Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CEuhD2FEIG4Ox-PakGcHYly6uBw.roa
File: CEuhD2FEIG4Ox-PakGcHYly6uBw.roa (raw, json)
Hash identifier: ZPQ7K+UjZyIBuvBMTgbRRDs7i2Z4QSbWwiVnKa6UgGc=
Subject key identifier: 08:4B:A1:0F:61:44:20:6E:0E:C7:E3:DA:90:67:07:62:5C:BA:B8:1C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 091814E8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CEuhD2FEIG4Ox-PakGcHYly6uBw.roa
Signing time: Sat 01 Jan 2022 16:00:37 +0000
ROA not before: Sat 01 Jan 2022 16:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202418
IP address blocks: 185.242.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152573160 (0x91814e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084ba10f6144206e0ec7e3da906707625cbab81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:8f:77:11:60:81:c4:10:c1:21:f8:14:e5:
54:a5:a2:a4:10:e8:f1:3b:19:46:f4:fb:5e:77:8a:
56:ca:5e:4c:2d:4f:f4:c1:cb:6f:67:fe:f8:38:a9:
e1:e6:52:3d:78:bf:0f:9c:e2:41:d1:d0:e0:1f:d8:
6c:b6:0b:49:18:52:2b:02:73:f8:bb:ea:e5:2a:74:
eb:5c:ef:c8:6d:1e:98:e8:6a:95:e9:3d:89:1d:b1:
a5:66:e6:6a:c0:67:50:29:22:3b:02:30:b4:25:4c:
12:8e:6d:0d:94:32:1a:8c:41:c5:1b:5d:49:89:26:
a3:36:dd:d2:85:ae:b0:d9:8a:6c:23:f1:7b:2d:1c:
41:fd:10:af:04:fb:d3:8a:c0:20:5d:ce:ff:fc:b0:
f2:26:df:a7:a5:7c:7f:29:48:c3:d7:1b:a0:0b:ed:
82:cc:e4:61:ff:6d:7d:16:1e:19:34:ef:4e:11:23:
d5:74:b0:f2:51:92:2b:f3:19:ca:7e:ca:d9:ce:2d:
a7:6e:eb:b8:f5:f2:a7:c4:ac:8a:0a:35:31:fd:56:
60:ea:16:76:8e:69:02:b5:e9:18:21:6b:e6:a3:c2:
d7:ed:79:18:98:44:d2:94:c9:00:7d:96:0b:50:8d:
19:f8:a8:58:c3:d1:e8:97:b0:64:a6:6b:90:38:49:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:A1:0F:61:44:20:6E:0E:C7:E3:DA:90:67:07:62:5C:BA:B8:1C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CEuhD2FEIG4Ox-PakGcHYly6uBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.227.0/24
Signature Algorithm: sha256WithRSAEncryption
db:74:07:a7:23:50:dc:85:87:25:a0:9a:05:6a:ed:c9:20:a6:
48:36:74:36:54:8c:b0:6d:66:a1:11:1a:0c:0c:2a:11:7d:32:
08:24:ee:69:21:8d:17:b5:ee:80:a3:e0:fe:02:8c:47:6c:74:
55:3d:f9:6a:02:24:6b:d5:90:25:0e:06:18:ce:2d:6f:a0:1e:
29:17:19:88:90:e6:78:e3:62:2a:8f:4a:b0:0e:95:7b:30:f5:
6e:81:9f:cc:33:1f:23:81:51:3c:1f:46:6f:fc:02:a7:5d:6b:
73:14:c0:c7:82:14:7a:4a:a6:65:23:db:5b:35:f5:c7:33:b1:
07:99:d6:52:66:ca:1e:a0:08:8f:ea:1a:d4:64:3a:32:2c:c6:
d1:81:c4:7b:9d:15:5d:d7:97:60:70:78:60:07:73:ea:eb:b3:
3b:43:8f:ec:d3:3a:75:a0:b5:3f:f9:6e:17:62:7c:92:53:b7:
81:d6:2b:d1:c6:0b:11:51:23:c7:f0:91:d1:d1:5b:8a:f4:d5:
5c:09:ef:15:36:27:f2:98:5a:13:40:89:cf:2e:e5:c8:03:0b:
6f:3c:49:4d:0c:60:4b:cf:79:51:c1:b4:88:2e:66:de:2a:d1:
f1:f9:3b:7c:6d:10:af:ae:b7:5f:49:3b:e0:d3:15:16:1e:84:
73:c5:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org