Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/x1YslCYzvcSKbJx78KVNynZ2apE.roa
File: x1YslCYzvcSKbJx78KVNynZ2apE.roa (raw, json)
Hash identifier: zYT6xGSPsVdbwYChhs5EDJF4y9+OMPUjBVSK9rMvRB0=
Subject key identifier: C7:56:2C:94:26:33:BD:C4:8A:6C:9C:7B:F0:A5:4D:CA:76:76:6A:91
Certificate issuer: /CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Certificate serial: 01DE1C
Authority key identifier: 9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/x1YslCYzvcSKbJx78KVNynZ2apE.roa
Signing time: Sat 15 Jan 2022 15:48:53 +0000
ROA not before: Sat 15 Jan 2022 15:48:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203812
IP address blocks: 185.122.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122396 (0x1de1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc03f6c5a284fa00dbb5aa609c515b7c589969
Validity
Not Before: Jan 15 15:48:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7562c942633bdc48a6c9c7bf0a54dca76766a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:96:02:8d:e7:4b:41:20:c0:b2:4f:38:dc:
94:2b:40:20:48:74:55:93:31:c8:fd:d0:8d:a8:c3:
df:0c:da:19:13:93:fc:a4:7f:de:94:ce:20:d9:29:
c5:8d:4d:38:f6:ec:a1:e5:c0:90:f3:00:ee:72:84:
68:70:07:24:fb:0f:7c:6c:3a:19:e4:0b:ff:36:0e:
3a:5d:3d:9f:fd:22:e8:16:b9:59:75:d8:a0:a2:86:
d6:cc:7b:73:8c:c4:e5:2f:8b:6a:37:c9:27:c5:e7:
a7:57:90:9c:d5:c8:e1:a9:2d:7c:97:44:cb:2c:91:
0c:d6:c5:cb:d0:cc:f8:33:be:de:c1:cb:0d:bf:3a:
c8:88:29:6c:a1:b8:c9:47:45:d8:6a:7f:43:a1:5a:
d1:92:f0:9b:ab:8b:9a:e1:c2:6b:ff:a6:c6:0a:d5:
4a:6d:89:d2:d3:21:77:b5:86:9a:d1:fd:16:e1:20:
76:4d:ac:0b:72:d2:31:ed:2f:29:37:ad:1a:62:75:
40:fe:fb:3f:f4:f8:70:50:ee:e4:9e:e3:71:43:37:
45:09:3b:df:58:79:3c:12:03:8f:84:f1:41:24:00:
9a:11:0d:18:a0:2b:31:53:40:ea:46:bb:83:ab:e8:
e6:79:a3:47:9d:4e:9b:b5:c8:b1:7e:4f:b8:52:d1:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:2C:94:26:33:BD:C4:8A:6C:9C:7B:F0:A5:4D:CA:76:76:6A:91
X509v3 Authority Key Identifier:
keyid:9B:BC:03:F6:C5:A2:84:FA:00:DB:B5:AA:60:9C:51:5B:7C:58:99:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7wD9sWihPoA27WqYJxRW3xYmWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/x1YslCYzvcSKbJx78KVNynZ2apE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8944f4-f342-4254-b5a7-9d7e5af4dfc5/1/m7wD9sWihPoA27WqYJxRW3xYmWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:83:3d:d5:da:d4:21:d2:65:0b:ce:31:f6:5a:e7:4f:2a:f4:
47:fc:cd:66:b7:d0:89:3c:ba:9f:3e:80:d2:3b:1a:4a:1f:a8:
ec:48:1e:80:ec:e1:af:fa:04:41:9e:5a:46:00:95:d9:2d:9d:
7d:fe:9b:be:e4:06:aa:fa:1b:ad:76:d1:cf:f0:b0:b1:b4:7d:
90:d8:06:96:50:2f:da:1c:cb:17:a5:4b:9f:b9:cc:53:5d:01:
21:c4:38:df:dc:29:b1:f7:f5:c8:f2:8c:07:be:5b:3b:84:b0:
41:91:2c:d3:e6:c0:68:86:6e:92:1d:67:e7:32:53:52:fe:15:
83:da:16:36:b7:8d:3d:90:d1:6b:92:96:c3:f9:bb:ae:05:64:
b4:8b:1e:99:25:89:97:7e:1a:a0:a8:86:c3:09:90:2d:76:40:
49:d9:b8:fb:10:80:12:72:fd:db:c6:50:9d:cc:7e:be:da:03:
cf:87:36:1a:9d:2d:37:6b:02:bd:13:11:f5:b6:0f:d2:c9:99:
cb:c8:c9:b6:a8:93:11:1e:70:70:d8:f9:fc:e7:a4:b2:e7:d3:
74:96:61:e4:63:0c:21:66:87:00:53:e5:93:8a:e3:37:40:2a:
98:4f:5f:fd:be:07:26:9d:2d:bb:36:59:a1:18:6f:c2:a0:84:
f7:89:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:21 2024 by rpki-client on console-ams.rpki-client.org