Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CpY7xLBQIiHS3wv0pYdHQK7Htis.roa
File: CpY7xLBQIiHS3wv0pYdHQK7Htis.roa (raw, json)
Hash identifier: OyxZylKgXfIxU7p5lrDeBKd3cgtODDdLRFCZS6F2pWg=
Subject key identifier: 0A:96:3B:C4:B0:50:22:21:D2:DF:0B:F4:A5:87:47:40:AE:C7:B6:2B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 07F19BD3
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CpY7xLBQIiHS3wv0pYdHQK7Htis.roa
Signing time: Thu 02 Jun 2022 10:19:20 +0000
ROA not before: Thu 02 Jun 2022 10:19:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.209.140.0/22 maxlen: 24
185.83.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133274579 (0x7f19bd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 2 10:19:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a963bc4b0502221d2df0bf4a5874740aec7b62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:b8:2d:f6:c7:93:22:d0:5f:02:9a:d4:bb:
c7:50:02:f4:98:e2:64:a9:72:d8:ef:39:ea:6d:aa:
70:15:fa:17:62:80:94:de:85:a1:93:c1:01:05:61:
3d:22:2c:f6:0f:09:55:b9:fa:fb:3a:97:fd:60:25:
ec:cb:25:9a:cd:34:e9:71:f5:9a:89:16:b3:83:2e:
30:93:3b:a6:e0:64:52:87:b6:30:f4:31:e8:93:45:
91:bf:7e:34:cd:5d:b6:8b:d3:ac:28:24:8f:a9:59:
ba:1e:10:25:8f:0b:68:52:27:b9:b4:c7:e7:98:1e:
36:c6:7c:bc:15:5d:6e:96:c2:57:f6:60:28:0a:f0:
65:68:bf:dc:19:e6:20:d5:06:77:6f:23:1f:86:94:
d8:f8:00:b6:8c:ec:06:35:d7:3a:e7:74:4d:b5:6c:
84:5c:58:6b:8e:34:2f:b4:3c:0c:17:87:ac:27:87:
29:6c:92:e4:1f:79:6c:3a:bb:9c:f0:21:c8:25:8b:
8a:59:26:02:df:d1:77:ce:5a:32:71:2c:2d:fc:57:
bc:c4:72:97:24:ec:24:e3:b0:6b:b8:26:fc:de:67:
39:ec:8f:06:10:15:2f:c8:88:b1:b5:22:6e:f5:9b:
2a:6c:25:5d:3f:af:4b:6f:da:10:9c:01:3d:41:6f:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:3B:C4:B0:50:22:21:D2:DF:0B:F4:A5:87:47:40:AE:C7:B6:2B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/CpY7xLBQIiHS3wv0pYdHQK7Htis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/22
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:2e:84:94:13:16:f9:a8:83:be:0a:66:28:6a:28:5f:d7:33:
5e:fc:f2:05:80:a7:28:4c:7f:34:75:ec:a4:73:27:9c:66:10:
d6:4f:77:5d:33:84:4d:f8:2e:74:99:a6:73:ee:5d:7b:dc:4a:
73:70:7e:50:13:4a:09:7d:a6:85:ec:b2:ef:62:b3:25:59:45:
f7:40:a4:7d:b4:9d:25:3f:44:08:29:7b:70:83:08:2d:ef:b3:
1d:02:f5:04:bc:1f:a3:95:4c:96:be:cd:94:84:17:f0:73:03:
ac:04:79:a1:56:e6:c3:b8:f1:24:c0:5b:b7:70:24:ca:bc:0e:
cf:9c:b5:10:49:75:21:76:15:c9:a2:f6:5b:2f:6e:11:42:62:
fb:92:5c:c4:26:57:51:04:5a:6b:cd:fe:fb:af:10:df:1f:49:
b0:06:f4:5f:8f:5b:d8:b7:0c:3e:c8:49:fa:ec:e2:ab:72:f6:
8a:6a:de:49:ac:cd:a2:42:40:75:9c:be:a1:62:f8:66:ae:ae:
65:31:70:10:45:db:0b:d3:c0:d2:c1:ac:38:23:53:47:63:08:
3e:99:97:0a:a0:1d:aa:19:1f:dc:d1:50:a1:08:2d:ed:19:95:
42:98:e0:03:9c:eb:99:0d:60:ca:b0:12:81:5f:71:a7:cd:b3:
7c:08:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org