Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4Q2OMKZUOWFMI42crbts1GLrXEg.roa
File: 4Q2OMKZUOWFMI42crbts1GLrXEg.roa (raw, json)
Hash identifier: IgrR5toM/SXhfSvU11CQ13PQGXmbZWoN3XiHGMsy2Bw=
Subject key identifier: E1:0D:8E:30:A6:54:39:61:4C:23:8D:9C:AD:BB:6C:D4:62:EB:5C:48
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 0183378CB0991419BA364F3AC31CB398AB2F
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4Q2OMKZUOWFMI42crbts1GLrXEg.roa
Signing time: Tue 13 Sep 2022 15:51:50 +0000
ROA not before: Tue 13 Sep 2022 15:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 185.18.120.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:8c:b0:99:14:19:ba:36:4f:3a:c3:1c:b3:98:ab:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Sep 13 15:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e10d8e30a65439614c238d9cadbb6cd462eb5c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:70:f9:fc:e5:34:df:23:76:67:dc:21:e9:
bb:79:9a:cc:9e:d0:2e:0e:f5:ce:cc:66:b9:40:d6:
02:64:c4:25:d0:7c:80:a7:a9:8c:af:85:93:73:cb:
f1:ff:6e:28:3e:48:04:ea:c2:5d:0c:15:b4:1b:58:
c7:0e:1d:4a:dd:46:84:3d:da:87:de:6b:cc:d1:8a:
eb:a1:ee:5c:54:ba:29:9e:ee:d2:2a:95:36:06:66:
e8:5a:9f:5d:f6:22:5e:bc:d8:0c:c1:0b:4f:e5:83:
d4:6a:65:28:8b:b0:02:d9:af:64:c8:4f:9c:2a:d6:
ba:fb:a0:f8:15:6a:47:6b:0b:6e:6e:14:ff:f6:27:
d2:84:69:bb:45:7b:50:dc:8a:7c:df:6c:64:14:b4:
35:98:29:b0:f3:2f:ae:8c:8f:d2:46:db:1f:57:24:
40:24:e9:98:3b:76:9b:68:70:49:15:b0:f4:83:66:
ca:39:ba:5f:90:8d:ab:3f:a4:4b:60:07:fa:4f:6d:
03:2a:f2:a0:13:b0:95:44:7f:84:24:21:ea:47:7a:
01:f8:6d:36:36:7d:43:e0:a5:82:63:93:44:59:cd:
d1:1e:39:1e:26:15:f7:e8:34:e4:32:9c:03:bd:00:
52:97:1a:1b:43:63:85:c4:bb:ad:61:b4:b8:d1:46:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:8E:30:A6:54:39:61:4C:23:8D:9C:AD:BB:6C:D4:62:EB:5C:48
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/4Q2OMKZUOWFMI42crbts1GLrXEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.120.0/23
Signature Algorithm: sha256WithRSAEncryption
81:19:49:9c:14:1d:4c:31:be:7b:51:d8:ae:eb:ff:a8:9b:bf:
e9:5c:51:f2:20:c2:0e:ad:40:f9:57:d7:09:07:3a:bf:22:51:
0e:95:06:6a:db:4e:77:56:62:a2:e0:c0:97:6c:c1:c5:3b:2c:
75:b1:c9:4f:02:8d:c3:c8:eb:d2:ad:69:8f:63:98:20:9c:a9:
4b:c4:f7:39:11:9d:ce:02:ed:a8:79:9b:61:36:50:c4:43:2a:
5e:52:af:24:45:0f:f2:d0:f4:87:c9:5d:c6:14:a3:74:bf:41:
77:4a:d2:0e:d3:5a:b3:6d:df:95:ac:e6:24:6e:0e:26:8b:51:
08:a0:4d:87:80:e3:59:e7:0a:d7:3e:ad:29:06:3f:d8:c9:7f:
1c:0f:f5:3e:48:05:c6:fe:54:99:f2:f4:d9:70:ad:65:1f:f9:
8d:7c:e5:f8:c9:d3:c2:30:91:eb:58:d6:63:47:2b:6d:75:5f:
10:7c:69:47:35:bb:f3:63:7f:80:87:d5:c6:cb:d7:86:4d:13:
30:f1:2d:98:39:11:9e:5e:7f:5b:4a:3a:5e:05:f8:42:10:da:
73:81:1b:c1:19:35:1f:7a:b3:6d:b6:01:8c:c4:87:56:23:1c:
dd:28:e0:5d:3e:1d:24:62:17:67:55:f1:14:d3:8e:fa:fc:59:
a6:06:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:24 2024 by rpki-client on console-fra.rpki-client.org