Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2C9S_JB9nlcWJeLUXorVN5MgFI8.roa
File: 2C9S_JB9nlcWJeLUXorVN5MgFI8.roa (raw, json)
Hash identifier: ks6qiT+qzguXM5TSYZZhQD3eOa+0t+8Tn13fhP0PPcA=
Subject key identifier: D8:2F:52:FC:90:7D:9E:57:16:25:E2:D4:5E:8A:D5:37:93:20:14:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D4B9A80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2C9S_JB9nlcWJeLUXorVN5MgFI8.roa
Signing time: Tue 01 Mar 2022 08:17:00 +0000
ROA not before: Tue 01 Mar 2022 08:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196945
IP address blocks: 185.221.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491494016 (0x1d4b9a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 1 08:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d82f52fc907d9e571625e2d45e8ad5379320148f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:ff:0e:02:7f:4a:1f:91:c3:2f:7a:19:6d:
dc:f5:c0:37:72:63:eb:76:c4:24:3e:5c:aa:9b:9c:
d4:7a:ab:56:20:07:00:a2:60:1a:5a:00:f6:a8:29:
01:23:cf:15:a3:11:15:55:5a:89:e5:81:8a:9d:71:
05:ba:9d:55:fb:c2:c5:cb:3f:53:62:05:b1:64:27:
9d:19:de:60:84:23:cc:d7:c6:46:14:06:1d:80:65:
5f:04:10:ca:b4:01:b3:2d:bf:02:ef:67:4a:14:5d:
d0:3a:c3:88:6a:eb:b8:ee:3d:ec:b2:de:ae:0a:df:
07:10:a7:f6:a6:f8:ef:ef:7b:af:79:df:8b:ab:9c:
10:46:77:ec:76:b7:26:53:ec:ad:14:65:e9:56:82:
4a:c1:27:69:9b:94:e4:80:cf:e0:35:99:11:bf:11:
0b:d7:6d:ca:cd:d1:69:f7:c8:4e:b3:78:83:6a:88:
5a:be:1f:a4:8f:30:54:f0:a3:13:98:23:81:35:eb:
ba:20:f5:c5:d1:50:1e:3a:c2:0d:ac:0f:c4:49:d3:
56:23:80:3d:94:8e:bc:75:f9:0a:de:3e:95:57:2a:
fc:a2:eb:e0:09:9d:12:af:be:3c:bd:95:f5:82:9e:
94:09:9a:71:eb:a7:bd:03:67:4b:93:25:7c:ea:d2:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:52:FC:90:7D:9E:57:16:25:E2:D4:5E:8A:D5:37:93:20:14:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2C9S_JB9nlcWJeLUXorVN5MgFI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.65.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8d:13:92:8d:3d:4e:93:09:3c:6a:0d:4a:48:70:19:04:8d:
e8:3f:77:d2:8f:bc:0d:03:e5:2e:f6:20:ab:54:47:a5:1e:27:
e0:4a:80:fe:5f:48:98:58:0d:2d:55:5c:f7:1e:95:38:d1:d8:
d1:2e:f7:dc:7a:59:63:c8:41:db:de:48:51:57:27:24:ff:fa:
32:a8:d9:43:7c:c9:7b:c4:90:4f:d1:67:8a:de:10:92:77:21:
0b:30:7f:a3:fa:9c:9f:e6:f2:74:30:42:9b:90:9e:dc:44:65:
e5:f0:50:d4:c6:35:57:33:63:af:d9:86:cc:c5:bc:1a:de:f6:
b7:a4:0d:ba:00:08:34:a9:82:e0:ef:90:e8:10:80:cb:ee:ce:
74:54:e6:a9:e9:54:27:7f:6d:8e:c1:31:7e:ed:fa:39:5c:27:
6d:fb:f6:40:4f:39:de:dc:b2:0d:5e:4d:1f:53:c2:35:bd:65:
e7:cb:0e:81:ae:ef:ab:5b:dd:f5:d6:b1:77:de:dc:75:8a:01:
33:16:4d:92:d4:28:a2:87:2c:67:70:c8:26:66:5d:c2:67:91:
02:ba:38:e0:de:5b:9e:e7:fa:ac:10:ac:e1:61:38:c8:fc:26:
d4:86:42:77:bc:35:d5:81:92:aa:6e:27:69:b0:5a:5e:00:23:
43:87:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org