Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/R7-PxnbUoHy7gV7jSsNuz9QTuy8.roa
File: R7-PxnbUoHy7gV7jSsNuz9QTuy8.roa (raw, json)
Hash identifier: A8VUqActjB0FWGyM78e6BPNEeOEbKSVkojSIM4Vc00Y=
Subject key identifier: 47:BF:8F:C6:76:D4:A0:7C:BB:81:5E:E3:4A:C3:6E:CF:D4:13:BB:2F
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01827D34EC67317EB51DD4824BE535CD52E4
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/R7-PxnbUoHy7gV7jSsNuz9QTuy8.roa
Signing time: Mon 08 Aug 2022 11:26:36 +0000
ROA not before: Mon 08 Aug 2022 11:26:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202561
IP address blocks: 185.208.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:34:ec:67:31:7e:b5:1d:d4:82:4b:e5:35:cd:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Aug 8 11:26:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47bf8fc676d4a07cbb815ee34ac36ecfd413bb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:06:cb:ed:d9:4a:d7:61:ce:cd:84:d1:1e:
30:22:e6:67:ee:92:68:76:88:af:4b:ae:3c:07:02:
9a:7c:72:be:4b:d1:a7:89:31:fa:44:be:15:7b:de:
f0:0a:e7:bd:8d:2c:cb:f8:75:38:86:72:b4:2a:ef:
c1:44:e4:4b:b4:15:1c:ac:5e:48:7a:db:9e:bd:fc:
91:99:df:0a:92:7a:ed:5b:8a:77:ac:33:9b:47:44:
7f:2f:a4:97:25:74:97:bc:82:67:f2:fc:c3:2b:f9:
ad:13:be:45:eb:aa:2e:ce:28:55:b9:e4:79:9d:ae:
0f:f7:12:aa:76:6a:4e:ae:bb:80:5b:58:ff:cf:07:
07:e2:39:2e:e8:83:61:81:5f:09:9d:f8:45:f0:81:
ef:b8:46:35:f0:88:4c:c1:aa:97:8d:fb:06:4f:d9:
9e:56:e9:35:5a:83:24:10:13:49:f6:d2:13:d2:a3:
6e:bd:dd:24:08:12:64:f5:ce:6d:25:d2:21:a9:d3:
f5:47:b7:a3:25:c6:ab:16:66:bf:ab:ae:eb:5c:aa:
da:85:86:ec:b9:cd:99:38:73:93:50:da:3c:ca:35:
cd:ce:33:2a:be:70:1b:4d:59:4b:3e:78:f1:e6:64:
47:29:f8:88:c9:5b:8c:9e:37:6c:ef:be:6d:95:b9:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:8F:C6:76:D4:A0:7C:BB:81:5E:E3:4A:C3:6E:CF:D4:13:BB:2F
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/R7-PxnbUoHy7gV7jSsNuz9QTuy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3c:0e:ec:79:e5:ea:34:3f:d4:29:d0:e1:63:64:df:04:f6:
bd:80:b3:72:8b:aa:ce:a0:74:8b:36:01:22:81:dd:7d:88:f8:
0e:c6:2c:f9:83:68:bb:44:bc:20:a9:31:cf:44:c3:5b:8f:e2:
1a:27:39:8b:90:97:f5:a0:ed:8f:4d:1d:ea:50:82:61:a5:e6:
60:f2:09:0f:95:3e:b8:a7:0f:83:27:dc:d3:ca:ac:b5:0f:cc:
56:ac:58:f7:54:21:03:63:db:80:4d:aa:0f:4a:4b:2b:d0:41:
c9:6e:5b:30:bf:07:59:ac:a8:46:df:76:f9:a4:19:60:98:15:
3c:fa:d3:59:bb:63:89:99:b2:fd:84:de:2c:63:17:f5:b8:b8:
df:4d:79:10:b7:cc:a8:a2:8e:49:a4:b5:d7:37:43:10:49:b6:
e5:16:3f:ca:91:18:bd:52:85:2e:e8:ff:7f:6a:dd:f2:87:57:
29:b4:8c:96:08:0c:7f:4c:fe:66:20:3a:be:20:61:83:3c:26:
d8:63:e3:1d:2d:b0:60:58:fb:2c:d8:b0:16:29:ab:7b:87:2b:
3a:2a:4f:4a:27:30:87:b2:95:07:db:e0:25:3c:56:b2:da:30:
26:23:59:91:eb:ef:0f:11:7b:f3:af:0d:de:c8:35:08:1e:e8:
9c:95:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:17 2024 by rpki-client on console-ams.rpki-client.org