Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tCZ8rZFqZarGG7rgd7XDuguRkTE.roa
File: tCZ8rZFqZarGG7rgd7XDuguRkTE.roa (raw, json)
Hash identifier: f+vycGUw2f+c8GqR5con8xUK89qekP+euJ/kZN8cEOQ=
Subject key identifier: B4:26:7C:AD:91:6A:65:AA:C6:1B:BA:E0:77:B5:C3:BA:0B:91:91:31
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 02E2A799
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tCZ8rZFqZarGG7rgd7XDuguRkTE.roa
Signing time: Sat 01 Jan 2022 10:04:31 +0000
ROA not before: Sat 01 Jan 2022 10:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 185.236.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48408473 (0x2e2a799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 1 10:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4267cad916a65aac61bbae077b5c3ba0b919131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:8e:e3:83:1d:d7:59:97:24:8b:a7:d5:46:
f0:ef:2b:90:6e:f8:96:2d:c9:8b:bc:dc:3d:f3:ee:
61:cb:29:d3:8c:d4:59:27:b5:4c:4a:e6:47:20:59:
8a:e5:6d:74:a4:58:75:74:2d:90:6c:67:3d:77:71:
a1:8a:4d:f0:d9:6f:15:75:21:87:48:0d:7c:3f:bc:
ea:10:7a:cf:de:12:0a:40:61:84:41:36:16:f2:01:
6f:cb:5a:83:ee:96:03:da:fb:6a:72:54:dd:7a:f6:
83:13:df:71:85:1f:57:c0:78:07:2f:d3:0f:cd:05:
f8:36:89:8e:9c:6c:22:26:cb:88:1c:09:76:4a:13:
d3:2e:1c:5a:c8:90:8a:03:30:cd:bd:84:cf:b9:50:
6e:b0:fb:e0:36:8d:45:2d:56:43:01:5b:22:c2:0e:
0a:3b:20:78:57:a0:6d:2d:be:a0:93:87:ba:32:9a:
34:a8:0e:7e:1a:4c:f3:8b:39:b4:bf:20:5a:fe:5d:
fa:13:80:e8:1c:68:d0:be:79:c3:37:5d:58:57:81:
6b:3a:b4:da:e6:e3:82:46:bf:ee:b4:5b:dc:3b:ce:
7f:59:c9:b7:e5:c3:3c:42:16:61:e8:66:73:51:fd:
93:c2:22:47:07:3b:b5:e9:ee:5b:0a:7d:72:cf:e3:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:7C:AD:91:6A:65:AA:C6:1B:BA:E0:77:B5:C3:BA:0B:91:91:31
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tCZ8rZFqZarGG7rgd7XDuguRkTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.24.0/22
Signature Algorithm: sha256WithRSAEncryption
76:41:66:76:18:1f:2b:21:62:2b:75:ec:19:34:e6:c4:57:11:
49:56:66:e2:7b:b9:3d:ea:2e:4e:83:bf:42:16:86:c5:8a:dc:
4d:4c:3a:9b:58:b2:f2:b6:5a:3b:74:f5:c5:c2:c9:d6:99:30:
63:a4:30:19:60:ff:fe:f8:91:6b:46:db:56:2e:01:4f:99:cf:
e9:a9:50:f9:ef:51:99:d0:f7:4c:f6:6f:c8:01:b6:12:33:00:
9b:58:9c:e3:71:aa:45:13:f9:e1:54:cc:1d:c7:0c:ec:88:a2:
db:f3:ca:2b:3b:3e:84:b3:92:3d:9b:9c:7c:fb:cc:98:9c:5a:
99:b3:39:83:4b:58:82:82:05:c7:42:9b:80:64:27:1c:d6:4d:
41:2b:bc:79:52:a8:35:66:42:be:48:d0:ab:27:a7:6e:2a:13:
f3:df:d6:05:73:83:c5:73:5b:17:5b:0f:6a:4d:b8:5c:3d:d3:
f7:07:9a:68:eb:cc:07:53:42:83:45:ba:ac:67:0a:17:1e:d3:
c6:8e:2c:a1:4e:a3:05:59:6e:29:a5:89:2f:e2:e2:2e:68:13:
bc:3d:40:bc:8e:fa:e2:0e:33:38:1d:1c:13:26:dc:5e:4f:86:
02:c1:9b:65:ef:2a:60:1d:01:33:d2:68:5b:52:a6:16:78:9b:
ad:25:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org