Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/0yV7lb_XnM6jDXRGTU0i2LeCtxc.roa
File: 0yV7lb_XnM6jDXRGTU0i2LeCtxc.roa (raw, json)
Hash identifier: YE2E+Cvpnpr8MbMWh1+XvsC2x+/ee1XJnQXudRUrBFw=
Subject key identifier: D3:25:7B:95:BF:D7:9C:CE:A3:0D:74:46:4D:4D:22:D8:B7:82:B7:17
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0117A38D
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/0yV7lb_XnM6jDXRGTU0i2LeCtxc.roa
Signing time: Sat 01 Jan 2022 08:57:05 +0000
ROA not before: Sat 01 Jan 2022 08:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61094
IP address blocks: 185.187.136.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18326413 (0x117a38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jan 1 08:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3257b95bfd79ccea30d74464d4d22d8b782b717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:3c:0d:7a:81:f2:c9:d1:47:98:80:60:38:
2d:60:1b:2c:ad:96:b7:44:f4:04:ef:0b:c1:cc:a0:
b0:de:17:90:3c:b7:c5:be:a8:2f:4c:e7:53:ad:b1:
65:04:e3:fb:b0:15:85:9f:ab:c5:39:ca:a5:4a:90:
fb:b7:ca:33:cc:f7:bd:91:ca:57:99:d2:ca:21:01:
a2:f0:7a:77:55:6f:fb:67:b2:57:e7:bf:b9:9d:85:
73:16:93:54:64:1e:da:12:23:1c:81:80:2c:26:c3:
c9:8b:ce:c4:04:23:ae:b7:36:42:0f:cf:ae:ff:e4:
d4:8b:00:c2:11:11:01:09:56:4a:0b:be:76:b8:d5:
26:14:61:20:b3:cf:63:34:79:52:0b:2b:8d:ef:53:
af:0d:59:a6:0e:c3:be:44:e8:b9:e1:17:91:65:6e:
68:8c:e2:4c:56:34:7b:03:58:43:4a:c2:75:ab:7d:
7e:e8:5b:23:5f:12:4e:d8:5b:f1:2d:f1:99:8e:94:
95:8a:24:93:3b:35:35:72:52:9c:4c:2b:56:2b:34:
44:f6:ad:08:2a:38:c5:4b:1a:fd:5e:e0:a9:e3:c4:
9c:c4:a0:f5:63:24:f8:0c:b4:7b:4b:7d:e4:d2:05:
89:64:c8:58:81:e3:67:bc:ad:8e:c5:80:0b:81:e5:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:25:7B:95:BF:D7:9C:CE:A3:0D:74:46:4D:4D:22:D8:B7:82:B7:17
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/0yV7lb_XnM6jDXRGTU0i2LeCtxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.136.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:7a:29:c0:79:fe:06:ac:96:f2:e6:3c:41:be:4f:06:75:b7:
8f:9d:fb:39:8a:e8:64:e5:c2:d0:84:a7:7e:20:28:f1:ef:2e:
82:45:07:5b:8e:61:31:34:dc:6c:16:c7:d7:ac:a4:08:3d:75:
76:bc:e6:2a:8a:ca:59:56:b6:ac:68:a4:8e:4e:1a:27:71:63:
54:d1:8e:57:49:3b:25:93:3d:8a:d9:fc:78:6d:5a:57:60:e6:
c1:53:35:41:34:bc:54:db:98:81:a4:2d:76:aa:0c:d6:de:2e:
75:40:a8:73:19:e8:bd:48:78:ef:3b:eb:d8:af:36:d4:ee:31:
0a:59:2b:5c:c2:2a:34:07:49:af:6c:87:00:a3:0b:b6:52:cf:
60:f5:04:71:6a:d7:30:28:31:43:69:9f:35:28:2c:35:40:f1:
bd:3a:61:b5:a2:8b:a3:c9:d7:a7:83:f8:ba:af:5c:ba:62:99:
1f:1e:17:06:1a:90:93:71:0f:af:49:c3:bc:43:6d:cb:5b:ad:
47:6a:1c:b0:90:53:c1:ce:69:b9:5c:57:1c:17:67:29:c9:2d:
68:c5:db:f7:cb:ef:ba:7c:6f:eb:e8:cc:5c:8f:f4:71:3b:91:
d2:38:9a:a7:3f:4f:e8:46:6f:e2:54:8c:42:03:7b:fd:b9:e2:
30:c3:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org