Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i4up4HDfwKryQ8A1O5eu0k5BBO0.roa
File: i4up4HDfwKryQ8A1O5eu0k5BBO0.roa (raw, json)
Hash identifier: KpSYZoJIYK8AaPPYVLbBggs6hdhLZRUJEIC+2PVGSXM=
Subject key identifier: 8B:8B:A9:E0:70:DF:C0:AA:F2:43:C0:35:3B:97:AE:D2:4E:41:04:ED
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 137EC8D0
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i4up4HDfwKryQ8A1O5eu0k5BBO0.roa
Signing time: Sat 01 Jan 2022 05:56:13 +0000
ROA not before: Sat 01 Jan 2022 05:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50138
IP address blocks: 185.212.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327076048 (0x137ec8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b8ba9e070dfc0aaf243c0353b97aed24e4104ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f9:77:e8:7a:27:e4:8b:6a:c8:95:38:93:7d:
b5:75:40:61:77:4b:fc:fb:f3:c7:94:e4:db:01:f8:
ad:42:36:4e:96:33:7a:fa:1b:e4:6a:23:02:b2:8f:
42:c4:47:7e:24:4e:9d:54:a8:d4:29:11:be:88:5f:
f7:37:39:bb:78:a9:84:3f:ca:9a:4e:97:b3:d3:62:
47:6f:44:ff:ca:36:9f:6d:ad:85:63:79:2c:87:f0:
63:17:3d:76:1a:db:81:21:2f:33:06:a2:81:54:06:
d7:bd:d0:25:65:f1:0b:5b:82:f5:a8:3e:e5:cd:25:
36:93:d3:aa:7f:b6:7e:6f:44:0f:5a:11:c5:25:af:
72:18:8d:8c:59:ad:c1:9f:d1:6d:8e:22:76:d5:8c:
38:55:ee:79:51:eb:62:b3:e4:ef:ce:39:1f:19:f0:
2a:a0:ce:45:e2:b6:f3:56:db:cd:ff:c6:bc:e0:98:
4f:50:4a:5e:49:46:27:40:f1:cd:bc:b0:ff:66:d2:
a7:87:ee:36:1e:43:ce:54:bf:62:60:e9:cd:32:a2:
24:0d:79:10:c2:92:ff:21:01:35:66:d2:53:d7:13:
7a:19:b4:7d:a9:0d:4a:4d:af:2e:b1:5e:65:4a:16:
c6:41:13:52:b4:d1:e1:66:a5:e0:ae:79:b5:d8:20:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:A9:E0:70:DF:C0:AA:F2:43:C0:35:3B:97:AE:D2:4E:41:04:ED
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i4up4HDfwKryQ8A1O5eu0k5BBO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.9.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f8:a3:e0:41:9f:24:50:62:47:1a:90:8b:1f:79:61:86:52:
2a:f8:10:65:c7:d3:96:c9:25:12:aa:71:05:21:59:08:0b:62:
40:17:ef:10:4c:83:a0:de:b1:53:54:84:6d:e0:68:8e:ed:4a:
1f:e8:f3:13:7f:c1:de:e9:d7:31:c0:2e:ca:4e:b4:df:35:a9:
ef:03:c9:28:cf:55:13:bd:28:ed:49:f8:ba:f7:be:b9:16:d0:
01:80:ce:42:d1:fb:76:27:4e:38:e3:50:92:1f:07:1d:92:fb:
41:54:9c:95:b0:fa:f6:87:28:6e:f7:e0:27:69:17:94:45:0d:
fd:c1:58:10:81:08:e5:82:0e:17:33:a4:e0:b8:f8:93:c4:0c:
30:98:42:2a:7f:c6:97:58:f1:c3:11:91:31:f7:e4:61:19:f4:
6c:8f:77:bf:3e:27:dc:75:35:4e:45:47:df:b4:54:22:1b:34:
c0:29:bb:3f:70:68:e8:33:aa:80:90:5e:47:f2:32:c6:51:b6:
87:e1:73:c9:3a:36:34:a7:7e:52:75:28:15:7a:ae:98:fd:12:
5b:46:2f:d2:93:38:e2:df:32:e6:aa:e9:37:0e:ba:79:34:20:
9e:9c:a9:c7:78:5d:5a:8f:e1:b2:3e:2a:0d:a0:79:72:a9:b3:
d9:55:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org