Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rdp_6n9eO7Jrp5SVRuXWpEzTZwY.roa
File: rdp_6n9eO7Jrp5SVRuXWpEzTZwY.roa (raw, json)
Hash identifier: NySt1dyLdQ+AL82nlyIh/iuN3emcfLrK4zip03gY890=
Subject key identifier: AD:DA:7F:EA:7F:5E:3B:B2:6B:A7:94:95:46:E5:D6:A4:4C:D3:67:06
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 093C1FC3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rdp_6n9eO7Jrp5SVRuXWpEzTZwY.roa
Signing time: Sat 01 Jan 2022 16:01:04 +0000
ROA not before: Sat 01 Jan 2022 16:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213073
IP address blocks: 185.234.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154935235 (0x93c1fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adda7fea7f5e3bb26ba7949546e5d6a44cd36706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:d7:7d:b2:56:ba:79:04:25:14:15:e3:7f:
47:a2:4b:96:0d:2b:8a:1c:e8:f3:5a:9a:e2:68:30:
33:c4:d2:ea:93:ab:88:d4:7a:ba:4e:ac:a5:ee:08:
22:7f:ff:f8:e8:1e:84:0a:c1:98:fc:5e:17:1e:97:
d8:98:d2:63:31:60:98:2f:38:f9:ff:a0:41:e7:79:
bc:3f:2d:fe:4d:8d:5d:73:3b:95:16:fb:e4:5c:45:
8d:fe:e8:e0:bb:ca:17:27:90:23:5a:ad:79:c3:4f:
5e:77:cf:d9:ff:e2:3d:81:cf:af:09:85:ae:10:af:
2d:07:5e:8d:01:66:8f:e7:53:df:aa:5c:f7:f6:93:
8f:37:92:19:f6:56:f6:ff:b2:21:e5:37:c0:78:16:
1a:81:78:e3:ec:03:66:c4:3a:93:31:39:7d:5b:f0:
b4:f5:9f:34:43:d8:42:1c:54:75:2c:ec:00:18:7d:
7b:7a:cd:94:6b:4d:5c:df:4f:3d:27:98:94:97:ca:
b3:49:4b:6f:7d:7d:b7:14:48:ed:7c:ff:23:f7:2d:
58:1a:62:20:11:04:7a:18:a9:13:10:16:bc:87:ad:
d4:66:0e:01:f8:2b:5c:c7:d1:de:dc:5a:af:88:a6:
b5:f8:8a:6c:da:64:98:81:55:52:b8:e5:a2:ef:5a:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:7F:EA:7F:5E:3B:B2:6B:A7:94:95:46:E5:D6:A4:4C:D3:67:06
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/rdp_6n9eO7Jrp5SVRuXWpEzTZwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:0f:c8:0d:c0:0d:2c:61:6c:22:e4:28:ac:64:a9:a1:16:90:
08:7b:24:23:75:27:36:f0:77:1d:a8:2f:e8:5f:ca:10:ab:4f:
89:a9:2b:50:b7:63:fe:e6:34:08:6b:d7:00:d2:bc:f3:52:2e:
0d:6b:04:56:f9:83:fd:54:e7:0c:76:59:fa:7b:05:7a:1a:18:
a6:f6:eb:92:e3:04:51:df:19:05:f1:c5:ec:de:be:31:97:1f:
20:77:3c:3b:b7:fc:f6:d9:3c:b4:45:12:36:24:69:d8:96:2d:
67:0e:c8:8a:9c:1a:21:28:be:c2:00:20:94:06:cc:a7:95:66:
f8:d4:6e:6d:49:02:60:08:fe:22:25:78:93:c5:99:3c:52:be:
fa:cc:af:5c:51:62:76:d3:4d:99:50:7e:4b:33:f4:6c:cc:1a:
87:93:af:e2:6a:f4:85:d3:dc:c2:0e:b1:bf:a9:15:fb:8d:55:
19:69:90:5f:cf:05:23:e2:78:3c:61:8e:55:cd:86:4b:87:c2:
54:61:22:fb:5e:26:bb:69:22:53:0e:a4:97:bd:00:f4:aa:c9:
70:2b:77:40:0a:c5:ac:78:48:0c:98:b2:ff:52:cf:67:9a:34:
9b:ae:0b:69:63:a6:93:f3:ac:48:f2:0e:87:d8:35:ba:e5:aa:
b7:18:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org