Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9OmwTDC6q-CiaEdG8cic-uTb6oY.roa
File: 9OmwTDC6q-CiaEdG8cic-uTb6oY.roa (raw, json)
Hash identifier: 8qmf+1O1nJoRDpQ7Voe9KN5FewpxiwqbwG24kgDYpGs=
Subject key identifier: F4:E9:B0:4C:30:BA:AB:E0:A2:68:47:46:F1:C8:9C:FA:E4:DB:EA:86
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018415E61FEE778732B4CE479B2231B0AB37
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9OmwTDC6q-CiaEdG8cic-uTb6oY.roa
Signing time: Wed 26 Oct 2022 20:05:13 +0000
ROA not before: Wed 26 Oct 2022 20:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207837
IP address blocks: 185.227.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:15:e6:1f:ee:77:87:32:b4:ce:47:9b:22:31:b0:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Oct 26 20:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4e9b04c30baabe0a2684746f1c89cfae4dbea86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:71:38:2b:ad:27:ed:0c:3e:11:81:6b:db:dc:
06:05:35:d3:d3:5e:dc:28:83:22:69:23:28:6a:16:
c2:84:c2:c8:e9:56:b5:9b:cf:fb:fa:ce:54:d4:96:
0b:02:75:e0:8c:76:c4:81:70:01:ca:65:f8:84:99:
09:cc:c4:a1:76:a2:52:cb:83:14:43:16:1d:cc:1d:
bc:f4:db:97:91:37:dc:73:60:24:05:f8:8c:52:b0:
f7:71:8c:92:16:4a:b2:69:15:ff:a0:6d:be:f0:4e:
fb:6d:61:a4:88:93:9b:4e:83:9f:aa:21:6f:a0:02:
b2:35:d1:7f:f3:98:44:a2:f7:fd:ce:77:49:65:8c:
0b:31:72:12:10:5b:62:ff:d4:dd:0d:78:7a:68:cd:
47:61:71:68:1c:18:c3:5f:e3:c9:37:95:d4:4c:0a:
80:19:41:7e:b8:19:90:88:a1:98:3d:6e:7c:d1:7c:
0e:d2:28:47:a4:4b:20:ef:5c:9f:2f:99:44:93:f5:
f6:86:f8:03:ed:a4:6f:96:01:98:2c:ea:c4:9a:b9:
f0:00:71:d8:5e:71:ea:a3:26:ea:c1:6a:fe:b3:ed:
95:87:14:fc:3c:1f:0f:e4:9e:c2:47:77:d5:a5:54:
cb:8c:72:81:9b:24:eb:d7:91:bf:79:81:77:6c:fe:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:B0:4C:30:BA:AB:E0:A2:68:47:46:F1:C8:9C:FA:E4:DB:EA:86
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/9OmwTDC6q-CiaEdG8cic-uTb6oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.71.0/24
Signature Algorithm: sha256WithRSAEncryption
47:23:d9:89:76:1e:2d:42:62:13:cd:3a:22:9a:69:79:ad:e8:
31:b9:a5:3d:f2:bf:71:a4:b9:55:eb:fa:6a:51:a9:ff:45:6c:
fb:89:26:e2:66:d4:41:df:f6:1f:d6:92:87:98:91:eb:45:7a:
df:b3:9d:e5:d5:bb:0f:d4:12:c4:e9:4a:39:e5:74:39:c7:36:
af:84:12:64:ea:c2:a6:bb:f5:d8:58:4d:f8:2b:1a:5e:89:79:
ec:08:d3:7e:7f:54:91:23:4c:e2:c9:b2:9a:ff:0b:d7:3a:4b:
87:66:37:aa:50:a6:0f:02:99:15:e6:07:bc:ed:a1:00:46:b4:
e7:09:c3:33:50:7e:d7:e4:0e:41:28:4c:68:af:07:18:58:00:
c1:3e:09:81:2c:80:38:70:e4:9d:ba:75:26:da:75:39:12:89:
74:c6:0c:1b:5d:f5:31:a6:81:59:59:07:c1:08:d2:af:c4:6b:
24:39:d8:85:0f:6f:e4:46:28:ff:33:78:72:f2:f1:33:2a:37:
1d:95:e0:9b:82:a0:fc:52:98:18:e9:f8:6b:69:bc:3b:d5:99:
5b:76:5e:be:5b:cb:74:97:7e:9d:77:63:cd:02:1f:dc:3e:7b:
d4:eb:2e:30:dd:f7:37:0c:f0:8c:23:71:f8:e9:18:f9:c3:20:
b6:a7:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org