Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/1yXP-VBqFQReJmh2D6sbaCzNAeQ.roa
File: 1yXP-VBqFQReJmh2D6sbaCzNAeQ.roa (raw, json)
Hash identifier: 5rsAq0Q5rsDjy2zWbclBeLKC3Mitqe2cFv/IWM6VrZw=
Subject key identifier: D7:25:CF:F9:50:6A:15:04:5E:26:68:76:0F:AB:1B:68:2C:CD:01:E4
Certificate issuer: /CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Certificate serial: 153E72
Authority key identifier: 8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/1yXP-VBqFQReJmh2D6sbaCzNAeQ.roa
Signing time: Sat 01 Jan 2022 00:58:43 +0000
ROA not before: Sat 01 Jan 2022 00:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 185.237.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392242 (0x153e72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9b0163eee9e792aaa16b7d5105d347211f3123
Validity
Not Before: Jan 1 00:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d725cff9506a15045e2668760fab1b682ccd01e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:5b:1e:4c:9c:fa:53:98:31:8b:1d:2c:41:
03:75:aa:f4:c6:c3:50:4c:4a:0e:a4:c3:17:1a:d9:
41:5f:bd:47:89:9e:2b:67:f7:9f:d4:37:25:f0:0c:
10:b2:4f:9b:4a:aa:47:dd:78:42:06:4f:0e:e2:c0:
5c:bf:e9:74:b8:9f:15:2a:ec:a8:f3:e8:35:7c:17:
8b:82:d0:56:8c:ae:71:0e:66:b2:c9:31:00:54:8f:
38:9d:8e:a8:b4:bd:d6:29:b7:f4:6a:bf:fd:93:33:
d0:39:65:8a:6c:5e:58:28:a8:8f:f2:42:4e:71:78:
60:8a:d3:6b:38:61:9d:14:79:80:eb:38:74:3d:4c:
b3:72:da:e5:26:ff:bf:27:10:3b:a9:4d:9a:3a:ab:
75:08:ab:ba:8c:e5:9b:39:9a:9d:09:0e:da:a3:eb:
a5:71:d5:31:f7:ab:bd:ec:0e:9b:33:f0:ef:b1:48:
51:62:c0:26:e2:5b:b4:8f:f3:7c:f8:a1:85:99:16:
51:37:9a:f2:9b:f3:a9:8f:0a:05:8c:b1:a3:99:ef:
82:1d:47:18:15:a6:d4:3d:32:51:d8:85:96:db:cc:
46:7d:59:0e:aa:05:51:c6:07:55:02:81:67:8c:8f:
2b:59:c4:e3:96:2a:63:95:ff:42:00:05:6a:0c:d6:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:CF:F9:50:6A:15:04:5E:26:68:76:0F:AB:1B:68:2C:CD:01:E4
X509v3 Authority Key Identifier:
keyid:8B:9B:01:63:EE:E9:E7:92:AA:A1:6B:7D:51:05:D3:47:21:1F:31:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5sBY-7p55KqoWt9UQXTRyEfMSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/1yXP-VBqFQReJmh2D6sbaCzNAeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2b800e-6953-4009-b195-41b26607bf36/1/i5sBY-7p55KqoWt9UQXTRyEfMSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:5c:fa:77:73:e7:3d:26:c7:ba:12:3a:79:ac:c4:f8:a9:a0:
6c:87:bf:7e:47:9b:11:d5:0e:63:40:36:9d:e5:7c:20:07:17:
33:bb:a5:ea:67:25:01:ee:f4:0c:1d:4e:ce:43:d2:4d:f7:1f:
34:48:c8:e0:ef:45:39:db:0b:77:c2:18:b1:ab:b5:2e:d4:60:
91:06:ec:c6:e6:a0:80:75:28:24:98:10:3d:db:de:44:a8:ab:
8c:03:b7:d6:ac:bf:ba:9b:80:c8:1b:81:af:92:71:d7:d7:8a:
7a:76:54:3c:f4:a9:29:af:b3:58:e3:1d:bb:13:79:c5:41:96:
b8:7e:48:5d:68:30:fa:61:e5:6f:ef:7a:45:0e:f2:66:70:00:
af:5c:97:f0:79:62:50:d0:9f:36:2e:c0:d4:00:57:e7:ea:d2:
79:c9:6b:22:06:a8:ca:02:a5:42:ba:42:8a:f0:47:b8:d7:b4:
d5:58:df:d5:82:6a:0b:22:6e:8a:73:3d:1a:ab:c4:6f:d4:cf:
d3:e6:58:45:4d:4c:c7:8c:f9:a3:7a:64:57:bb:3d:95:66:91:
d8:8e:73:2f:3d:2d:db:ed:bb:0a:7c:9a:94:47:10:80:db:63:
e2:f6:0b:b0:67:e2:78:55:b2:db:bd:1f:d4:49:11:1f:07:a3:
9f:97:b7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:16 2024 by rpki-client on console-fra.rpki-client.org