9d:6e:ef:26:b2:78:ee:
be:87:25:4a:36:c9:8a:d0:cf:1e:4f:9c:29:a9:33:
e1:01:c9:b3:9a:5d:4d:ad:7e:d6:2b:d1:c5:eb:44:
48:5a:96:76:e4:e9:d8:c4:1b:4b:56:6c:f4:a4:21:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:46:8D:2B:4C:75:EA:B2:98:32:F7:3E:C0:87:FA:C2:A7:EB:D0
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/fjVGjStMdeqymDL3PsCH-sKn69A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:98:8d:02:c1:35:3d:83:0f:7a:1c:0d:1c:00:0a:37:de:1f:
41:d0:17:ae:31:72:7d:54:cb:51:81:df:c1:3c:ea:61:7f:4f:
42:90:3e:01:a8:7c:bf:8a:68:cc:f8:51:dd:b9:ec:e3:1a:1f:
25:ed:af:92:00:ea:fd:6e:5a:68:39:94:12:a6:6f:1e:bb:a6:
79:46:a6:de:9d:19:ce:da:46:8d:04:e5:21:29:60:45:cb:6a:
c6:76:d4:a5:7f:83:8e:9e:3b:01:2a:c2:76:72:c6:f2:24:07:
0b:be:ab:47:8e:72:cf:b8:1b:b2:8d:f3:54:6a:4a:38:cd:72:
e7:5f:9c:6d:89:8a:16:fc:aa:22:59:c8:6a:a8:67:84:bb:0b:
d4:03:00:03:2f:05:f5:b0:db:0d:10:90:18:fc:29:0e:38:a9:
b4:72:a3:e2:af:27:a4:25:f5:49:07:4a:2e:49:8e:4e:fe:3a:
11:97:48:14:3b:cb:bc:5b:ce:01:02:07:ff:fb:ab:b5:f1:fd:
1d:b5:8e:69:18:c4:73:22:4c:5f:ff:9b:41:d9:51:06:e8:31:
de:1a:0b:b7:d1:7d:05:90:da:13:59:99:db:51:1c:46:de:ab:
73:5b:4c:f0:65:bf:97:87:c8:c4:6f:86:13:9f:b9:f3:6f:a6:
97:a4:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org