Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/9UbhcmQyoGHSEl--khqzkysYMRw.roa
File: 9UbhcmQyoGHSEl--khqzkysYMRw.roa (raw, json)
Hash identifier: Z6RJin+O1SBiMgqs4Lnn8JVRoD2srkNQ+bgoucJ1zE4=
Subject key identifier: F5:46:E1:72:64:32:A0:61:D2:12:5F:BE:92:1A:B3:93:2B:18:31:1C
Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553
Certificate serial: 13B2A3C6
Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/9UbhcmQyoGHSEl--khqzkysYMRw.roa
Signing time: Sat 01 Jan 2022 07:52:37 +0000
ROA not before: Sat 01 Jan 2022 07:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203754
IP address blocks: 185.124.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330474438 (0x13b2a3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553
Validity
Not Before: Jan 1 07:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f546e1726432a061d2125fbe921ab3932b18311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:ff:60:3a:db:e8:04:00:eb:65:5a:88:2a:
b7:56:39:b1:b3:81:ca:a5:0f:c6:14:dd:b6:95:74:
a2:5d:40:dd:9b:fa:20:3a:75:f0:d8:ca:50:00:5a:
8c:1f:ae:72:1f:4f:99:3a:2b:b9:74:f8:40:f5:f9:
30:cb:00:04:27:69:dd:a9:af:e1:a8:53:46:55:a7:
fc:ad:aa:20:5e:4a:3d:d7:50:51:24:7a:d8:1c:40:
e0:d8:54:8a:5a:ab:b9:7d:1d:fe:9a:bf:f7:5d:57:
91:c3:9f:3c:fd:a7:ae:57:7f:2a:f1:3a:a3:ec:f1:
70:b2:95:f1:60:a6:9a:c5:c1:c4:4d:7a:5c:f9:c1:
ca:3c:8a:3f:b6:24:2b:d8:23:7f:d8:2d:21:8a:77:
47:53:57:c2:33:55:f2:d7:0d:d9:6b:58:c4:d5:e4:
ff:7a:0d:99:6e:55:2a:8b:fd:b4:e0:c3:85:b0:01:
28:26:b8:63:99:26:7d:ae:59:fa:2c:cf:ac:83:fa:
92:b1:02:19:4f:92:42:8f:49:19:53:82:ab:bc:42:
c1:35:54:ad:b6:b4:1c:4d:91:96:0c:74:c8:20:06:
3f:2b:62:26:03:48:9e:1c:50:6b:ec:07:e7:ae:db:
22:71:10:19:93:dd:cb:22:ed:8f:72:9d:84:96:9f:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:E1:72:64:32:A0:61:D2:12:5F:BE:92:1A:B3:93:2B:18:31:1C
X509v3 Authority Key Identifier:
keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/9UbhcmQyoGHSEl--khqzkysYMRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.204.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ea:35:27:e9:3a:9b:ed:a1:3e:10:7d:62:3a:1f:ac:87:7b:
1f:b4:c4:6d:12:17:aa:cb:ac:ed:88:d3:48:3b:b0:0d:a5:23:
65:f1:7f:bb:39:b2:6b:15:1d:58:92:84:bd:54:9d:3a:1d:0a:
04:e2:4e:41:e8:f3:4e:3e:a3:98:91:44:de:92:87:bf:a6:d9:
11:ff:c5:54:47:ba:9f:ba:bb:7b:fa:fd:4e:75:59:c2:dd:a0:
8a:44:cd:fe:30:89:0a:e1:a3:f3:61:22:cf:fa:b9:db:17:29:
85:41:d4:3b:98:b7:41:3a:53:9c:cf:8a:ae:e7:d4:14:52:7f:
1e:e4:42:0e:1a:2d:47:67:c2:02:4e:aa:b4:03:6c:82:b0:4e:
d2:12:40:e9:4f:97:5e:0d:cc:e4:ef:4c:7c:14:ef:39:ee:80:
d7:9c:dd:67:2a:27:8d:5c:8d:69:e4:86:1c:a2:69:a3:30:20:
36:e7:8a:a0:37:71:d0:89:dd:04:46:a2:ab:1d:3f:17:96:ce:
9c:24:a5:30:fb:ce:39:32:a0:c6:bc:fa:0d:c1:7e:d4:a0:8f:
53:32:ab:07:94:fe:af:86:c4:07:c8:86:75:38:ef:74:9a:5a:
68:00:3c:11:ab:f4:ab:bf:21:11:e9:be:1b:58:16:ad:40:e6:
de:9f:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:58 2024 by rpki-client on console-ams.rpki-client.org