Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/trdzF-TBk2pvKJvycqBcGhzvbWk.roa
File: trdzF-TBk2pvKJvycqBcGhzvbWk.roa (raw, json)
Hash identifier: G3OXP1k1IlDfPXAOaNLY3cXBjx72m8d2fJZB0SSkx+4=
Subject key identifier: B6:B7:73:17:E4:C1:93:6A:6F:28:9B:F2:72:A0:5C:1A:1C:EF:6D:69
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 706E
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/trdzF-TBk2pvKJvycqBcGhzvbWk.roa
Signing time: Tue 21 Jun 2022 13:18:02 +0000
ROA not before: Tue 21 Jun 2022 13:18:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12941
IP address blocks: 185.104.204.0/22 maxlen: 22
2a06:3380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28782 (0x706e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jun 21 13:18:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6b77317e4c1936a6f289bf272a05c1a1cef6d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:03:a4:19:16:86:b0:85:1c:bf:68:98:99:
fd:aa:7f:df:83:62:1f:c4:30:0c:47:2a:97:ee:0d:
23:7b:3c:73:ea:a2:a9:ef:b3:22:99:de:35:c4:15:
7c:0c:4d:39:0e:45:96:16:36:5e:3a:cd:d3:08:e2:
e2:21:00:48:a1:0b:6b:9d:ae:bc:51:29:36:05:01:
ac:9a:98:2f:5e:59:e0:c9:28:f9:84:3c:01:32:7c:
be:de:ee:3d:73:45:e3:a9:3c:d0:df:0b:d7:76:14:
29:31:d2:64:2b:06:91:3c:77:20:7a:51:0f:ab:a4:
3f:46:5d:ce:0f:71:43:9a:21:51:9b:f6:98:c1:85:
50:7f:1b:d7:b0:28:f8:e4:4d:b2:6a:45:ec:43:d7:
8e:1b:bc:55:c3:8b:2b:41:3c:fb:c4:94:f5:a4:25:
75:fa:65:d6:ae:e4:d4:18:5f:22:a0:94:d1:9a:87:
7a:4b:93:ef:5c:4e:64:e1:04:89:dd:c3:08:c4:3b:
27:5d:7f:74:e5:a0:df:d0:4e:42:f5:73:96:0f:62:
82:9b:ad:90:09:bf:e9:10:e4:d6:27:c9:a3:d0:c2:
ef:ca:f0:1e:fe:2b:28:67:4b:b1:f6:ca:45:cc:a6:
b8:d5:60:13:d6:3e:10:e1:82:01:0a:73:6f:8e:f0:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B7:73:17:E4:C1:93:6A:6F:28:9B:F2:72:A0:5C:1A:1C:EF:6D:69
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/trdzF-TBk2pvKJvycqBcGhzvbWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.204.0/22
IPv6:
2a06:3380::/29
Signature Algorithm: sha256WithRSAEncryption
43:65:2e:69:3c:34:2b:c3:25:13:c3:c5:8c:63:10:88:43:a4:
14:83:b9:e3:cf:42:d9:b7:25:d7:39:2e:5a:e5:3e:a0:30:a2:
85:d9:dc:ec:82:2b:81:0d:5e:c7:a9:45:b7:d1:ed:48:90:25:
ef:19:71:de:08:20:c7:ec:e4:a5:0c:51:b6:30:8d:ef:fc:e3:
54:c3:9e:d4:1a:d0:9d:91:4d:9d:72:ef:03:8f:ed:66:f5:5e:
35:fc:bb:d3:d4:13:38:f9:3e:42:bb:11:47:d8:46:1b:83:ef:
50:01:fa:b8:ed:0c:3b:6a:fc:1e:ba:72:5b:85:85:be:be:c8:
7f:5b:0c:eb:e8:f1:22:a5:df:c2:4a:1e:b7:6a:36:2a:34:23:
f6:82:ba:e5:9e:fb:b2:ca:79:b2:e8:eb:71:68:d9:65:ff:65:
7e:27:24:e7:3d:63:92:db:2f:b7:53:b1:82:ea:46:26:13:5a:
76:a0:cd:33:99:53:65:cc:04:39:a3:21:a9:f1:fb:77:bc:c5:
63:ba:83:71:51:18:26:28:56:c0:8b:58:ea:05:49:52:ca:fe:
61:bf:98:b4:f3:de:d8:a2:d5:72:d8:05:ec:17:ab:7d:36:98:
fd:37:0e:81:78:56:68:8c:8b:e0:01:c1:22:7e:11:4d:d8:96:
91:85:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org