Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/Cksu_JvpHWc5Tdl6nMdvTRBLiXI.roa
File: Cksu_JvpHWc5Tdl6nMdvTRBLiXI.roa (raw, json)
Hash identifier: tbS8mPQkCLYSVsWlvj11RC81DLAVc9Uef3u7TPdfobM=
Subject key identifier: 0A:4B:2E:FC:9B:E9:1D:67:39:4D:D9:7A:9C:C7:6F:4D:10:4B:89:72
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 0368B0B8
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/Cksu_JvpHWc5Tdl6nMdvTRBLiXI.roa
Signing time: Sat 01 Jan 2022 08:53:48 +0000
ROA not before: Sat 01 Jan 2022 08:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202675
IP address blocks: 185.221.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57192632 (0x368b0b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Jan 1 08:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a4b2efc9be91d67394dd97a9cc76f4d104b8972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:b2:03:55:1a:f9:ab:48:06:87:c4:13:a4:
85:0c:3a:4b:3d:3b:50:38:06:7d:cd:18:6d:03:2e:
b8:7a:a9:94:b4:14:9c:f3:e0:82:65:e8:dd:83:c4:
43:a9:9d:56:7a:9d:cd:5e:0b:79:db:24:15:a0:20:
5d:f9:bf:89:0a:10:42:6c:76:34:01:43:39:e0:16:
34:f5:8e:b3:02:0d:09:68:b5:f1:a0:bc:15:4e:62:
3d:6e:7f:4b:6c:75:74:eb:4f:0f:85:44:25:2f:a2:
6b:e2:06:cd:da:4f:5d:81:15:8d:5e:65:a7:0f:f9:
83:93:51:cb:e8:0a:06:ae:ff:5f:b5:33:9a:ab:5a:
d5:4b:90:df:92:4e:7a:77:38:ee:96:4e:c1:60:25:
fa:08:a7:ca:8b:eb:0f:1e:24:71:7b:48:7f:8d:f8:
d0:24:fb:69:22:5a:a6:77:08:be:f4:1a:72:69:7f:
89:2f:b1:37:7f:2f:df:0d:7d:d4:3f:7e:72:7f:c9:
cd:c1:fb:94:fc:d3:6b:ad:cd:3d:16:27:ec:e0:05:
36:95:34:54:bf:23:72:19:88:11:d7:c7:a5:21:11:
13:aa:0f:55:5f:09:ec:94:e7:4b:5d:30:12:5a:0c:
95:3e:a3:75:ca:14:00:5a:d0:05:0a:2d:25:d5:02:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:2E:FC:9B:E9:1D:67:39:4D:D9:7A:9C:C7:6F:4D:10:4B:89:72
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/Cksu_JvpHWc5Tdl6nMdvTRBLiXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:de:cd:16:b2:51:01:50:30:dc:f3:09:81:1a:7d:3c:48:94:
92:d9:89:2f:4b:a4:3d:fb:13:6e:22:e5:69:cd:4b:d6:e0:f9:
64:29:9d:88:a8:af:19:e3:9b:39:33:97:f5:84:e8:f0:71:a4:
ee:f3:1a:8c:b8:06:45:b2:27:b4:16:ce:70:da:ff:0b:43:c5:
78:b7:ab:10:0c:ec:03:65:2e:83:38:c2:6f:8d:eb:f5:ce:59:
f0:1f:22:5a:4b:09:44:bd:f5:17:af:39:c1:54:b3:d4:e6:22:
92:b5:62:89:4f:f4:03:9e:3f:e0:51:6f:6f:ef:cd:ab:7d:3e:
04:8d:24:20:dc:ae:8f:6b:80:52:fc:13:0e:07:c8:f8:18:cc:
45:cb:c5:56:2f:dc:87:0f:0d:9b:e5:7f:5b:f1:a6:ce:f4:47:
81:af:8b:de:4e:14:38:8d:3c:ad:ed:aa:00:0e:0f:aa:bf:19:
e2:45:f7:b2:5f:28:2a:c2:f4:52:6f:43:8f:28:73:84:b1:61:
e4:ba:c1:00:a3:3d:a9:d2:a3:6b:de:43:ba:25:90:70:45:2a:
4e:79:2e:2f:93:9d:dc:74:91:d0:1f:31:d1:47:61:fa:cc:bb:
67:aa:6a:cc:28:1f:53:19:cd:59:67:f0:ca:bc:00:cb:1c:ac:
8a:c7:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:08 2024 by rpki-client on console-fra.rpki-client.org