Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/1-noFxbkYJK6JN--1kZ_VbwJZRSU.roa
File: 1-noFxbkYJK6JN--1kZ_VbwJZRSU.roa (raw, json)
Hash identifier: XbL7splwzBn1zHevO/+qEQ+WJ//krJiurz6IE/jIhxQ=
Subject key identifier: FA:7A:05:C5:B9:18:24:AE:89:37:EF:B5:91:9F:D5:6F:02:59:45:25
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 023E24F1
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/1-noFxbkYJK6JN--1kZ_VbwJZRSU.roa
Signing time: Sat 01 Jan 2022 07:53:01 +0000
ROA not before: Sat 01 Jan 2022 07:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199356
IP address blocks: 185.18.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37627121 (0x23e24f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Jan 1 07:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa7a05c5b91824ae8937efb5919fd56f02594525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:ad:6e:84:24:dd:1d:57:52:5f:34:bb:8e:
c3:b2:e9:9b:37:16:e6:c1:73:a6:f8:cc:56:97:0a:
0c:0c:78:13:7d:d3:39:44:4f:6a:41:43:2c:b6:2f:
ca:b5:3f:09:44:b0:ac:c6:77:55:58:bd:37:bc:c8:
40:69:39:56:51:c2:93:d0:ac:63:37:48:8d:67:95:
ed:aa:80:e6:32:78:12:0b:35:e5:e7:cc:59:c4:31:
92:cd:40:be:99:e6:68:91:cc:8b:fa:a8:fd:98:2e:
18:e3:70:94:65:07:44:ca:7a:4a:81:99:90:74:b0:
cd:13:d5:d5:46:03:5d:e4:e9:8c:6b:6b:04:ba:b0:
22:7d:64:ed:d2:17:fd:c3:4d:a1:9d:19:79:d8:72:
8e:dd:15:c3:0a:99:9e:29:28:3a:2a:a9:bb:4f:2b:
61:c0:0c:56:c6:cb:30:3c:eb:85:e3:4c:8a:7f:ea:
8d:64:38:e4:b9:f2:78:69:8c:dd:45:b1:e4:eb:d0:
d4:57:a7:9e:4a:49:d8:d1:47:67:96:51:21:45:20:
4e:e9:fb:04:6f:8c:ce:06:c3:f0:61:89:26:b8:f9:
90:18:6b:98:a2:94:55:d0:d1:ef:d7:1d:07:9f:b1:
1d:23:e1:94:ee:3d:78:d4:db:d2:5c:72:01:42:44:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7A:05:C5:B9:18:24:AE:89:37:EF:B5:91:9F:D5:6F:02:59:45:25
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/1-noFxbkYJK6JN--1kZ_VbwJZRSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:43:c9:ae:01:9e:23:8a:3d:e2:02:c8:4c:50:59:2c:8e:ad:
9a:37:17:68:96:14:6f:15:fa:1f:91:75:4c:c0:00:29:08:51:
63:8b:d8:28:20:45:03:f9:63:a2:80:0f:14:8c:70:d1:8c:d3:
d4:bc:cc:32:f4:f3:e7:51:e8:1e:2a:df:45:0b:a5:d2:2f:35:
cb:80:9d:da:ec:5d:8e:b7:f8:ff:69:72:08:5c:08:fc:e5:36:
15:3f:27:54:bd:03:0f:44:42:75:61:d3:04:4a:7f:57:b1:d9:
84:c4:36:63:b3:51:52:dc:ae:dd:2a:f4:b6:3c:c3:bc:f0:ac:
e8:bc:c8:a5:50:70:83:6a:b3:cd:e6:38:56:0a:a2:0d:30:33:
75:5a:ef:7b:e3:5e:fb:5a:8d:4b:c2:5a:0a:83:9e:ec:ba:24:
a7:86:e1:bb:29:66:72:b8:08:85:9a:75:7e:4e:55:0a:49:86:
40:46:28:9c:18:a6:3c:7a:f2:a0:96:91:15:d7:69:18:ab:31:
17:40:e4:cb:7b:44:f0:37:08:ba:37:14:db:b1:00:08:f4:f4:
f7:5a:49:ed:63:a9:75:c7:84:75:3e:20:50:3c:b7:41:fd:87:
7f:51:2f:93:f6:34:4e:17:7d:f9:2b:5d:6f:b4:b7:2f:a0:04:
32:f3:e1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org