Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/pWlfFvzkrQI3RkjUzw-ttr312_0.roa
File: pWlfFvzkrQI3RkjUzw-ttr312_0.roa (raw, json)
Hash identifier: vxPO61/wDWwix1rnAk5jQllegObcQkiSSqITpqSMquA=
Subject key identifier: A5:69:5F:16:FC:E4:AD:02:37:46:48:D4:CF:0F:AD:B6:BD:F5:DB:FD
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 1A7B05E1
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/pWlfFvzkrQI3RkjUzw-ttr312_0.roa
Signing time: Wed 27 Apr 2022 08:17:45 +0000
ROA not before: Wed 27 Apr 2022 08:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8339
IP address blocks: 185.100.96.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444270049 (0x1a7b05e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Apr 27 08:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5695f16fce4ad02374648d4cf0fadb6bdf5dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:b5:e6:30:00:31:a8:9c:5c:65:b8:56:77:
b3:10:ba:0c:70:53:bd:ea:ee:91:6f:eb:a2:15:57:
9c:1a:ba:a9:a2:43:79:76:36:f1:0e:a7:90:0c:77:
e9:d0:3f:85:4f:7a:33:59:8b:11:12:22:be:32:bd:
b8:d4:4c:cd:45:27:d9:bb:37:e0:8a:c9:e4:56:fa:
aa:4d:24:cf:11:5d:e1:24:8c:ec:6a:81:f8:fe:23:
2b:ca:41:6e:76:5e:49:be:31:f6:c7:98:81:06:50:
92:ea:3f:65:32:c2:36:d5:3b:e5:ac:2e:24:cc:fd:
82:0a:07:ac:07:d5:72:eb:01:0e:e2:37:f3:37:9a:
4a:d0:d1:0f:50:dc:7b:4f:f8:9c:84:dd:7c:3b:04:
49:25:c4:12:f0:99:ec:3c:b6:a9:c4:87:b9:db:58:
6b:18:94:30:34:b0:79:ab:ce:79:45:73:99:4e:2f:
77:58:09:5a:23:a7:45:68:64:45:5e:dc:fe:91:34:
44:3c:65:8a:18:bf:66:41:da:22:62:3c:47:30:f6:
c5:62:b9:0d:35:0e:bc:66:87:45:df:bb:7f:3c:ce:
71:53:45:db:35:48:42:af:f6:ef:4d:5d:73:ab:cc:
a2:16:49:3e:f1:04:82:c5:85:f7:5c:3f:57:a2:24:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:5F:16:FC:E4:AD:02:37:46:48:D4:CF:0F:AD:B6:BD:F5:DB:FD
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/pWlfFvzkrQI3RkjUzw-ttr312_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.96.0/22
Signature Algorithm: sha256WithRSAEncryption
72:32:21:c0:e0:06:38:d8:c0:72:7f:28:be:c6:d2:17:e7:84:
dc:dc:96:72:d3:fc:fd:bb:9d:f7:49:de:6c:47:02:c0:98:2f:
47:b5:3c:50:b4:cd:a7:e5:78:e9:47:ed:72:a3:ac:2c:68:7e:
32:21:5c:67:21:e2:2f:16:3c:82:16:1c:d1:65:49:b4:6f:4e:
cc:df:94:60:c9:9b:80:75:2c:b4:2d:f9:d1:f2:65:d3:20:7f:
20:d1:e8:ad:50:40:87:76:25:ee:42:e0:b8:0d:3e:de:a9:ac:
e6:a7:d7:b4:df:b4:a5:f9:a7:d7:c5:97:65:03:8c:f4:1b:4b:
c6:13:02:44:7a:6e:d1:3b:72:74:ec:e1:4d:19:75:76:e9:83:
4f:da:52:8f:73:e2:29:b7:7f:2b:3f:fe:fb:df:5b:28:7b:12:
0b:d7:85:89:35:3d:7f:1a:52:b3:70:3b:89:2c:b9:95:7c:75:
4a:cb:00:b5:e2:96:fb:36:19:48:e1:a0:b5:75:24:be:1b:b9:
81:91:fc:d9:67:77:e7:a0:30:09:a7:04:85:89:c1:8c:8f:90:
79:f0:1b:f5:cc:82:8a:aa:57:a3:51:ba:46:81:23:b1:46:b2:
fd:da:11:4c:c1:69:ea:7f:96:ef:b4:4a:6a:44:a5:25:60:e8:
e9:8f:11:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:19 2023 by rpki-client on console.sobornost.net