Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/u0nB-ZHlkvQd10aniT33B7isZ4w.roa
File: u0nB-ZHlkvQd10aniT33B7isZ4w.roa (raw, json)
Hash identifier: RCJbH1IrEODpXJzZVZxXv5wRyPzIQLoGz/tfZ6dN5JY=
Subject key identifier: BB:49:C1:F9:91:E5:92:F4:1D:D7:46:A7:89:3D:F7:07:B8:AC:67:8C
Certificate issuer: /CN=7f6b95455c5f0d8090e3662c691c22690e9a116d
Certificate serial: FA5588
Authority key identifier: 7F:6B:95:45:5C:5F:0D:80:90:E3:66:2C:69:1C:22:69:0E:9A:11:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/u0nB-ZHlkvQd10aniT33B7isZ4w.roa
Signing time: Sat 01 Jan 2022 05:00:56 +0000
ROA not before: Sat 01 Jan 2022 05:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.253.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16405896 (0xfa5588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6b95455c5f0d8090e3662c691c22690e9a116d
Validity
Not Before: Jan 1 05:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb49c1f991e592f41dd746a7893df707b8ac678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9d:1e:ff:e7:2d:57:7f:b1:7b:5d:90:19:fc:
fd:41:f4:36:27:d1:53:44:30:f2:9e:85:ca:09:a7:
13:2d:39:fb:38:ba:e4:40:94:53:6a:89:78:a1:f1:
d1:d9:eb:b1:8a:8b:62:2e:05:49:31:38:ee:ab:65:
16:4b:1f:10:ea:39:e4:0c:73:c2:2a:d2:0f:12:6f:
ff:7b:01:16:27:69:cb:97:12:41:e7:7d:60:3f:98:
0d:26:9c:c9:c8:f7:ca:30:eb:99:02:d6:4b:9c:aa:
0e:2a:45:0f:2e:77:45:65:09:94:44:81:85:6a:62:
91:e6:4d:ca:f0:86:47:41:e6:fb:b5:92:7a:18:6d:
6b:c6:f9:4b:84:6b:30:d0:ec:84:54:55:62:ac:0e:
cf:c7:75:8b:ff:d6:93:11:14:d8:fc:20:e8:41:80:
67:c8:f4:78:13:9f:b1:c4:f3:4c:cc:99:ca:2e:52:
82:a7:ba:a1:86:bd:df:98:50:c9:73:e1:b0:a8:01:
4d:22:3c:8a:86:d0:97:37:f0:bc:15:1f:5e:2b:9e:
58:b7:73:84:21:89:48:93:a7:d1:cc:e0:53:2d:fb:
f5:ec:a0:f0:21:3c:a7:ac:e2:51:59:15:49:c6:b1:
b7:3b:35:93:e0:8d:d0:47:94:a2:ae:61:d7:2a:46:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:49:C1:F9:91:E5:92:F4:1D:D7:46:A7:89:3D:F7:07:B8:AC:67:8C
X509v3 Authority Key Identifier:
keyid:7F:6B:95:45:5C:5F:0D:80:90:E3:66:2C:69:1C:22:69:0E:9A:11:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/u0nB-ZHlkvQd10aniT33B7isZ4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d9da42-45d7-464c-9a52-8a1100ccf7cd/1/f2uVRVxfDYCQ42YsaRwiaQ6aEW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.2.0/24
Signature Algorithm: sha256WithRSAEncryption
21:68:df:5f:12:ff:a4:ad:6e:9f:e9:42:89:2b:1a:cd:63:5a:
13:ea:9d:9f:b9:b8:08:f1:0c:84:6c:c0:10:de:27:0a:07:33:
8c:7d:ab:b2:bd:38:98:79:b3:99:6d:4f:b4:c5:8f:2e:83:62:
08:75:af:97:68:3b:3e:26:5f:61:1d:e8:9b:67:ed:6c:97:a9:
f5:62:9a:20:ad:b6:8d:d4:c7:93:00:1d:a0:45:1a:fe:bb:e9:
1b:e2:59:a4:83:67:b0:57:30:b2:06:8e:ac:ab:59:5b:f5:f2:
52:96:02:8d:3b:df:09:95:0b:47:de:95:8c:38:50:78:c9:17:
8d:28:a1:f2:eb:5c:79:61:c6:f2:84:38:cc:df:ef:5a:ac:81:
6e:fd:1c:7e:e7:20:47:50:9f:b8:21:29:28:c6:d3:04:79:77:
e0:fb:28:8a:d1:97:9b:a7:5e:11:ee:80:24:a7:b7:b0:c3:cd:
68:19:61:f5:4d:74:d8:a7:3d:3f:15:36:0d:c3:c4:c8:1c:0f:
cd:ec:2e:d9:e0:71:1a:97:4f:ec:0f:9a:80:5d:1c:db:8b:32:
e0:e7:8b:2b:e1:9c:1a:04:4d:1c:71:db:f9:ef:ff:fe:c4:8f:
a1:59:62:60:3f:7b:49:eb:9f:58:40:51:af:bf:d9:15:ae:41:
37:9e:c7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-fra.rpki-client.org