Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/u-0Je58yZaS_YuB0YwD8r8Ihz84.roa
File: u-0Je58yZaS_YuB0YwD8r8Ihz84.roa (raw, json)
Hash identifier: +/rsbmMwE/B6LBrX/each/DfDp4yGTH0lbbGWQw+9cM=
Subject key identifier: BB:ED:09:7B:9F:32:65:A4:BF:62:E0:74:63:00:FC:AF:C2:21:CF:CE
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01848D0922361BDDC0C18E33847AA63E50BC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/u-0Je58yZaS_YuB0YwD8r8Ihz84.roa
Signing time: Fri 18 Nov 2022 23:18:16 +0000
ROA not before: Fri 18 Nov 2022 23:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 185.242.224.0/24 maxlen: 24
194.31.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8d:09:22:36:1b:dd:c0:c1:8e:33:84:7a:a6:3e:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 18 23:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbed097b9f3265a4bf62e0746300fcafc221cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:41:ed:fc:61:1c:c5:7d:12:0a:b2:bc:a2:80:
7a:0e:f0:ed:2b:5e:fa:9d:6d:49:0f:75:12:eb:b1:
b6:79:d6:ca:62:e8:e9:be:a5:17:5c:a3:21:d1:75:
48:48:d9:11:97:36:06:3c:bf:e4:8f:aa:e9:bb:c2:
46:b8:34:c2:0f:5b:b9:54:ba:d8:c5:d8:b4:1f:ea:
85:8b:b0:e1:48:d5:bf:a8:a8:cc:3c:19:c6:b0:54:
84:6a:db:5a:f3:cf:f2:a4:a8:15:0a:82:16:b7:71:
90:fa:3a:89:23:db:5c:be:8e:5b:12:e1:47:90:a4:
57:ee:28:5e:37:e2:8b:7a:a3:f0:1d:86:0e:fd:3f:
00:6b:63:23:27:87:ce:8b:3f:f1:1f:c0:e7:71:38:
90:bc:1c:4f:55:a4:cf:59:b4:68:53:42:01:18:2a:
72:9f:52:aa:59:47:24:e7:12:b9:17:a1:87:df:d8:
51:76:ea:94:f4:a0:7b:9f:b0:ee:9f:27:26:4c:e1:
5f:af:9f:d2:e5:06:9b:3a:62:13:cd:9e:06:e4:8a:
e3:03:38:38:e7:b1:cb:b9:33:1e:68:50:74:af:5e:
63:b6:90:1c:ea:66:27:db:3c:36:86:da:2b:af:51:
e8:07:88:e8:b8:f8:2e:af:28:7e:4e:f1:1a:86:8e:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:ED:09:7B:9F:32:65:A4:BF:62:E0:74:63:00:FC:AF:C2:21:CF:CE
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/u-0Je58yZaS_YuB0YwD8r8Ihz84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.224.0/24
194.31.142.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:83:7e:96:b9:e7:6f:a6:b6:3b:26:49:41:08:3f:ad:ea:7f:
cb:2f:af:b6:ed:10:a0:c1:46:71:18:b3:86:d2:f5:fa:7e:c0:
2b:1f:e7:c2:69:9c:ca:8e:d1:4f:7c:01:9d:d2:39:c3:cd:c3:
42:10:2a:98:5c:fc:b0:bf:28:27:9a:31:db:54:e7:67:19:79:
80:b9:5e:c8:1b:af:aa:16:ec:b9:9d:81:86:f8:03:cf:e9:0f:
93:e5:cd:0e:87:63:9b:6d:fc:66:77:62:a1:32:cd:55:2b:2c:
94:7d:84:5c:ed:76:fd:2b:5f:95:b8:6b:19:9f:07:a9:a4:70:
9d:d8:09:91:3a:b7:50:bb:10:a2:bb:80:d8:5e:f7:0e:9a:4d:
e3:34:45:3d:b0:50:86:9d:62:57:b5:d2:e7:68:87:f6:08:f2:
d5:79:17:d4:7c:cb:d2:12:ce:77:52:42:b8:23:00:73:26:38:
b9:64:61:7e:a8:81:c3:3f:d3:bc:cf:d0:6e:a0:88:56:c8:f5:
59:f3:ac:e5:64:7f:b9:a5:3a:28:00:cc:e8:8b:9f:72:72:09:
11:34:2e:d1:fd:37:0b:29:98:d0:14:66:3c:6a:17:0b:f5:ee:
e1:f6:93:9e:77:23:8d:9c:5b:20:a1:3b:84:b5:fc:88:51:6a:
de:f6:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org