Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/Cvm2weolLhVB-ftQoSJQhJveiUw.roa
File: Cvm2weolLhVB-ftQoSJQhJveiUw.roa (raw, json)
Hash identifier: 4XtkQ+1px176TtyQ0CAun7KDCCbTtMNo+mYQOWsHPyw=
Subject key identifier: 0A:F9:B6:C1:EA:25:2E:15:41:F9:FB:50:A1:22:50:84:9B:DE:89:4C
Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Certificate serial: 082AFEF8
Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/Cvm2weolLhVB-ftQoSJQhJveiUw.roa
Signing time: Sat 01 Jan 2022 09:01:00 +0000
ROA not before: Sat 01 Jan 2022 09:01:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208735
IP address blocks: 185.121.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137035512 (0x82afef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7
Validity
Not Before: Jan 1 09:01:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0af9b6c1ea252e1541f9fb50a12250849bde894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:af:a5:55:b2:c4:c9:c5:34:6b:03:26:10:
25:49:2a:39:c2:ab:d3:d5:c6:84:8e:0c:9b:be:0b:
60:df:24:73:dd:68:62:6c:85:57:a8:92:7b:92:43:
9b:74:37:19:b8:d1:c0:61:6f:c0:d9:29:0f:8e:b6:
49:bc:99:fb:62:e0:e3:9f:eb:0e:62:6a:7d:04:27:
4c:29:ec:39:03:e2:18:6a:84:3c:4d:98:3a:aa:84:
bc:51:6e:cd:90:ff:92:71:78:95:c9:ea:d5:89:5c:
3d:29:76:4b:d0:1f:c9:d8:c0:03:dc:1e:8f:9f:d1:
ba:af:97:f5:d5:29:a1:87:6e:2b:1f:4d:15:ae:26:
b4:4e:8d:ed:ab:91:86:5a:45:b1:1f:6f:e1:cb:72:
cb:00:cd:47:be:da:ec:f7:b8:45:24:c8:59:6b:73:
68:ba:a7:34:f7:02:eb:f7:77:fb:b6:4e:a1:5f:12:
d7:ce:7e:8c:69:6f:4d:0b:41:1d:ca:9d:24:0b:d6:
3d:5a:08:6a:38:c4:3a:fd:ea:e1:8f:06:11:9a:6c:
5c:d0:2d:77:af:27:7c:fb:06:64:57:78:d2:b6:21:
f3:c7:cf:27:9e:8a:14:19:03:83:98:06:7f:2a:40:
76:f6:f8:9f:bb:e6:af:65:61:a2:c3:ee:10:a3:2b:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:B6:C1:EA:25:2E:15:41:F9:FB:50:A1:22:50:84:9B:DE:89:4C
X509v3 Authority Key Identifier:
keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/Cvm2weolLhVB-ftQoSJQhJveiUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:fa:18:1e:f4:5e:21:c7:d4:a6:01:9e:0a:38:4d:22:93:f6:
b3:2e:0b:c3:cc:90:8b:83:37:01:ad:c7:0c:1a:26:3f:8b:60:
f0:92:e5:ef:2d:3c:0d:af:76:f4:55:a3:28:c5:40:2c:3e:9b:
67:a6:d2:65:d3:37:65:09:65:c4:96:41:fd:66:d7:2f:51:cc:
82:dc:d5:74:e5:bf:64:48:49:09:dd:41:af:70:96:b8:17:65:
a2:a7:29:0b:b2:72:de:64:ea:34:4b:2c:d9:e0:62:92:8d:04:
3c:ab:a0:7a:f6:6c:dc:92:23:98:3a:27:be:45:a1:e0:25:7e:
3c:e9:fa:52:c8:db:70:76:67:8b:aa:c5:7e:a5:b6:82:64:80:
58:f3:c2:fe:da:ad:b2:be:7b:7b:95:83:d7:87:a2:ae:46:8d:
f4:3a:4c:1e:c5:87:90:08:4e:78:0b:72:05:ed:52:c5:8c:4b:
cd:9e:65:3b:3c:c9:63:72:67:04:70:f2:3b:9c:99:8d:19:44:
c6:5c:ab:a3:87:31:33:64:26:27:84:5c:db:cc:ff:23:0e:dc:
d0:4b:62:e7:01:01:5f:a6:58:96:49:1c:52:42:f1:c1:d3:44:
b1:b1:d3:70:0c:2b:77:3c:37:2f:cf:bc:2a:21:da:c1:3a:45:
90:f8:83:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:31 2024 by rpki-client on console-ams.rpki-client.org