Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/T6JdGSPAooveNxrVA-UHylKDEHE.roa
File: T6JdGSPAooveNxrVA-UHylKDEHE.roa (raw, json)
Hash identifier: vF4aJx/BiEdWMvLs6J7fuaR7gSCnfpNoFX4vpwpN6xE=
Subject key identifier: 4F:A2:5D:19:23:C0:A2:8B:DE:37:1A:D5:03:E5:07:CA:52:83:10:71
Certificate issuer: /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial: 0182208241137AECC3C996100F21719EA32E
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/T6JdGSPAooveNxrVA-UHylKDEHE.roa
Signing time: Thu 21 Jul 2022 11:26:23 +0000
ROA not before: Thu 21 Jul 2022 11:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 188.244.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:82:41:13:7a:ec:c3:c9:96:10:0f:21:71:9e:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
Validity
Not Before: Jul 21 11:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fa25d1923c0a28bde371ad503e507ca52831071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:6e:8d:0c:4f:77:e0:89:51:1e:81:bc:83:
b0:dd:fa:c1:87:88:9a:75:da:c1:7c:6e:bf:df:71:
f5:8e:f9:45:f2:30:1d:48:2f:e0:9f:e0:15:81:11:
a5:32:8a:d7:6f:80:4e:dc:44:71:f1:34:db:91:f9:
23:b9:45:62:00:ff:cf:3f:d9:e5:15:91:6d:54:b8:
6b:b3:5f:a4:30:3c:af:94:01:c6:9f:0a:91:fa:d5:
c7:c9:4c:82:0b:95:23:43:e2:3b:a8:9a:14:12:8e:
77:23:30:83:63:17:34:8b:36:33:79:9b:a3:f7:71:
b0:46:41:5d:2f:22:1d:31:82:c8:85:2f:34:eb:0d:
2b:07:6a:d6:6b:29:b9:74:25:97:d9:97:83:96:9a:
77:43:17:e0:1c:60:7b:55:6a:b9:a8:9c:8b:5b:c3:
ce:f0:3c:e1:12:81:bb:8a:ba:70:7f:fb:09:4d:4a:
38:8d:59:91:e3:86:f1:1f:af:d5:31:bd:a1:46:9b:
12:6c:04:71:30:12:1a:ba:d4:c9:13:5d:03:11:6c:
54:fc:a9:ce:6e:66:1d:63:ec:2c:0f:13:76:ef:42:
bd:76:7c:86:d1:18:df:a9:22:52:dd:60:67:20:12:
05:74:6b:1e:63:63:54:a0:f7:bd:b9:92:2e:45:0b:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A2:5D:19:23:C0:A2:8B:DE:37:1A:D5:03:E5:07:CA:52:83:10:71
X509v3 Authority Key Identifier:
keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/T6JdGSPAooveNxrVA-UHylKDEHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7d:52:68:04:c3:ca:7b:23:8a:b1:7a:62:61:c0:dc:ef:18:
5b:95:62:08:50:bc:98:40:71:91:d5:a7:8e:35:76:b0:e0:62:
58:e9:ab:11:c0:0e:35:be:a8:19:23:93:33:0c:34:e8:0a:d9:
9d:da:b4:f1:78:fc:88:d5:13:f8:fc:be:01:68:4e:78:43:0b:
95:02:69:78:d9:fb:14:01:24:a7:b6:0e:cb:26:87:a0:83:09:
fc:1b:82:f6:33:fa:85:6f:34:a9:31:55:94:fe:c4:82:38:68:
82:d1:34:ea:b7:06:07:f8:46:e5:2b:dd:41:ef:12:9b:a7:5f:
af:93:8f:56:65:99:54:0a:f2:e9:b6:00:df:1f:80:93:fc:27:
2a:e5:ab:31:aa:7a:0f:b7:9e:bd:33:24:ec:f3:b4:3c:c7:16:
91:1b:ae:c3:34:3f:bc:29:0f:f8:a6:32:86:96:37:98:d0:57:
18:1c:74:fe:7c:1b:24:1b:56:8b:0a:22:04:09:c3:4a:46:d8:
7c:2a:68:34:75:19:3c:f2:f5:86:86:8c:1e:b1:57:d8:2c:a2:
ff:9a:05:f5:65:36:ca:35:73:6c:0c:48:38:05:17:32:87:22:
bc:e3:b2:bf:0a:28:03:e4:8c:79:62:36:2c:f3:99:ce:7e:2a:
aa:a4:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-ams.rpki-client.org