Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa
File: 9c2l0n-8TbeNW_MJmUVlv-llCFw.roa (raw, json)
Hash identifier: nTs40ro8l/Xzk8rjYQFlVSyrC5gLNL4ZbWv8ne6pP7w=
Subject key identifier: F5:CD:A5:D2:7F:BC:4D:B7:8D:5B:F3:09:99:45:65:BF:E9:65:08:5C
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 342045BD
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa
Signing time: Sat 01 Jan 2022 09:02:47 +0000
ROA not before: Sat 01 Jan 2022 09:02:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.84.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874530237 (0x342045bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 09:02:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5cda5d27fbc4db78d5bf309994565bfe965085c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:5a:a5:72:d4:3e:64:02:68:0e:ff:41:cf:
09:a5:ef:49:ee:57:bf:01:94:e1:fd:74:0b:ba:12:
f1:cb:92:3e:0b:d9:47:e1:39:97:27:d8:3b:85:a5:
ee:d7:b0:63:51:77:11:ab:78:cf:3d:91:eb:68:89:
bc:2a:59:69:e5:d6:3e:61:36:d5:c8:b9:fa:70:85:
98:0e:00:bb:79:18:49:2d:c0:90:d2:18:82:0e:41:
b4:08:86:98:79:c2:cb:8f:bb:0a:89:48:94:06:8c:
8f:d8:2d:2f:0f:53:de:ba:9c:16:39:bb:8d:d6:85:
38:8d:88:62:69:d2:ab:90:62:de:db:bc:7c:43:c3:
3c:2f:44:88:83:0f:4d:e5:cd:41:ea:f0:31:62:50:
39:b9:da:51:53:c1:3c:d6:dd:0a:ab:52:1f:6c:1b:
54:d7:68:37:72:b4:ee:70:84:84:59:9e:e4:5b:99:
bc:08:ca:f6:08:b9:1f:ef:a6:29:f7:68:5b:3e:74:
2c:3e:11:74:63:41:ec:a6:a6:91:01:fe:1f:e4:e5:
ab:a7:6f:e9:91:36:ec:8f:f7:6c:e8:37:ed:39:7b:
39:58:30:cd:7d:4e:b2:c3:cd:d6:5b:c3:67:24:e7:
b7:0c:57:1e:4d:fe:e7:2b:b9:f8:d9:ce:65:e3:05:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CD:A5:D2:7F:BC:4D:B7:8D:5B:F3:09:99:45:65:BF:E9:65:08:5C
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9c2l0n-8TbeNW_MJmUVlv-llCFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ea:74:79:35:cc:dd:d3:cc:e4:fa:32:fe:08:c3:32:ce:38:
95:28:b5:7a:2c:c2:30:9a:71:ff:a7:9a:7e:bf:c8:11:a6:43:
d9:ea:8a:27:cd:a6:89:12:aa:df:2d:1e:b9:68:fa:bf:ff:4f:
84:39:ab:8d:c6:db:3e:7a:d1:ac:6b:a2:7f:68:38:13:22:32:
ef:d8:27:fc:9f:91:29:79:84:55:b8:75:dd:80:2f:08:53:d7:
00:59:9a:0f:74:62:06:0b:bc:aa:a4:31:9e:ae:2a:7b:f7:f6:
7e:df:b0:ba:d7:69:3f:95:35:22:de:b8:99:50:93:b5:67:91:
a6:4b:ad:bb:12:c5:0e:4c:d4:22:22:f8:51:b7:a5:24:2d:99:
19:65:9c:7f:89:e8:8c:4b:20:26:13:c1:70:65:3c:ca:b5:a3:
10:84:51:b6:80:3b:60:a8:59:43:4f:8a:3e:03:27:96:7c:99:
e3:06:8f:25:f6:f3:42:68:b6:60:f7:f5:bd:f4:b0:57:e0:6b:
72:b9:6a:36:80:3f:35:3e:f2:87:7e:6d:60:0c:7a:4c:e2:7d:
5e:48:f3:1f:06:13:85:99:9c:8f:4e:4a:d4:58:c1:2e:91:4f:
55:b7:6d:63:61:5d:9b:66:4c:bc:0a:74:da:8d:e3:50:ca:a1:
06:af:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org