Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/C_mADZxXM8z8DMEbfcryz0uJovw.roa
File: C_mADZxXM8z8DMEbfcryz0uJovw.roa (raw, json)
Hash identifier: wzhFLQIAdgYbJlFarqS44i/vwFvw5Nfs/VFn2UW8sdI=
Subject key identifier: 0B:F9:80:0D:9C:57:33:CC:FC:0C:C1:1B:7D:CA:F2:CF:4B:89:A2:FC
Certificate issuer: /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial: D62C8A
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/C_mADZxXM8z8DMEbfcryz0uJovw.roa
Signing time: Sat 01 Jan 2022 05:04:42 +0000
ROA not before: Sat 01 Jan 2022 05:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.244.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14036106 (0xd62c8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
Validity
Not Before: Jan 1 05:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf9800d9c5733ccfc0cc11b7dcaf2cf4b89a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:12:8e:c3:eb:ca:03:78:83:e0:d9:0e:5a:bf:
a6:ef:8a:9e:aa:00:fa:66:e8:80:7e:34:6f:ca:10:
df:e8:95:43:9a:14:70:c4:62:90:c1:b5:38:cd:91:
de:91:6c:21:31:75:00:97:f5:e4:5e:fc:f7:3d:65:
c5:f2:eb:dc:ef:11:e9:e9:93:d5:c4:b3:a9:10:e0:
15:48:5f:2c:6c:09:2c:cd:76:96:57:ac:90:7e:fe:
6b:ab:3e:b3:77:1f:2f:57:1f:b3:74:18:0b:d4:1f:
5c:2b:7d:3e:25:74:88:13:b9:84:03:81:ad:5a:0e:
3a:a3:7e:21:74:c1:e2:47:ef:38:78:c2:9d:53:e0:
79:01:bd:d0:30:14:05:d0:8c:d3:ce:b1:99:76:64:
40:59:7a:44:b9:9d:67:35:18:97:5a:bd:e8:6a:88:
65:2e:79:bf:28:dc:9a:4e:56:46:95:30:7b:63:e4:
ed:5f:9a:c3:34:23:f5:4b:3f:d9:64:93:35:02:9b:
db:4b:3e:12:91:da:7d:62:95:61:7a:38:c7:a5:5d:
40:96:2e:a5:38:b4:8f:ee:c8:57:c1:77:35:aa:3e:
c4:93:b8:05:4f:8d:e5:0e:9d:ee:6d:59:60:39:06:
c9:99:41:71:c4:53:d9:c9:cd:37:86:a6:37:7a:cc:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:80:0D:9C:57:33:CC:FC:0C:C1:1B:7D:CA:F2:CF:4B:89:A2:FC
X509v3 Authority Key Identifier:
keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/C_mADZxXM8z8DMEbfcryz0uJovw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.119.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3e:0c:8b:d5:db:35:32:83:c9:dd:80:47:27:fc:06:0b:b9:
e0:98:2b:b6:fc:2a:4d:33:e5:77:41:2f:36:3d:b6:ff:e8:5a:
68:2c:03:8a:62:8a:9c:2f:9b:7c:f5:d0:03:0e:66:e6:87:2a:
85:d0:c5:56:54:fa:05:4a:b8:01:9e:46:b4:57:a3:f3:de:9a:
1b:d4:29:45:08:a5:d2:05:cd:7d:67:3e:34:f3:56:f6:f0:39:
9b:63:5b:f3:4e:a8:c2:c4:1c:19:b4:9f:91:22:35:1f:26:2b:
21:14:fb:98:98:4b:f0:7d:4f:69:49:1c:5b:3b:c3:ea:dd:9d:
53:e5:3d:74:85:02:05:25:c6:1a:b7:c2:43:83:14:37:86:38:
02:8e:2a:76:bf:b2:da:2b:dc:7e:a5:51:d6:3d:68:bc:d7:5e:
34:6e:a0:aa:44:3f:52:99:1d:d3:f2:85:fb:1b:04:77:e5:4a:
b1:87:e3:06:e1:75:13:7a:61:0c:19:5d:23:85:5c:a3:ce:f5:
28:54:33:48:72:99:f6:86:a5:c8:fe:3b:0b:67:d9:8f:29:b7:
fc:cb:ac:de:91:54:8c:e8:44:00:87:a0:03:4a:3b:c7:b4:f4:
ff:5a:38:2f:e6:d7:de:70:4b:01:99:98:b0:1d:db:eb:0f:05:
65:7d:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:14 2023 by rpki-client on console-fra.rpki-client.org