Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/n8pbyb3HuLSid_8LyFkAD2V79iY.roa
File: n8pbyb3HuLSid_8LyFkAD2V79iY.roa (raw, json)
Hash identifier: HFNPI4BdyzoaqPPejeMntWWBmDZRHNoDM9nduUQmV0Q=
Subject key identifier: 9F:CA:5B:C9:BD:C7:B8:B4:A2:77:FF:0B:C8:59:00:0F:65:7B:F6:26
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 023A6D3A
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/n8pbyb3HuLSid_8LyFkAD2V79iY.roa
Signing time: Sat 01 Jan 2022 15:01:45 +0000
ROA not before: Sat 01 Jan 2022 15:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212731
IP address blocks: 185.49.230.0/24 maxlen: 24
2a10:56c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37383482 (0x23a6d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Jan 1 15:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fca5bc9bdc7b8b4a277ff0bc859000f657bf626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:58:4a:4c:38:60:bb:11:58:56:f2:e5:8e:
50:ce:c8:d8:a9:5c:41:a8:93:38:e0:d2:98:d6:0f:
a0:f4:7d:99:ec:6f:41:7a:1f:76:06:18:5f:5b:87:
6e:a2:0b:86:e9:98:70:5b:23:28:c6:ef:7b:86:ed:
aa:aa:85:ac:a9:70:65:f4:fb:5e:a7:f8:d2:ce:97:
74:b3:0d:c8:d8:e2:87:fd:ab:05:3f:8a:ab:88:4f:
96:38:5b:81:21:60:aa:c4:b4:5e:45:4b:70:43:2a:
e2:61:6d:c0:ed:50:de:d9:b1:0f:1c:cf:e8:4a:aa:
c1:99:92:8d:12:1a:64:9c:3f:f2:e8:5f:e0:ce:13:
e1:bc:aa:39:41:35:67:51:aa:67:bf:03:08:13:d2:
cc:8c:8a:3d:71:58:8e:f1:c1:97:27:f8:95:f1:99:
f1:99:53:4b:d2:3e:7f:2a:70:f2:54:ae:41:96:38:
21:7c:f2:44:46:c3:23:0b:fa:8b:1a:ec:ec:71:f6:
cd:1a:25:ac:a6:70:7d:6b:78:72:6b:ee:57:47:49:
66:94:70:03:fd:78:26:06:03:64:8b:87:9b:e8:8f:
da:3b:09:1c:ff:e9:2f:bd:07:45:9e:51:5f:d4:7b:
fc:fc:87:66:c5:ad:ac:8e:a1:e5:c9:86:ce:5d:ae:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:5B:C9:BD:C7:B8:B4:A2:77:FF:0B:C8:59:00:0F:65:7B:F6:26
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/n8pbyb3HuLSid_8LyFkAD2V79iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.230.0/24
IPv6:
2a10:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
42:dd:56:e6:92:fa:8f:8e:a9:6e:7b:e5:42:85:28:58:aa:61:
25:d8:27:b5:46:d6:0b:19:2b:a2:88:17:c5:66:84:33:18:87:
d2:21:f0:a6:77:95:51:0c:05:53:5c:b7:12:c4:f2:40:e8:f7:
52:b9:76:07:21:c4:00:ce:30:0d:3e:08:0f:f1:bb:14:fe:18:
67:69:27:5c:fa:fa:26:61:b9:29:b2:96:b9:32:61:43:85:8d:
4f:1f:7a:da:df:21:cd:af:14:04:15:06:30:f8:8b:4d:84:da:
16:df:bc:2e:50:f1:e0:2c:90:2e:0d:28:e2:56:c6:df:b0:12:
ec:c3:ec:85:f0:72:03:34:0f:3b:48:32:e8:be:02:8f:1a:c7:
b6:fa:eb:87:80:a7:b0:86:6b:c1:50:27:b6:69:d5:d0:39:e9:
5c:64:7e:cd:bc:39:03:19:1d:9b:55:db:17:9b:45:a8:22:4c:
51:0f:1d:8c:08:13:b4:ec:cc:46:47:68:5c:a6:da:03:75:81:
12:9b:90:a9:07:1d:5d:ed:3f:bf:a2:3c:33:85:9f:13:5d:7f:
55:29:2b:21:b0:a5:f9:5b:18:fe:b2:9d:10:cc:9e:0d:0f:4f:
ad:27:a5:e6:44:67:dd:9f:c0:b7:67:a5:38:fc:b4:86:9d:11:
b5:cf:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:47 2024 by rpki-client on console-fra.rpki-client.org