Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9zF7JmYkxP2TYHI3oQyQV8TWfcg.roa
File: 9zF7JmYkxP2TYHI3oQyQV8TWfcg.roa (raw, json)
Hash identifier: 1UoSVZrqSrPU8YIuKHMRQ5tLNJaKO1SW1KL1Bw0JiRg=
Subject key identifier: F7:31:7B:26:66:24:C4:FD:93:60:72:37:A1:0C:90:57:C4:D6:7D:C8
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 198887C6
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9zF7JmYkxP2TYHI3oQyQV8TWfcg.roa
Signing time: Sat 01 Jan 2022 09:56:59 +0000
ROA not before: Sat 01 Jan 2022 09:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199487
IP address blocks: 185.9.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428378054 (0x198887c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 09:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7317b266624c4fd93607237a10c9057c4d67dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:61:e1:61:de:b2:c1:f8:29:e7:4d:73:44:
1f:60:dc:f8:33:6d:a9:ab:b7:e6:9f:95:91:23:ea:
7e:b7:f8:01:e0:2e:2a:15:09:39:c2:20:ba:d2:4a:
ea:bd:54:bf:15:f6:12:c8:76:6e:bd:a5:cc:69:bc:
58:70:18:32:8d:06:f5:0f:91:30:a9:05:a3:92:82:
7f:98:8f:74:bd:d0:33:39:8c:39:3e:fe:95:03:b9:
55:bd:29:a7:17:b3:81:11:5d:42:ff:90:16:2a:c2:
58:dd:a4:e6:00:9f:35:5e:6c:da:5d:18:6e:ed:0d:
6d:3e:a2:9d:d7:7f:af:b5:4f:d5:6f:91:94:34:fd:
f4:23:1d:62:1b:25:c1:b0:c4:0e:00:f5:b4:7c:ba:
04:15:21:1f:73:3f:cb:46:65:d2:cc:b8:c1:c8:bc:
53:73:3c:97:dd:b1:a0:b5:38:e2:dc:34:cd:02:29:
a0:3b:06:23:04:44:ab:a0:4c:8c:e6:fe:9a:2b:a7:
5c:6b:d0:f3:ff:25:c9:91:aa:02:2a:e5:3f:87:45:
6b:5d:31:e6:fe:f7:16:9e:ca:20:6d:d9:0e:be:f5:
8b:13:13:e5:46:ad:13:33:f0:87:ed:c8:93:60:34:
b2:0c:c0:cb:71:49:1b:3a:50:c2:2a:2a:9d:d0:70:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:31:7B:26:66:24:C4:FD:93:60:72:37:A1:0C:90:57:C4:D6:7D:C8
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/9zF7JmYkxP2TYHI3oQyQV8TWfcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:17:b7:11:00:6f:40:3e:6e:df:aa:ed:24:f4:54:67:43:61:
23:8d:80:87:88:52:e5:3e:f9:cf:51:ac:58:bc:c6:24:59:15:
00:ec:5b:9f:56:85:de:44:b2:2a:00:4f:9d:61:e3:c0:2d:e7:
ef:64:61:88:6f:50:d3:db:c4:f9:d8:ce:7e:66:d6:6d:17:cc:
b4:3b:b9:95:71:cd:f3:b2:7c:5a:09:b6:02:c4:2a:46:4c:c0:
bd:8a:cd:66:11:95:1a:ac:eb:d4:c2:85:b7:4a:c0:af:8d:34:
df:bc:94:2b:05:5a:2f:cf:df:9a:b4:9d:0e:4c:ba:a9:39:61:
db:b7:34:d5:dc:3e:08:f8:e7:7c:70:1c:c2:03:b4:c1:b3:57:
f7:0f:03:2d:a5:11:ff:b4:a0:e5:b3:8b:56:23:94:dc:99:91:
ad:18:69:8a:2b:2e:2f:5d:e3:c2:0f:42:d6:6c:93:dc:a4:e4:
47:e8:f1:ed:ce:20:4e:57:25:e6:c8:62:0b:fa:14:81:ff:c4:
3f:34:f3:5d:2d:b8:91:18:c6:45:12:a4:97:ec:57:24:5f:bf:
bb:80:04:42:e5:5b:bd:c3:18:af:13:51:89:96:ab:9a:23:fb:
9c:9d:6f:a9:4a:e6:ac:aa:9e:b8:bb:a5:66:c9:74:df:c8:26:
b1:e0:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org