Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/z8__35sBqEidfSNXtPN7rbGiNwI.roa
File: z8__35sBqEidfSNXtPN7rbGiNwI.roa (raw, json)
Hash identifier: mKiVCvm/HnOeckGfSghaPb2mdzGg238Ac5gu29R7sRY=
Subject key identifier: CF:CF:FF:DF:9B:01:A8:48:9D:7D:23:57:B4:F3:7B:AD:B1:A2:37:02
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 040C3760
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/z8__35sBqEidfSNXtPN7rbGiNwI.roa
Signing time: Sat 19 Feb 2022 11:51:36 +0000
ROA not before: Sat 19 Feb 2022 11:51:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 185.42.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67909472 (0x40c3760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Feb 19 11:51:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfcfffdf9b01a8489d7d2357b4f37badb1a23702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:63:00:fb:41:31:e2:67:80:b7:36:85:e1:
09:2f:b7:18:be:25:9f:3a:a3:b9:4d:0b:8a:fa:cb:
9d:08:72:1b:16:7b:93:cf:c9:60:cf:85:71:b1:d8:
f1:da:9f:b4:7c:c7:01:4b:e7:e5:8f:5f:98:21:bd:
98:99:b5:8b:44:8f:29:b8:52:7f:72:5d:95:bc:3a:
aa:9b:3d:1a:8c:ee:11:46:a4:e2:a7:8f:9a:d5:4a:
1d:36:93:b3:d0:15:00:67:47:96:07:7e:9e:0a:a5:
eb:99:2e:3d:4e:78:8d:5c:0c:e8:12:ef:61:f6:90:
4b:49:59:db:0e:3f:95:8a:71:87:3f:89:ad:10:7c:
95:93:e5:8c:26:fc:84:ba:c9:8f:dd:ef:64:18:6f:
f8:3c:d7:7a:db:f7:9e:28:85:69:05:4b:47:73:51:
f9:d0:66:76:23:79:57:b0:68:33:fd:ca:b3:ab:b8:
46:7d:b3:c8:8d:99:2d:12:a1:ef:04:6e:14:25:0f:
eb:34:f5:f1:06:8c:a9:f9:91:a4:fa:75:a6:90:ac:
46:71:cf:98:19:64:34:36:6c:79:ef:eb:48:52:cf:
b4:d1:c7:85:2a:c9:5a:8a:cc:f1:72:63:28:26:10:
12:9b:b3:3c:d3:d2:be:be:35:34:13:25:90:b1:ce:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:FF:DF:9B:01:A8:48:9D:7D:23:57:B4:F3:7B:AD:B1:A2:37:02
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/z8__35sBqEidfSNXtPN7rbGiNwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ad:3e:24:21:b6:fa:44:98:41:fb:54:39:e3:8e:21:49:3f:
ec:73:95:05:50:7c:96:ed:11:dc:4e:66:0d:a2:6d:08:47:69:
f3:22:46:05:41:0c:52:e8:f7:87:b7:ba:a8:fb:e0:3f:9e:c7:
81:95:49:b3:80:f8:f2:40:17:2a:67:a2:a6:cc:14:cc:3e:e7:
d1:70:dc:9b:65:cf:6e:47:ba:52:70:8d:91:bb:19:d8:43:dc:
bc:a6:17:a9:10:68:cc:64:aa:7f:2a:32:b7:e3:84:da:53:4e:
b2:24:08:f8:29:52:2d:d6:60:1e:3c:03:55:2c:2a:6f:29:b5:
61:4e:84:28:f5:6d:1c:15:fa:fe:43:03:91:89:43:95:c2:70:
86:1e:0d:d9:be:a0:95:2f:db:05:5e:28:cb:09:e6:0b:20:9c:
52:91:86:2e:dd:fb:e1:00:59:17:2a:a7:16:c1:76:0e:42:9b:
06:3a:7e:cc:b4:a7:89:4d:9f:82:8c:16:aa:de:63:e9:39:66:
53:63:9b:e0:9b:f0:85:c1:ed:43:96:cd:8c:36:5d:ed:4d:af:
dc:9f:a5:50:c7:88:0c:0f:2c:f7:34:c5:ac:3a:b8:32:84:10:
da:0a:ba:f3:14:83:0a:a5:4d:d2:fa:25:b4:82:d5:6f:e8:d9:
e3:04:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:51 2023 by rpki-client on console-fra.rpki-client.org