Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/s6oZJiXcKS7ENjUzY-d5icAH3lQ.roa
File: s6oZJiXcKS7ENjUzY-d5icAH3lQ.roa (raw, json)
Hash identifier: Iq/lUuio7SyV8tkfh0eChWw/Cl5M42QHSeov0zvR7kk=
Subject key identifier: B3:AA:19:26:25:DC:29:2E:C4:36:35:33:63:E7:79:89:C0:07:DE:54
Certificate issuer: /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial: 078F73E9
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/s6oZJiXcKS7ENjUzY-d5icAH3lQ.roa
Signing time: Sat 01 Jan 2022 15:58:17 +0000
ROA not before: Sat 01 Jan 2022 15:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.187.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126841833 (0x78f73e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Validity
Not Before: Jan 1 15:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3aa192625dc292ec436353363e77989c007de54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:6d:a8:7e:92:ba:10:7a:44:86:d5:20:d9:
a2:f4:5b:cc:ad:36:1e:a7:85:f4:4a:80:da:c4:6a:
c5:9d:b4:00:4b:85:70:e8:55:89:64:c4:31:48:da:
36:ef:17:59:76:09:b0:67:83:c1:fd:ca:cd:5c:1a:
3c:0e:2d:bb:b5:16:76:f9:3f:79:02:8b:ba:ae:7a:
42:7d:cb:b7:89:25:27:85:0c:1d:c9:b9:4c:75:98:
30:50:c3:fb:ac:ef:95:18:89:f7:bc:9e:6a:c1:0a:
17:ab:d5:26:ba:51:28:17:5a:01:a1:a4:95:b5:59:
16:98:53:71:fa:e3:15:9f:71:3f:36:a4:72:bd:2b:
8f:37:6d:37:51:e9:ac:66:23:4e:c3:7b:79:10:1d:
31:23:a6:d7:99:ca:3c:08:f0:cf:9a:90:76:23:eb:
21:2f:48:3c:a5:24:a6:50:67:0f:83:3e:5a:21:ba:
b4:1a:f3:6e:0c:f8:3c:16:4a:81:5a:33:b1:10:c2:
b5:72:b3:eb:79:28:e3:f0:27:18:b0:5b:11:fd:c5:
f4:f7:7b:99:35:a5:af:8a:31:84:c3:a1:24:2c:0d:
cf:35:62:aa:aa:0d:5d:be:40:aa:c9:14:94:f2:c8:
01:cf:6b:02:7e:b5:2c:ec:f1:4c:a8:f5:a8:66:1c:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:19:26:25:DC:29:2E:C4:36:35:33:63:E7:79:89:C0:07:DE:54
X509v3 Authority Key Identifier:
keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/s6oZJiXcKS7ENjUzY-d5icAH3lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.116.0/22
Signature Algorithm: sha256WithRSAEncryption
59:19:e2:ce:a4:3d:5c:50:2d:0d:70:be:6a:7a:0e:ba:92:a8:
9c:3e:8d:15:ee:94:14:c3:75:71:c5:2d:fc:69:81:d4:27:2f:
79:c1:a9:01:f3:86:f6:ed:ad:9e:84:fe:d5:33:d1:71:0a:f1:
a9:d2:db:3a:31:5f:b4:47:91:69:57:42:34:dd:26:92:c2:f4:
cb:e1:bb:0f:57:4d:16:70:e0:73:10:52:cb:b9:bd:c3:62:1d:
ff:87:a7:c5:c7:b2:14:c5:09:95:d2:fc:ae:0a:8e:a8:2a:62:
c7:e3:6d:89:eb:94:a7:0d:d2:e9:14:3e:08:a9:b5:e5:db:f3:
18:c0:d0:49:bb:96:21:76:57:0e:35:02:bc:e1:d5:f9:db:a1:
fb:63:ea:39:37:d2:28:72:c0:ab:d7:76:2d:73:8c:e1:49:77:
17:4c:6f:99:1c:b1:84:59:bc:25:e0:ce:d5:56:49:97:81:9b:
32:ec:6e:23:83:a2:14:6f:a4:11:aa:d6:06:ea:23:f8:96:a7:
4d:19:c1:56:40:df:95:92:57:51:38:32:82:ce:6a:57:c4:d3:
49:81:57:50:53:92:b1:3b:63:1f:4f:8b:25:f8:d1:78:16:2f:
de:70:c6:71:41:d1:aa:5d:36:bb:86:eb:7f:4d:c9:2f:39:c8:
63:01:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:48 2024 by rpki-client on console-fra.rpki-client.org