Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B09peFV7w3i18LSnF_hrdzNFoc4.roa
File: B09peFV7w3i18LSnF_hrdzNFoc4.roa (raw, json)
Hash identifier: qRN9/qIC11SzFD2715+D9IGR8QALSo1qyMXMpsBd1sE=
Subject key identifier: 07:4F:69:78:55:7B:C3:78:B5:F0:B4:A7:17:F8:6B:77:33:45:A1:CE
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 09E88B70
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B09peFV7w3i18LSnF_hrdzNFoc4.roa
Signing time: Sat 01 Jan 2022 13:55:55 +0000
ROA not before: Sat 01 Jan 2022 13:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198668
IP address blocks: 185.243.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166234992 (0x9e88b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Jan 1 13:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=074f6978557bc378b5f0b4a717f86b773345a1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:f2:9b:07:d3:99:e2:f8:39:1e:55:44:b2:
e6:0d:95:be:33:54:98:8d:ca:5d:49:31:fa:7d:49:
8f:7a:c3:d0:22:f5:78:fa:eb:d3:dd:67:0a:f9:7b:
a8:66:19:64:cf:0f:b0:cd:8b:32:9e:4a:b0:a3:8b:
c9:e6:31:46:55:e3:5a:bd:e2:9a:0c:4f:c9:13:6a:
72:b2:81:5d:a9:b1:8c:2e:0b:ca:00:36:9f:48:c3:
f5:64:73:dd:25:c1:59:55:de:45:7e:88:74:7c:72:
30:20:2f:b0:52:48:41:e7:b1:43:2e:93:81:d2:50:
46:53:23:6e:e8:6e:5d:01:d7:d0:bb:7f:86:63:32:
d6:ef:bc:04:a0:b6:72:fc:25:3a:76:d7:1a:a4:1f:
b7:e3:a2:48:4c:2d:52:ab:92:9e:f5:fe:eb:58:6c:
18:dc:99:7d:38:91:be:06:4f:4e:e5:2f:b2:d6:5c:
a0:48:d3:6c:e7:f5:60:a1:d6:fe:7b:6f:c1:8a:32:
a8:58:f9:07:d8:0f:e8:d3:06:f8:c3:9a:5f:e3:1a:
fb:ea:2d:e9:61:72:e2:d2:f7:58:84:61:2b:6c:c5:
59:81:40:a6:62:94:7e:d5:81:12:79:ea:df:a5:11:
bb:55:f0:30:66:35:f8:aa:8f:4a:26:2b:84:8f:ed:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:69:78:55:7B:C3:78:B5:F0:B4:A7:17:F8:6B:77:33:45:A1:CE
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/B09peFV7w3i18LSnF_hrdzNFoc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.172.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b0:be:6a:88:e4:8e:6c:73:32:c6:fd:11:6a:bc:c5:b5:5b:
1d:35:dc:f7:bc:8b:5a:3f:1d:66:25:cc:8b:a3:6b:4f:61:b6:
ae:e3:d2:b9:07:b1:a2:52:a6:f1:c0:ff:90:f6:99:65:f3:9b:
a6:d3:3a:4f:09:df:9e:43:8d:c9:0b:a5:50:39:24:f2:1c:73:
18:f0:f0:53:ab:3c:d2:08:06:d8:c3:ea:01:74:05:19:78:0c:
f2:cd:34:c4:12:90:04:33:09:f0:50:2d:0e:a3:6d:50:02:49:
d5:58:77:3c:98:35:0e:f5:57:c5:00:c5:76:02:32:00:40:40:
bd:02:28:c2:bc:c1:72:5f:80:40:ff:93:3e:fa:9e:a6:30:e3:
a6:ef:08:cd:b9:94:7c:13:76:f4:69:45:d3:22:7f:f9:ed:78:
2f:24:23:50:16:b8:0f:37:94:34:b0:cc:6b:9d:cc:19:0b:2a:
5d:b8:09:a3:08:98:70:91:5f:6f:9a:dd:9f:84:2e:06:ee:4b:
89:bf:f1:a6:fc:7f:85:5b:34:22:78:82:66:3a:a6:84:38:47:
52:31:11:4e:58:b1:12:42:bf:d7:83:e3:b0:92:de:ad:b0:81:
27:18:43:46:e3:a5:11:1d:e7:24:f8:fa:cc:96:64:9f:f2:a1:
da:07:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org