Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/cKEyvxWhjrqNzoqEGTozKb8UlIw.roa
File: cKEyvxWhjrqNzoqEGTozKb8UlIw.roa (raw, json)
Hash identifier: V5bJiCLSuB2+yte3pHjHhHrOAMdcNxNgIZ3HT3au94g=
Subject key identifier: 70:A1:32:BF:15:A1:8E:BA:8D:CE:8A:84:19:3A:33:29:BF:14:94:8C
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 08E14A40
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/cKEyvxWhjrqNzoqEGTozKb8UlIw.roa
Signing time: Mon 30 May 2022 08:06:13 +0000
ROA not before: Mon 30 May 2022 08:06:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208617
IP address blocks: 185.194.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148982336 (0x8e14a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: May 30 08:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70a132bf15a18eba8dce8a84193a3329bf14948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:5e:e7:aa:c4:55:11:2a:de:69:07:72:88:
bc:ef:07:b6:80:56:2b:51:26:cc:57:67:76:de:17:
f7:49:0c:c4:60:fd:ae:22:fe:36:35:d9:92:bb:0a:
a4:96:0a:75:5d:15:5c:76:41:9d:7d:fd:9b:6f:86:
8c:6d:0c:21:5e:c8:e7:5e:40:82:b5:da:7a:d0:4f:
a3:cb:5c:6e:78:2b:26:94:16:f2:e2:91:fa:64:71:
11:2e:d5:d2:a2:b1:45:bf:5f:79:b2:61:02:29:d7:
93:c4:98:9a:50:48:88:82:cc:73:18:4e:d4:9f:d2:
2f:2e:21:04:df:50:23:3f:4a:2b:f8:c2:8f:ac:6a:
be:e9:f6:82:8c:0d:f6:f3:75:72:b3:a9:c3:06:39:
3e:a1:81:39:0a:4b:3b:3f:6b:a2:73:c8:ad:3c:10:
fc:b4:ab:83:3c:18:aa:d4:5b:3b:e9:e5:c7:06:88:
d3:a0:2c:e2:f5:b2:93:a1:1c:7f:04:b6:99:3e:fd:
f5:ca:c2:fc:ef:89:53:0a:d1:f0:c9:84:ff:36:bd:
31:c5:4c:03:6d:10:71:6e:35:5f:8b:31:60:a9:1e:
c1:6d:01:a6:10:c7:b6:53:f5:58:8a:28:ca:8e:a5:
e0:70:41:80:ce:d5:c1:f2:e7:a1:77:d0:a2:ea:dc:
ce:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A1:32:BF:15:A1:8E:BA:8D:CE:8A:84:19:3A:33:29:BF:14:94:8C
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/cKEyvxWhjrqNzoqEGTozKb8UlIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:99:4c:c6:f0:bc:d5:ad:c0:f8:83:02:0d:11:f4:d3:fb:64:
04:d9:bc:bf:dc:7e:ba:48:d7:b3:c5:19:19:20:6e:5b:3f:f6:
3a:14:a3:7f:0d:84:b3:a5:11:39:ee:7d:4c:eb:1e:54:71:a5:
32:17:41:7c:f2:46:4b:2a:fc:c2:18:6b:b9:e9:02:ed:f2:b9:
03:48:fb:8f:d6:c3:c0:17:b6:94:c4:a8:d9:59:2a:7c:75:21:
82:f9:98:83:a9:1a:4d:ca:04:06:e6:2c:2f:ac:88:27:44:8c:
e6:d3:6f:8c:af:88:6b:95:be:08:2a:a3:5c:f0:03:46:e5:5e:
fa:10:4b:77:2f:f2:ba:50:20:ae:6c:e1:c8:10:9a:4a:2a:72:
58:29:46:97:0c:38:43:b3:7c:a6:27:fa:1e:36:bc:0f:a7:73:
65:7e:12:ab:3f:75:67:66:16:34:92:c8:31:94:b8:2e:22:79:
c2:ac:13:e1:c5:89:31:51:3b:36:b9:a8:ac:fd:74:d1:4f:d4:
4f:e7:89:85:0a:a8:c4:69:17:a3:43:5a:95:19:89:55:4a:3f:
6f:91:28:04:ef:ea:ab:70:74:f1:c2:53:28:2c:cb:ca:14:d9:
a1:02:47:ef:c1:6c:21:a8:97:f4:e3:c1:c1:2f:b4:bd:77:21:
cd:d9:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:44 2024 by rpki-client on console-fra.rpki-client.org