Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-C4o9lVZpiib0n_55JPG5vCBl30.roa
File: 1-C4o9lVZpiib0n_55JPG5vCBl30.roa (raw, json)
Hash identifier: xfTmyNzYjEmn52nsTwZkO3nNlefsnOSNqaf9Bc7vlEw=
Subject key identifier: F8:2E:28:F6:55:59:A6:28:9B:D2:7F:F9:E4:93:C6:E6:F0:81:97:7D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC76D4E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-C4o9lVZpiib0n_55JPG5vCBl30.roa
Signing time: Sat 01 Jan 2022 03:02:33 +0000
ROA not before: Sat 01 Jan 2022 03:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207508
IP address blocks: 185.254.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180841806 (0xac76d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f82e28f65559a6289bd27ff9e493c6e6f081977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:17:1d:44:22:a1:4f:56:88:98:6c:c4:70:
f3:ba:00:98:a5:94:13:87:74:94:8b:af:b6:18:28:
7c:2f:dc:9f:a3:3f:17:8a:b0:e6:99:34:3e:50:bd:
9c:d7:4c:06:18:31:33:20:bc:fd:25:8f:b7:c1:d9:
c8:74:7d:16:29:b6:33:8e:15:6f:56:5f:63:6d:1c:
df:64:9e:9d:82:16:24:67:60:df:df:bc:b1:71:bd:
fb:0f:5c:52:66:e4:f3:d6:e4:04:36:b9:e5:f5:09:
90:fd:bd:79:76:15:70:82:69:4d:ec:09:51:d5:d0:
ee:a6:3b:c5:3c:1d:18:b9:93:1e:7c:7b:bf:5d:92:
e3:26:c5:05:95:87:6a:a8:b0:42:d8:14:99:f9:e7:
d0:d2:60:91:b0:12:11:9b:8e:e3:59:f6:8d:e4:db:
a1:01:fd:8c:4d:d9:48:b8:5c:4b:b5:02:4f:25:ee:
a6:9a:a8:9d:c4:72:e2:01:aa:ee:25:d6:21:a0:93:
c1:41:42:88:f8:a0:04:a4:8d:8d:3b:16:e8:d2:58:
bf:a8:c3:f5:bf:23:d8:78:80:28:54:4c:a4:f1:a8:
90:7f:18:ca:66:7c:78:52:1c:1f:1b:c2:eb:30:01:
dd:ae:3b:80:cb:f1:c6:1c:98:0a:f8:d6:64:5e:60:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:28:F6:55:59:A6:28:9B:D2:7F:F9:E4:93:C6:E6:F0:81:97:7D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/1-C4o9lVZpiib0n_55JPG5vCBl30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
91:1d:b5:bb:9d:d6:ff:17:27:60:eb:38:24:8a:36:61:73:58:
84:d9:b4:4f:38:b6:c0:5a:c9:cc:9a:ca:33:9b:84:dc:7e:68:
e5:d1:bf:af:40:81:f9:98:69:10:78:98:35:f3:12:e0:d3:32:
b8:fa:10:83:21:52:d7:0e:10:00:db:e9:d1:9a:4d:ba:ca:ce:
64:b5:cd:13:12:8e:6e:0f:42:ee:49:75:84:82:55:cf:4d:1a:
9a:45:1c:26:d5:27:44:62:3a:15:e7:f5:96:27:23:fe:32:fd:
e9:35:57:6b:4b:fb:77:89:89:76:b0:93:dc:b9:90:ab:8a:f9:
c9:c2:68:57:fb:32:87:cb:e5:c6:b4:90:84:73:ed:d5:f6:b1:
77:5f:0f:28:16:ae:d5:e2:94:01:bb:cc:c9:6f:a9:ec:72:38:
a1:88:17:6d:27:62:0c:1f:b7:68:c7:8e:1e:ac:0e:8c:7b:38:
e9:23:93:c1:b9:9c:42:6e:d7:3e:9c:5e:c2:2b:58:94:31:15:
2e:1e:3b:e2:e1:e9:17:d7:31:a4:b5:4a:49:b6:47:4d:bc:72:
2b:3e:02:1e:2d:f3:46:0c:75:72:a4:b7:3e:3e:44:8d:ca:6a:
ef:e9:70:b8:79:b8:89:10:72:27:6d:69:4e:24:61:af:15:56:
e3:75:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org