Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/O9TckfStUynkJ_H3RPN0M07_72Q.roa
File: O9TckfStUynkJ_H3RPN0M07_72Q.roa (raw, json)
Hash identifier: ve/WWuwY9NSYh1C9zIshmqRxq+S9FhsyELcWx8T0/lc=
Subject key identifier: 3B:D4:DC:91:F4:AD:53:29:E4:27:F1:F7:44:F3:74:33:4E:FF:EF:64
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 0183895404B4FB510AA9923390AC55665DB5
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/O9TckfStUynkJ_H3RPN0M07_72Q.roa
Signing time: Thu 29 Sep 2022 12:58:48 +0000
ROA not before: Thu 29 Sep 2022 12:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.232.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:54:04:b4:fb:51:0a:a9:92:33:90:ac:55:66:5d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Sep 29 12:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd4dc91f4ad5329e427f1f744f374334effef64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:a2:d6:e9:d5:90:41:a1:3e:2b:4c:b6:40:
a6:83:d7:61:01:54:bc:ea:3f:f5:06:72:7d:f9:7e:
93:fa:ff:64:94:d5:75:d7:a8:77:98:7c:13:67:ab:
90:a3:c7:cf:f9:de:9d:e5:87:e5:3c:ba:ba:73:40:
59:d4:1d:2b:d7:c2:76:ca:68:a3:cf:8c:eb:23:be:
a1:27:42:0a:99:25:a7:7e:ad:9b:b9:01:99:27:0e:
40:1f:8d:2d:34:7e:cf:bf:72:5f:2b:a4:ad:38:8c:
98:8f:eb:7f:12:dd:8c:1d:d9:e7:b0:b3:39:d7:f0:
09:40:11:7f:c4:e4:ae:ae:80:2f:d9:80:04:5d:2e:
f2:5f:26:ec:68:e0:a1:6f:8d:e6:9c:bd:b3:71:7b:
75:17:5d:ac:9b:e1:ea:f9:9f:fa:ff:7c:80:11:03:
6b:2c:ea:44:86:b1:6a:2b:22:18:e1:02:56:7b:3f:
6e:4e:6a:57:17:7e:e0:5b:c5:3d:ac:d7:2d:77:f3:
c1:a3:6d:98:2f:64:c9:6b:f9:f9:3e:ad:a8:86:5b:
26:cd:b7:93:c0:7e:bb:ef:08:5f:3e:9d:dd:fa:85:
cc:f6:14:a1:43:03:25:33:d7:64:3e:11:08:92:5c:
f4:c5:ae:8c:38:7c:f3:8b:8d:e4:ac:e1:8a:40:d2:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:DC:91:F4:AD:53:29:E4:27:F1:F7:44:F3:74:33:4E:FF:EF:64
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/O9TckfStUynkJ_H3RPN0M07_72Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a1:d3:5f:52:3c:43:72:98:55:1c:df:1b:f4:7d:54:c0:0f:
e3:4f:d7:ba:50:9f:94:13:2e:95:55:79:44:cf:12:7f:2e:bc:
7e:b0:fe:07:fc:d2:91:9b:fe:3a:1d:1a:44:62:17:0e:1e:d6:
0b:49:c1:b3:5d:e5:b5:3f:3f:00:98:ed:2b:e1:2d:55:fb:5e:
1d:3a:4d:4c:f8:e9:41:1e:57:6b:04:c3:9f:d7:9e:9c:fd:1b:
80:18:70:71:91:c9:4e:42:29:21:6e:4f:78:b7:6c:7d:c9:1b:
17:32:d9:65:be:fa:69:2a:3b:4f:cb:9b:f0:ff:30:58:c1:7e:
67:17:21:b5:87:51:b4:a0:08:03:5d:a9:81:d0:7c:f2:12:4a:
c5:b1:4b:f1:31:0b:f7:ef:cb:bc:4c:ff:fa:1b:97:ef:14:7d:
11:28:42:52:e7:69:23:4c:83:4c:a0:a5:ce:7e:91:ac:72:96:
49:9e:e0:b4:a2:12:23:df:e9:8f:86:51:57:fe:e0:c4:41:4e:
72:23:11:6d:89:de:85:ef:af:97:1a:8d:d0:4c:e7:d3:25:b0:
64:5e:82:95:70:45:c7:64:a8:d3:e2:76:db:01:f7:ef:65:51:
8b:d6:43:9b:17:04:5e:44:37:49:5d:72:21:59:c6:68:f0:07:
d0:6e:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org