Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8QdTVt8N2qKv4VEHiCSj_5kKSso.roa
File: 8QdTVt8N2qKv4VEHiCSj_5kKSso.roa (raw, json)
Hash identifier: ThEJ/xbrnNcsGpK/IcijF1GIZKxabE9ewI65M3oyIbE=
Subject key identifier: F1:07:53:56:DF:0D:DA:A2:AF:E1:51:07:88:24:A3:FF:99:0A:4A:CA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0182A6164BE386950D70633FC7CB6E3C3554
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8QdTVt8N2qKv4VEHiCSj_5kKSso.roa
Signing time: Tue 16 Aug 2022 09:57:35 +0000
ROA not before: Tue 16 Aug 2022 09:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60798
IP address blocks: 185.243.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:16:4b:e3:86:95:0d:70:63:3f:c7:cb:6e:3c:35:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 16 09:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1075356df0ddaa2afe151078824a3ff990a4aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:7d:34:3f:61:ab:ef:a6:64:f4:18:89:f9:
4a:5c:ff:11:e1:6d:35:03:85:09:3d:cd:b6:30:ad:
13:dc:8d:f8:d0:1f:0e:76:48:a9:5a:a1:51:7d:31:
02:4e:9d:56:ce:be:35:ee:5f:1b:d1:68:ff:d1:11:
05:af:90:8f:50:6e:42:85:19:ae:de:f8:f6:9a:73:
dc:a5:45:f6:98:68:0a:55:25:9e:fd:12:3f:5a:77:
95:71:d9:ff:0c:97:48:09:f4:5e:1c:6c:33:0d:5f:
cc:91:33:04:42:31:d0:0f:47:64:d9:f6:fc:75:4c:
f5:ad:27:8d:b2:bb:3c:0c:49:b7:57:92:9a:15:71:
08:a6:f2:59:e5:52:23:c1:7c:9f:ce:0f:a7:a8:02:
f9:b2:b5:40:36:a7:4e:f3:5d:d4:6f:b1:f6:98:43:
99:a4:e4:29:5e:8e:40:89:1b:cd:99:10:80:0b:03:
6e:78:67:65:86:32:d5:5a:5d:53:11:29:f2:53:33:
01:83:09:4b:a8:6b:c9:2f:de:27:8a:b5:e8:8e:ee:
a1:b2:54:1f:29:03:b7:6c:96:df:d6:4f:7b:72:27:
ca:32:a4:02:f6:57:c2:2a:74:e0:45:53:df:85:64:
ee:aa:04:23:1b:b0:8e:a0:08:d4:b9:d7:6e:37:ae:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:07:53:56:DF:0D:DA:A2:AF:E1:51:07:88:24:A3:FF:99:0A:4A:CA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8QdTVt8N2qKv4VEHiCSj_5kKSso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:bd:f1:e7:a4:14:a1:7e:e4:73:9f:19:60:be:63:22:5f:ea:
08:d0:2d:1d:0b:a2:bb:c6:5a:01:dd:81:ed:42:83:87:ba:49:
6a:17:9e:b3:57:63:08:d0:82:c9:6a:23:43:d9:de:39:e4:c1:
06:c6:57:f6:f4:08:e9:d6:b1:50:eb:3c:b8:ad:70:ff:98:66:
51:80:da:31:f5:de:67:1c:8a:56:03:1a:84:7b:2d:d7:b4:e6:
d9:a9:87:62:54:1b:9b:43:43:71:95:ef:de:4e:a9:9a:62:e8:
d0:c8:2e:06:c7:5c:ec:47:d6:60:7c:39:3d:c8:4e:1d:64:d3:
5a:85:74:02:2e:50:52:1b:0e:34:56:b9:99:cd:40:bb:ae:e0:
38:13:12:81:78:b0:71:c2:29:a3:b0:42:0e:9f:cd:c7:6d:35:
0e:85:54:d6:2d:e9:7e:de:27:1d:e6:d2:98:df:88:c4:c4:d9:
73:f5:64:45:a6:7d:a4:26:95:33:29:20:71:51:ca:d1:a3:39:
e8:c0:63:2c:48:1d:db:a4:0b:67:95:ee:b8:c9:e2:1b:0f:8a:
20:2c:52:cc:f6:10:11:0c:ec:a6:87:35:5b:2e:21:ac:74:34:
17:d1:e8:db:98:92:2d:12:c5:ca:11:66:39:54:b2:52:f0:89:
d4:d1:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org