Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_DgpIzR5BpSscFF3TYV5OIWvd-Q.roa
File: _DgpIzR5BpSscFF3TYV5OIWvd-Q.roa (raw, json)
Hash identifier: RpqONbfmTXLuINh3CuRj4ITfMbguoIFRaDK9jz9lDh4=
Subject key identifier: FC:38:29:23:34:79:06:94:AC:70:51:77:4D:85:79:38:85:AF:77:E4
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 037CF4EB
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_DgpIzR5BpSscFF3TYV5OIWvd-Q.roa
Signing time: Wed 16 Mar 2022 21:30:10 +0000
ROA not before: Wed 16 Mar 2022 21:30:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.255.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58520811 (0x37cf4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Mar 16 21:30:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc38292334790694ac7051774d85793885af77e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:5c:7d:9f:44:e1:b4:87:4c:96:ac:3b:54:
f6:20:3f:09:b3:7b:86:fc:1e:0c:44:7f:d0:5c:2b:
12:89:a6:73:07:fa:29:fb:a7:f2:83:a5:b8:9b:5d:
08:a6:99:4d:7c:1c:91:ce:26:53:a1:d4:fb:3a:09:
c5:b8:82:10:41:3d:01:b9:f5:ae:db:3a:d3:66:df:
29:41:b3:ee:3c:f9:a8:ee:fd:40:95:4d:2e:ae:74:
b0:a4:87:21:70:37:80:76:b3:3c:6b:4f:66:75:23:
25:78:9f:d6:b6:96:8a:a2:27:23:f0:96:48:b6:d2:
ea:0c:0e:45:af:9a:d2:b6:e5:22:96:a2:f9:ec:f3:
dd:0d:56:fb:35:68:da:27:c4:68:75:db:06:07:52:
7e:b4:38:ab:52:9c:5e:14:c5:f4:c4:46:65:0c:cc:
33:7e:6c:f5:43:c2:a0:97:04:ad:26:ab:6e:bd:5c:
69:3e:97:92:54:0d:59:bf:bf:5e:e0:bd:99:12:97:
ea:cc:26:22:c5:3c:61:1e:a4:e5:66:fa:0e:e6:22:
dc:34:32:93:6f:94:af:b4:c7:a0:35:5e:07:0c:7a:
03:65:1b:0a:63:9c:bf:ef:8c:6f:df:23:2d:f0:3c:
15:1a:a4:b0:d8:2a:8f:98:0e:ae:47:6a:da:92:a1:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:38:29:23:34:79:06:94:AC:70:51:77:4D:85:79:38:85:AF:77:E4
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_DgpIzR5BpSscFF3TYV5OIWvd-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:86:35:2e:fd:fb:ae:29:29:4b:3e:e9:b5:43:78:66:0a:3f:
fd:79:cc:f9:0a:15:51:ed:d9:dc:6e:f6:a3:99:6c:d1:76:75:
5e:4b:6b:e8:4e:4a:e6:3e:7f:87:94:bd:5c:d7:1d:aa:7f:ef:
c3:2e:6c:1d:27:8b:55:ab:1e:8d:ac:ac:82:37:a1:a2:d4:4d:
80:3f:fe:cd:0b:41:4d:86:42:11:a5:3d:01:a7:b0:60:a0:34:
08:d3:b2:86:20:62:02:34:df:56:82:c0:84:4b:c5:ef:29:6b:
0b:24:4d:a0:36:fd:e8:24:e4:1c:e2:7c:9d:bd:e9:8c:66:a7:
61:ee:7e:fa:2f:ee:37:52:0e:9b:52:9f:d7:89:98:56:62:8d:
78:10:5d:df:ab:6c:c1:98:e9:33:fd:be:e8:61:dc:4f:0d:d0:
f7:a8:18:a9:cf:1d:e3:a0:e0:4f:a7:3a:b5:39:07:d2:6f:8f:
75:fb:6c:60:fe:28:cb:a3:da:e8:e6:0b:df:72:77:ca:6a:bf:
4d:e7:4d:aa:a8:46:83:37:f2:03:46:7c:38:84:f0:9b:62:97:
84:55:43:48:6f:18:c9:d3:fb:fd:33:20:44:34:4d:b9:6e:c0:
67:fa:d9:f5:23:32:9e:c7:5e:a1:52:84:88:0a:e6:49:2e:03:
8d:52:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org