Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/dagAjR9opnw4ghkbyAyZ-_7aTkU.roa
File: dagAjR9opnw4ghkbyAyZ-_7aTkU.roa (raw, json)
Hash identifier: jzRS7OnL6FwRr1eeDdR2vPWE2mTbjEj1tgXc9qQNSus=
Subject key identifier: 75:A8:00:8D:1F:68:A6:7C:38:82:19:1B:C8:0C:99:FB:FE:DA:4E:45
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 7C142E
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/dagAjR9opnw4ghkbyAyZ-_7aTkU.roa
Signing time: Sat 01 Jan 2022 02:53:57 +0000
ROA not before: Sat 01 Jan 2022 02:53:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 185.255.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8131630 (0x7c142e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Jan 1 02:53:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75a8008d1f68a67c3882191bc80c99fbfeda4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:34:c8:f1:ba:c4:13:73:29:29:8c:b8:91:
9f:75:a4:02:ce:55:d2:1f:1a:a0:43:fb:49:b5:ff:
ee:2e:6a:ca:e2:a7:97:00:60:fa:9d:27:b0:42:f7:
22:a7:9a:ab:63:5e:b6:0a:b1:7d:31:7d:61:9a:d3:
1a:18:18:b3:f5:e7:63:04:d7:ed:0e:cd:33:34:d0:
5a:c1:a1:91:5d:8d:2a:d9:f7:8b:d3:d8:65:c3:ce:
c9:95:41:81:ca:69:98:ab:34:4f:98:95:23:e1:73:
1c:6a:5d:71:7b:c9:48:db:6f:7f:b8:25:f3:66:09:
32:d3:b7:f9:e6:32:93:8a:7b:e7:38:b9:d3:e9:8f:
bb:03:ad:e9:cb:10:fb:bf:b4:5e:d8:ac:8a:ec:38:
a9:a9:ed:b1:15:c1:0b:44:ce:79:49:cc:67:46:6b:
c5:97:6f:dc:4f:cd:fd:74:70:34:2f:af:d4:fa:ee:
4f:41:99:d1:61:a3:58:62:97:a6:56:78:a6:17:cb:
f8:95:27:e9:d6:d0:64:b0:98:b0:5e:60:32:11:5a:
89:b0:a8:f4:f1:cc:58:ea:e4:ff:fc:d4:36:81:58:
8f:be:5e:b1:51:db:6c:71:15:24:e2:85:bb:fb:d3:
c7:18:f6:f6:5c:5c:9d:da:3a:d2:ad:0d:d3:58:05:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:00:8D:1F:68:A6:7C:38:82:19:1B:C8:0C:99:FB:FE:DA:4E:45
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/dagAjR9opnw4ghkbyAyZ-_7aTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:de:c3:bf:f7:3d:da:63:26:cc:46:c9:af:74:d4:c7:5e:65:
78:be:34:a7:9d:c4:ba:bc:81:33:95:53:c3:92:7c:54:34:f4:
bf:5e:32:b2:15:47:17:49:b3:17:5f:95:4c:ce:d3:95:98:cd:
1d:e5:af:b3:a1:3b:49:2f:03:f4:1d:3f:ed:8c:a7:70:18:64:
97:25:55:63:67:d3:03:f5:c5:19:85:97:8a:c2:d7:94:a9:06:
a8:14:0c:04:0b:76:7d:05:d6:d5:65:bc:1b:a0:0e:96:6b:84:
09:78:11:19:ab:ad:58:c3:cd:54:f0:e5:36:85:db:bc:c1:e2:
4e:f6:aa:28:ba:61:67:01:2c:35:06:14:1c:05:9f:08:82:5b:
27:5b:c1:ca:55:82:f0:f3:53:69:38:b2:5b:51:a8:8e:c5:0d:
6b:44:1f:56:24:c3:47:26:d2:8b:ad:30:39:4e:71:a8:cb:32:
a1:c0:c1:5c:5b:b1:40:47:95:7a:24:44:f8:f3:55:95:29:4e:
1a:d3:93:73:7d:10:b7:52:45:b6:d1:33:6d:4a:eb:ef:48:d8:
5d:c0:57:de:71:d5:cd:22:c4:a2:a8:ba:36:90:0a:0f:20:ec:
52:64:57:dd:da:aa:98:61:91:a4:9d:f3:12:59:68:9b:1f:eb:
16:87:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:33 2023 by rpki-client on console.sobornost.net