Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/izSOvrhKIXaqQhd_dxByApWTcPI.roa
File: izSOvrhKIXaqQhd_dxByApWTcPI.roa (raw, json)
Hash identifier: QxeRo/fr9ewlNyxiHonCd4ZittpAIKDxW5G3BrubXMA=
Subject key identifier: 8B:34:8E:BE:B8:4A:21:76:AA:42:17:7F:77:10:72:02:95:93:70:F2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 08FF2D20
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/izSOvrhKIXaqQhd_dxByApWTcPI.roa
Signing time: Sat 01 Jan 2022 13:07:21 +0000
ROA not before: Sat 01 Jan 2022 13:07:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203244
IP address blocks: 185.140.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150940960 (0x8ff2d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Jan 1 13:07:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b348ebeb84a2176aa42177f77107202959370f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:58:0b:63:d6:be:38:6d:92:ad:ec:29:0f:
40:dc:d3:fd:32:15:34:b5:50:d1:05:65:d7:22:08:
13:9d:9b:d1:f6:b0:bd:e5:6f:9a:2d:e6:d2:3c:af:
d8:b7:0f:b7:ea:70:c6:37:d2:d4:09:e7:08:eb:39:
cf:32:9c:26:8b:c6:99:af:20:28:41:62:0e:f1:1a:
04:d6:33:15:06:0d:80:9d:59:b4:63:42:0c:f4:9c:
f0:cf:5f:ae:78:5a:37:1d:1b:f9:00:0a:7b:6d:3b:
85:60:ed:3f:5c:df:b7:00:20:7d:75:0d:f0:fd:0d:
ad:49:4e:49:36:04:c0:3d:90:82:fd:b4:a0:02:f5:
f6:ba:d9:f5:65:6d:39:9a:c5:76:1e:1b:a2:7f:15:
4f:d2:89:95:69:94:12:c5:c0:03:0f:61:c1:ef:82:
86:58:e3:88:0b:d9:b2:08:74:96:d5:3f:c8:59:69:
76:ff:81:d8:d1:14:cd:9a:c9:22:47:77:fb:dd:dd:
0e:6d:c2:d5:f9:89:ee:91:18:72:84:4b:f1:26:95:
c6:d9:70:cb:a6:3f:b3:40:c1:35:28:7e:d0:0f:2a:
12:3a:4c:17:bd:0a:c3:64:30:c0:cc:56:4f:e5:b2:
0e:de:44:04:4b:8c:5d:46:3c:17:1e:e0:ba:ec:19:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:8E:BE:B8:4A:21:76:AA:42:17:7F:77:10:72:02:95:93:70:F2
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/izSOvrhKIXaqQhd_dxByApWTcPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.216.0/22
Signature Algorithm: sha256WithRSAEncryption
79:29:3f:e4:b8:77:1a:32:0c:14:92:e2:5f:df:6f:2d:6e:0c:
50:46:39:f9:a7:ac:3f:1a:f1:9a:8a:06:8e:d8:bd:fc:b2:75:
c8:36:69:34:dc:07:f3:c0:b3:4d:09:b2:ab:75:f1:ab:e9:01:
c4:c8:7b:30:59:f6:16:47:7f:6b:f5:ec:5c:e3:dc:e6:3f:77:
da:74:b3:26:95:05:27:8a:6e:d0:2a:fd:16:7c:19:4f:49:cf:
43:28:62:47:60:bc:71:27:5e:05:09:39:f6:da:14:2d:45:12:
56:cf:f6:cb:fa:0c:84:94:39:8b:18:39:da:b6:94:5c:37:3f:
63:18:20:15:6a:d4:a6:20:b3:95:d1:86:bc:3c:b0:b8:94:e7:
54:9f:9d:29:ac:87:05:51:54:dc:17:88:19:07:c3:eb:53:76:
4e:fa:4f:1b:41:21:26:05:60:56:74:14:84:4a:58:09:a5:04:
e0:21:7b:73:07:3d:68:58:62:46:27:79:f0:a6:9a:50:74:fd:
d4:e4:74:6e:bb:09:61:40:41:98:df:a8:eb:52:b5:8b:e4:5d:
ab:67:e9:66:7a:d2:21:f7:67:49:46:83:56:b8:c4:c3:a8:c1:
95:87:a8:67:85:76:80:10:92:74:d1:48:00:3d:98:f9:2b:e2:
f0:62:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:43 2024 by rpki-client on console-fra.rpki-client.org