Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/x_t2ue3JFbie08vMFdPR3NUNQPI.roa
File: x_t2ue3JFbie08vMFdPR3NUNQPI.roa (raw, json)
Hash identifier: D4rBv3f5gCvOnWaoe2fA4fq2GBoZKo5i+jo8Qa0hIqI=
Subject key identifier: C7:FB:76:B9:ED:C9:15:B8:9E:D3:CB:CC:15:D3:D1:DC:D5:0D:40:F2
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 12C3DAEF
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/x_t2ue3JFbie08vMFdPR3NUNQPI.roa
Signing time: Sat 01 Jan 2022 08:01:13 +0000
ROA not before: Sat 01 Jan 2022 08:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203087
IP address blocks: 185.120.77.0/24 maxlen: 24
185.120.76.0/24 maxlen: 24
185.120.78.0/24 maxlen: 24
185.120.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314825455 (0x12c3daef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Jan 1 08:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7fb76b9edc915b89ed3cbcc15d3d1dcd50d40f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:9c:56:87:56:fc:39:8c:6d:cd:51:2e:0e:
32:d1:6f:26:85:56:b0:d0:24:75:20:da:fb:29:6a:
88:ed:91:7a:57:e1:55:61:1e:bb:4c:fb:15:c6:e8:
ce:e2:65:a2:4b:c1:ba:99:fd:b4:39:8e:22:5b:95:
6c:88:6d:65:be:8b:7b:c2:86:de:7e:72:21:61:1f:
2c:6e:60:96:ea:b8:20:0f:1e:5d:ee:e1:6d:71:f4:
9c:d5:ee:df:43:e7:f8:ae:4e:b3:23:52:ed:4d:5b:
00:21:bf:bb:ab:a9:06:62:df:29:d9:2e:57:2a:8b:
6b:09:93:09:12:fd:a1:06:a5:cb:37:ea:51:8d:ca:
ff:27:bd:96:f5:96:1a:6f:d6:d4:5d:68:1d:e9:cd:
61:aa:73:89:e8:24:79:58:aa:39:98:66:5b:2c:8e:
94:83:9f:20:5d:a5:ae:20:1d:f3:d4:af:08:83:ca:
05:ad:fc:73:09:6b:73:d1:b5:21:a7:fc:e4:d6:03:
04:44:ab:6f:45:9d:c6:c8:64:bc:1d:3d:db:74:bd:
d9:02:4e:8a:b1:05:53:06:c5:4e:7d:59:14:7c:da:
5f:af:a0:3a:8d:6e:93:ff:f4:f8:a0:e1:65:0b:23:
86:c8:b9:5f:c0:b2:1c:e3:a7:a6:e1:4d:95:32:bb:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:76:B9:ED:C9:15:B8:9E:D3:CB:CC:15:D3:D1:DC:D5:0D:40:F2
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/x_t2ue3JFbie08vMFdPR3NUNQPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.76.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ab:40:d6:e9:ad:5c:a5:8f:02:a4:14:9d:2f:7c:9e:39:ca:
2e:b4:3d:51:3b:52:0d:8d:ad:b9:ee:dd:13:e0:f2:52:a8:95:
ca:59:01:72:10:38:46:c2:c5:0e:9b:d0:00:b2:1c:bb:0c:4b:
e3:1c:6b:f6:ef:ff:3e:5b:82:1e:0d:e1:aa:25:2b:2e:33:8a:
cf:b9:e3:9d:bc:2e:f3:5a:a9:f3:2a:f0:c6:be:82:f2:3f:1d:
96:10:10:d6:d5:35:d0:f3:1a:3a:0f:d5:e0:f2:5c:2c:bd:52:
d2:4a:13:94:ec:cd:ba:f5:a1:2a:a6:79:50:77:98:9c:d6:07:
45:94:b0:c6:76:4f:79:eb:bc:ed:22:7e:d2:d7:6c:32:c9:15:
57:62:df:6a:b5:12:dc:60:bb:62:d6:e2:aa:09:86:e4:32:e1:
6d:3d:51:4c:21:43:74:49:5f:9d:78:f3:33:1c:f3:7b:12:03:
2e:43:10:8c:2f:62:83:ad:6c:6c:0f:0c:2a:b8:d3:03:e6:89:
54:5f:33:a9:62:e7:a6:21:04:5c:0d:43:a0:ce:c0:7a:53:6c:
a5:74:a3:ee:c9:23:a4:06:e9:f1:fc:e9:c3:98:c9:03:79:1f:
f5:bb:24:c4:80:91:f6:7b:89:be:8c:61:ac:03:53:a1:55:9c:
12:04:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org