Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/b8vP6980BDtneHuwykIbjOkMjcc.roa
File: b8vP6980BDtneHuwykIbjOkMjcc.roa (raw, json)
Hash identifier: lp721oD+567uhdN8lwIr5SdcL744XKQiwuzTqOsf1pg=
Subject key identifier: 6F:CB:CF:EB:DF:34:04:3B:67:78:7B:B0:CA:42:1B:8C:E9:0C:8D:C7
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 3EECB9
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/b8vP6980BDtneHuwykIbjOkMjcc.roa
Signing time: Thu 17 Feb 2022 11:42:53 +0000
ROA not before: Thu 17 Feb 2022 11:42:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.107.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4123833 (0x3eecb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Feb 17 11:42:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fcbcfebdf34043b67787bb0ca421b8ce90c8dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:53:8d:ff:de:d9:ba:76:6e:d0:b1:80:29:
89:a1:ad:97:3c:fa:54:e3:8f:7f:89:08:d5:b0:71:
71:66:09:a9:78:d7:bc:e4:95:7f:63:d9:a6:1d:68:
e8:42:24:c3:20:51:7f:18:3b:34:48:37:f7:f4:17:
9c:e0:a0:5e:e4:10:95:f5:0a:70:07:55:23:cf:1e:
0a:de:44:4c:b0:95:1f:54:da:0f:f0:c6:19:ab:02:
7b:30:19:41:66:7f:45:11:81:89:aa:23:12:ad:0f:
3b:31:ac:cb:df:1e:e3:7a:15:0d:60:d2:66:72:ee:
ac:7c:3f:f4:a0:c8:a3:2d:84:90:34:e3:a0:2e:70:
ab:ab:fd:30:ef:83:03:fa:d8:ca:0d:67:31:12:63:
63:57:4f:a1:3e:f7:df:f5:fb:eb:5b:de:a4:4e:d5:
48:19:e1:2c:aa:de:ed:eb:12:37:84:54:74:d6:3c:
94:4f:04:7d:03:c8:d7:2a:3a:25:dc:8e:75:12:58:
e3:4c:0f:ab:66:8c:5f:e0:ed:32:4a:01:e1:7b:67:
80:d3:37:a1:d5:d8:77:d8:d7:03:84:52:68:11:e6:
08:f2:11:6e:f9:d8:bb:50:c0:fd:b3:8d:d6:ab:7e:
dc:d8:eb:2c:8e:8f:70:73:53:1a:02:1a:29:26:25:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:CF:EB:DF:34:04:3B:67:78:7B:B0:CA:42:1B:8C:E9:0C:8D:C7
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/b8vP6980BDtneHuwykIbjOkMjcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.197.0/24
Signature Algorithm: sha256WithRSAEncryption
48:09:38:86:29:66:dc:1c:b3:89:63:bf:9c:f5:cd:85:73:72:
f8:9a:be:53:fe:50:1a:2e:70:c2:a6:d9:cd:a7:7a:b6:8c:b4:
5b:e7:a9:e6:7a:f4:7a:d1:f0:2d:26:c4:fc:f9:51:95:87:3f:
bb:5c:e1:37:54:e7:9b:23:a5:83:b6:d5:ba:e2:fe:4c:17:23:
7a:1a:32:10:9c:e5:96:b7:9c:06:21:5b:ba:56:16:ee:38:36:
02:42:8c:8c:0a:00:f4:2b:8b:3d:06:82:f2:e8:c3:29:a6:9f:
b6:72:d0:aa:06:5b:c0:34:9a:0d:a5:1c:aa:33:d2:07:22:ee:
8a:39:33:fa:04:76:8b:aa:a7:50:ba:3d:7a:9e:fe:00:e9:26:
5a:a0:43:8d:f3:41:6c:f3:3c:06:ca:84:c7:b1:4f:01:43:81:
9a:85:59:37:61:6b:17:88:a8:78:53:99:54:93:31:60:a2:84:
49:cb:72:f7:7a:dc:90:91:c9:d7:37:ce:96:9a:0b:5f:7b:63:
28:04:eb:b9:89:bc:03:e2:89:ff:52:7c:12:75:42:0e:a7:fa:
6e:56:74:dd:ec:89:56:6d:3d:d6:67:0f:48:55:a3:c6:fe:9f:
c6:9b:14:47:74:20:18:9d:46:3a:03:92:78:ad:61:f0:86:d3:
2d:2d:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:03 2023 by rpki-client on console-fra.rpki-client.org