Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/cjmXz2isB23ngOc14fSXyIT8QwA.roa
File: cjmXz2isB23ngOc14fSXyIT8QwA.roa (raw, json)
Hash identifier: vXAhlqi6quyMGXcTM3zMaVsWe1GUCGSwxcjr+kjJDNk=
Subject key identifier: 72:39:97:CF:68:AC:07:6D:E7:80:E7:35:E1:F4:97:C8:84:FC:43:00
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 03C7300F
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/cjmXz2isB23ngOc14fSXyIT8QwA.roa
Signing time: Fri 08 Apr 2022 08:41:20 +0000
ROA not before: Fri 08 Apr 2022 08:41:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44636
IP address blocks: 185.176.24.0/24 maxlen: 24
185.148.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63385615 (0x3c7300f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Apr 8 08:41:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=723997cf68ac076de780e735e1f497c884fc4300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:a4:de:73:e5:f6:c6:bf:d1:a3:cd:63:06:
60:1a:54:27:7c:2c:f9:88:33:a3:52:ca:eb:0f:63:
0f:6a:bf:fa:48:28:02:15:69:10:d1:03:50:7f:2e:
2d:cf:8c:97:bf:88:42:67:ab:55:75:3d:ce:14:9e:
ed:03:ed:82:74:c0:85:21:d6:30:85:ee:80:aa:38:
8b:00:58:ce:9b:70:4c:e0:84:51:06:93:16:9a:32:
9d:87:50:a5:94:4e:66:9e:7a:49:e1:e1:bc:eb:fa:
7e:03:a0:5c:d9:0c:f1:33:23:e3:5f:80:93:c5:22:
54:96:b9:ad:b5:c7:3e:2e:de:e4:7b:76:4e:6f:20:
30:e8:e8:07:1b:56:b1:d2:30:0b:23:17:fb:3a:ad:
54:a9:4a:8b:7f:20:f0:d0:73:d5:8a:d7:14:b3:16:
80:a2:97:50:c7:f3:50:d5:88:1b:8a:8e:17:c9:88:
e9:2d:09:1f:09:f1:c0:d5:3c:e4:d4:7a:8c:31:b1:
5a:3b:e8:3a:f5:e6:0f:5b:7d:78:fb:61:4b:26:14:
a3:30:7a:87:c6:d0:c6:c9:0c:42:d5:63:80:8e:3b:
b7:47:10:06:ca:08:e0:d8:94:59:1f:7c:92:1d:39:
bd:8c:d1:2a:35:22:53:e7:da:f4:f3:e6:39:79:b8:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:39:97:CF:68:AC:07:6D:E7:80:E7:35:E1:F4:97:C8:84:FC:43:00
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/cjmXz2isB23ngOc14fSXyIT8QwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.24.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:49:94:a4:4d:c3:d7:a9:55:f7:75:0b:6d:a5:a3:31:0d:
8b:50:64:8a:ca:87:29:57:0f:83:c9:26:26:24:90:be:ae:ac:
c9:11:b9:f4:90:8e:c4:d3:20:14:4d:c4:05:65:9b:8e:86:d9:
3d:f7:5f:59:92:e8:c5:75:a0:fb:15:6c:7b:49:93:37:b1:26:
75:78:6e:1c:95:f1:ce:d4:0a:bb:22:d4:ae:72:ae:72:88:07:
e5:4e:ef:cc:76:0e:f8:25:7e:a4:f4:3e:1c:16:cb:d0:78:bf:
e4:d1:4a:fa:36:78:80:5b:48:3f:a2:0e:30:0a:fd:4f:80:28:
a5:ad:f8:c3:d5:ae:c3:5f:ec:8b:52:8d:c5:b7:16:7b:9c:54:
9a:34:82:83:f6:9d:ff:c6:8e:0f:f4:a9:25:d3:88:21:ec:86:
86:75:d4:40:8f:81:9f:85:04:ff:c3:be:39:17:b9:47:1a:b5:
15:67:45:40:06:bd:d3:eb:4c:45:38:7a:a4:2a:ad:26:db:c0:
95:c4:90:50:b8:64:a8:0c:7f:01:86:1e:27:65:1e:e0:89:b0:
06:53:06:97:d8:5a:a6:84:db:a2:88:d5:19:4f:2e:e0:a4:0a:
83:4b:f1:2d:d1:ee:98:0c:99:d5:62:3b:f4:9c:15:97:3f:0e:
7d:c7:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org