Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b8b557-1c44-45cc-97b8-dd872c6204ac/1/2NYaQkTxwOrtZzs4khFBpXehx3M.roa
File: 2NYaQkTxwOrtZzs4khFBpXehx3M.roa (raw, json)
Hash identifier: 8aLXZGt5t6wRQN8JiIpXcJ2znyqfvn5rHtVlf14T+Xg=
Subject key identifier: D8:D6:1A:42:44:F1:C0:EA:ED:67:3B:38:92:11:41:A5:77:A1:C7:73
Certificate issuer: /CN=ddff067294eaaa45051beab56c6ff31d4a3c8b4d
Certificate serial: 01048D19
Authority key identifier: DD:FF:06:72:94:EA:AA:45:05:1B:EA:B5:6C:6F:F3:1D:4A:3C:8B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f8GcpTqqkUFG-q1bG_zHUo8i00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b8b557-1c44-45cc-97b8-dd872c6204ac/1/2NYaQkTxwOrtZzs4khFBpXehx3M.roa
Signing time: Sat 01 Jan 2022 10:58:35 +0000
ROA not before: Sat 01 Jan 2022 10:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.252.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17075481 (0x1048d19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddff067294eaaa45051beab56c6ff31d4a3c8b4d
Validity
Not Before: Jan 1 10:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8d61a4244f1c0eaed673b38921141a577a1c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:e7:6c:33:4b:fb:6f:4a:e7:29:3b:c7:9e:
32:5c:3b:78:31:b9:73:6f:2a:c5:40:52:12:7f:ff:
d6:b6:f6:bc:dd:d2:42:90:08:09:4b:a1:5b:a2:f6:
8c:15:2f:54:69:c2:6d:8e:5e:c9:d4:22:cb:76:f1:
6c:a3:d7:1b:0b:57:27:5a:45:5c:8f:09:47:eb:65:
6e:ec:fc:66:e5:9e:7f:e4:ec:af:5c:ae:c7:63:e6:
58:05:ed:c2:0a:1f:96:cd:30:2d:2b:c5:b2:06:76:
95:15:4d:f9:8f:61:8c:3c:9d:3d:11:9e:56:e2:a6:
f0:aa:dc:a8:c9:24:d3:48:25:d7:b5:6d:d4:40:d7:
82:98:01:d4:98:b0:75:2c:8b:c1:7d:9e:7b:c6:47:
8b:e9:ee:46:a2:ed:17:9d:6c:e4:ea:e7:52:d3:f0:
c0:26:0c:2e:81:de:4b:9d:e0:d4:2f:e6:fa:a6:16:
7f:e7:9b:c9:4c:bb:6b:41:95:df:7b:ae:41:f3:70:
a6:15:5d:2e:37:1f:48:1d:fc:c2:ab:6b:14:01:59:
c8:37:2e:95:b7:0a:aa:3e:28:b0:74:68:5d:3b:0d:
5e:23:fe:a1:89:a9:ca:2e:4e:17:e8:2b:6f:30:aa:
42:cd:2e:07:92:4a:1f:b0:01:8e:42:98:fe:9e:6f:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:1A:42:44:F1:C0:EA:ED:67:3B:38:92:11:41:A5:77:A1:C7:73
X509v3 Authority Key Identifier:
keyid:DD:FF:06:72:94:EA:AA:45:05:1B:EA:B5:6C:6F:F3:1D:4A:3C:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f8GcpTqqkUFG-q1bG_zHUo8i00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b8b557-1c44-45cc-97b8-dd872c6204ac/1/2NYaQkTxwOrtZzs4khFBpXehx3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b8b557-1c44-45cc-97b8-dd872c6204ac/1/3f8GcpTqqkUFG-q1bG_zHUo8i00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.208.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:02:ec:24:d3:ca:04:23:56:7d:36:41:30:3e:51:06:81:
34:e9:b8:3e:4b:cb:27:39:01:ee:93:57:6f:61:f7:9a:45:fb:
5c:0f:51:11:fc:4a:c7:86:b9:a7:98:53:65:8b:28:03:41:d2:
13:e0:f3:bc:54:bf:12:51:62:1f:f4:67:15:e3:05:96:a2:15:
87:be:af:3d:50:50:26:1a:4d:12:05:25:3a:a7:72:fe:19:4d:
03:a7:9b:fe:93:51:9f:ee:39:c6:43:e0:6c:ce:01:3a:a1:c2:
59:33:8b:69:5a:6b:42:6d:56:39:b2:bc:6b:64:40:2e:1b:d3:
b4:75:70:c9:8d:1b:51:ad:17:74:ca:d3:19:4d:0c:ee:dc:59:
d1:d2:38:b8:57:17:44:57:d6:5a:2d:56:f8:d8:65:fa:0e:f7:
2d:ed:8c:21:1d:b8:e1:e8:0a:20:72:77:32:ce:c8:65:14:51:
c5:8e:d3:ce:e1:cc:e8:be:59:d9:e8:bf:71:b1:3a:0a:90:61:
65:ae:9d:d3:5d:7b:bb:05:94:e4:4e:e8:67:13:20:e0:dc:21:
35:c0:f0:a6:b6:56:2e:4c:28:ad:13:f9:cf:78:b7:3c:d2:ee:
6a:62:98:31:b1:63:b8:4a:f0:e8:d0:f5:60:c7:28:f8:05:bb:
5c:dd:ed:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:44 2023 by rpki-client on console-fra.rpki-client.org