Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/o2WbLRIQW_iKWNanqgedHDJmc1c.roa
File: o2WbLRIQW_iKWNanqgedHDJmc1c.roa (raw, json)
Hash identifier: Py4oPUwZq9+fXkgYsF9+GfjUiffFMnXK8mZq7UsliPo=
Subject key identifier: A3:65:9B:2D:12:10:5B:F8:8A:58:D6:A7:AA:07:9D:1C:32:66:73:57
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 07901CD5
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/o2WbLRIQW_iKWNanqgedHDJmc1c.roa
Signing time: Sat 01 Jan 2022 15:58:19 +0000
ROA not before: Sat 01 Jan 2022 15:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206317
IP address blocks: 185.187.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126885077 (0x7901cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 1 15:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3659b2d12105bf88a58d6a7aa079d1c32667357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:73:90:37:f3:0d:05:f6:93:5a:a6:ea:be:
a5:71:48:bd:37:ac:82:5f:d3:f0:1a:e1:05:5c:90:
e9:78:a2:b7:73:35:ac:fe:f0:53:a4:0b:cf:01:ac:
b1:0a:8b:b5:a7:69:ba:8e:b9:80:c2:b6:3c:82:70:
69:ad:01:73:5b:f0:82:ce:5f:7b:73:92:e1:8b:c4:
8c:f4:d8:a9:c6:27:47:26:7c:8a:7a:ad:31:aa:24:
19:b2:e3:39:8c:ca:e1:e6:0b:b2:a2:8c:f6:3e:c6:
0e:44:6e:91:df:db:37:c2:05:59:b4:10:c1:d2:5c:
f7:8f:b9:34:9b:60:50:13:34:2c:e3:1a:af:da:87:
06:c2:b2:db:41:d7:85:4e:99:33:bb:23:d0:93:2f:
71:08:68:4b:08:cb:9a:8c:16:08:6d:f6:b0:e9:e4:
af:b1:3e:1a:1a:e5:d2:b4:36:67:12:11:f2:b9:db:
73:d7:30:be:c6:77:f0:16:ae:2c:ff:a3:99:c7:e4:
0d:60:f9:b7:d3:90:3a:e8:aa:d3:43:39:10:d0:45:
2e:45:33:e5:c2:be:37:91:29:ba:84:b2:f8:33:29:
eb:6a:6d:a4:bf:e0:94:72:3d:12:a0:3b:90:65:bf:
77:58:f0:cc:12:34:e6:50:07:b1:ba:16:54:3f:97:
5e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:9B:2D:12:10:5B:F8:8A:58:D6:A7:AA:07:9D:1C:32:66:73:57
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/o2WbLRIQW_iKWNanqgedHDJmc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.118.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b8:b2:ae:f5:9f:24:3b:8f:fc:0d:a9:d8:64:38:92:a2:72:
13:4d:ff:b3:ac:bc:54:9d:7c:a8:0b:2c:e2:49:f8:07:59:a2:
3e:4e:22:25:b2:26:6a:d8:48:2e:05:19:16:a5:f4:c6:d7:cf:
38:ad:4e:87:40:47:56:d0:91:82:c2:74:ae:e9:45:8f:aa:6c:
ee:2e:9c:25:f8:8d:63:bc:fc:c8:83:f0:bc:ac:05:ec:17:f7:
04:3d:bc:b8:66:8e:9e:04:b8:7b:b9:a3:71:b8:4a:b4:bf:25:
84:dc:d5:9f:0c:41:5f:70:59:d0:cc:30:95:75:3d:fd:73:6b:
94:ab:cd:61:c6:ca:51:3f:a2:86:61:57:fa:4d:9f:b4:a6:68:
95:ae:2d:ee:d7:18:88:9f:c0:cb:27:a1:13:87:55:7d:e8:8b:
96:08:ba:ba:6f:31:5e:51:14:ff:79:b4:86:c1:34:79:56:39:
47:d8:b5:23:49:f1:00:85:31:af:80:94:11:a5:02:55:37:80:
73:e2:6d:af:f7:df:dc:b3:e9:65:b2:26:19:a2:d9:3e:fc:45:
0a:ee:87:83:79:93:5d:da:57:e4:e8:dc:28:83:32:22:b8:a5:
09:0a:95:26:da:2e:fa:bf:f0:2a:16:58:9d:c7:cd:d2:55:a8:
64:b6:a2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:44 2024 by rpki-client on console-ams.rpki-client.org