Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/x_LB0fy6SILPhytBBm2o_BoYk10.roa
File: x_LB0fy6SILPhytBBm2o_BoYk10.roa (raw, json)
Hash identifier: oPQVQJ49yp0GZFUAs6sbJjWFUO1CXOrDrLrSRf9Mj3A=
Subject key identifier: C7:F2:C1:D1:FC:BA:48:82:CF:87:2B:41:06:6D:A8:FC:1A:18:93:5D
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0184E839EA1ED949AAD77CA4FCE48D61F95B
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/x_LB0fy6SILPhytBBm2o_BoYk10.roa
Signing time: Tue 06 Dec 2022 16:17:00 +0000
ROA not before: Tue 06 Dec 2022 16:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:39:ea:1e:d9:49:aa:d7:7c:a4:fc:e4:8d:61:f9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Dec 6 16:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7f2c1d1fcba4882cf872b41066da8fc1a18935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:6a:59:f4:0f:85:0f:87:a0:4c:56:c4:55:
e0:79:59:3a:59:c3:a9:25:be:b8:59:a5:a2:4c:e2:
58:55:56:cd:92:76:12:b4:68:b0:8d:10:63:8f:41:
d9:c7:92:80:0c:09:cc:d6:a4:63:bd:4e:cf:53:0e:
03:cd:f0:dd:b7:08:1f:ec:e3:c7:38:60:bd:5f:ab:
af:42:5f:52:f8:6a:8b:e9:7a:d4:8f:2d:23:f1:86:
12:d3:74:68:7c:a6:d4:09:21:30:7b:cf:f3:3e:cd:
74:e3:c1:8f:03:f7:52:c7:d4:0c:3b:7f:82:2c:d9:
fb:f5:71:f5:0f:cf:e6:bb:5e:23:1c:e8:8d:9a:e9:
f6:a1:c9:7a:3f:23:b3:9b:db:56:72:66:56:49:50:
7a:3b:68:79:90:1d:0b:f2:48:64:c8:82:cb:d0:1a:
da:06:03:c1:d0:3c:83:0f:de:64:73:64:ef:f5:50:
8e:0b:de:56:8c:03:c6:1b:22:bb:1c:eb:3f:17:f8:
b9:ad:db:18:c6:4f:9a:35:36:45:a9:bd:7d:66:12:
09:52:eb:ef:e8:84:bf:03:12:54:4f:9f:4c:92:01:
4c:b5:5e:95:ad:83:ee:65:79:6f:fb:6b:9a:39:f0:
cf:1e:ce:3d:75:5c:bb:93:67:74:4a:07:d1:af:8b:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F2:C1:D1:FC:BA:48:82:CF:87:2B:41:06:6D:A8:FC:1A:18:93:5D
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/x_LB0fy6SILPhytBBm2o_BoYk10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f1:c5:b8:7d:37:bd:3d:89:70:3d:33:e5:8c:cd:33:68:49:
31:61:9e:85:0c:e5:e8:4e:f2:44:bf:2f:0d:69:82:46:de:61:
09:d4:ad:d7:36:f9:0c:94:39:9d:f6:d9:d4:b0:d7:92:4d:eb:
a6:48:36:a1:a5:b0:c4:44:f6:be:ca:1f:53:de:b1:84:f7:03:
75:0a:45:8c:d1:8a:fa:17:4f:48:c0:92:95:f9:c0:70:6d:2f:
4e:23:2b:d3:0c:b0:54:7a:5c:c2:d4:90:83:01:81:ab:e7:c6:
cd:2b:8c:a7:eb:ce:d7:27:c7:2f:b7:0c:73:ee:5d:e6:2d:c9:
f5:33:8d:f3:48:ce:18:47:ee:89:27:e8:e4:9f:57:08:ff:0f:
c4:c2:7c:07:a0:68:d0:3b:d2:c8:84:d5:10:55:ea:24:03:9c:
d9:0d:7a:f7:41:82:0b:3f:fb:c0:f5:f0:2e:d6:dd:69:60:ac:
cc:28:22:c4:11:e5:55:0d:25:70:ae:96:54:31:97:fd:dc:52:
bf:38:a4:e5:19:60:61:50:da:dd:26:78:9f:0b:a8:b7:7d:7c:
03:f3:80:76:e1:ad:b4:77:a3:ed:d2:7e:d7:67:da:9e:92:6a:
50:23:67:47:48:3c:04:47:0d:b2:ee:90:d6:02:6c:16:b4:44:
a0:a9:bb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org