Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/17CWsY4YDIf7hqByHxCVENA_OOQ.roa
File: 17CWsY4YDIf7hqByHxCVENA_OOQ.roa (raw, json)
Hash identifier: 4CC6N2z1LuRyWClBUCdbJSQdHrraz9JDDf09iK/svLo=
Subject key identifier: D7:B0:96:B1:8E:18:0C:87:FB:86:A0:72:1F:10:95:10:D0:3F:38:E4
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 09759FBD
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/17CWsY4YDIf7hqByHxCVENA_OOQ.roa
Signing time: Sat 01 Jan 2022 07:01:22 +0000
ROA not before: Sat 01 Jan 2022 07:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208444
IP address blocks: 185.192.170.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158703549 (0x9759fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 07:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7b096b18e180c87fb86a0721f109510d03f38e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:0e:ea:33:b5:0e:db:db:c8:ea:ae:a2:54:
b4:3d:6a:d5:fe:78:ee:e7:22:75:36:c0:c9:69:2b:
70:9f:a2:11:c6:e5:b4:8a:00:7f:42:24:a0:25:e1:
03:de:c7:eb:9c:2f:ba:b1:0b:71:24:3b:05:64:18:
62:be:60:7b:54:29:38:9d:b0:c5:54:0b:29:85:47:
1b:23:8a:e7:45:63:56:04:e6:63:1a:db:81:cd:9a:
96:a0:2f:66:66:82:5e:8d:2c:95:ce:3f:54:83:f4:
89:a8:2b:1a:9b:80:a7:f8:2f:84:c4:a3:e2:ca:fa:
8b:35:31:92:30:91:14:09:9b:6f:a8:75:c5:d3:8d:
27:02:9e:1c:4a:52:02:1a:39:ec:c3:e2:a1:7c:00:
7a:9e:22:d2:ae:b3:e4:b1:7a:f0:a5:96:33:f0:8a:
4b:85:c4:d0:b4:4d:7a:82:8c:b0:5e:09:97:56:4f:
1e:f3:2f:31:9c:75:31:a4:18:f0:a6:c5:d1:72:c8:
86:ba:44:02:40:14:f0:39:ef:11:cb:2b:49:a1:e6:
b1:25:21:8c:b7:e7:2f:a2:f9:d9:9c:78:04:27:da:
31:6c:91:8e:18:f4:e5:6f:63:bf:c3:19:51:ef:b3:
c7:68:cb:c1:b8:7c:e5:d0:a6:95:7e:b1:b7:9e:e6:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B0:96:B1:8E:18:0C:87:FB:86:A0:72:1F:10:95:10:D0:3F:38:E4
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/17CWsY4YDIf7hqByHxCVENA_OOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:db:36:d9:4f:ba:bd:a2:d8:e4:40:b2:96:0c:dc:ec:74:8c:
52:ae:a9:95:ad:1b:dd:17:68:8e:58:0e:c8:78:55:76:be:00:
92:cc:08:ae:94:e0:b8:cf:78:b7:d0:46:b8:e9:fd:cf:e5:0e:
27:36:5c:2b:31:43:a4:cf:44:fa:ab:f5:da:24:9e:b4:52:35:
f0:ac:2e:79:3f:3d:5d:07:3c:d0:51:85:69:da:b9:30:3d:0d:
d7:ba:3c:e4:50:e5:fe:28:11:74:0f:7d:a5:6d:cb:53:1f:5d:
7a:0e:c6:b0:c8:ba:50:83:e0:9e:98:1e:83:ec:c7:3d:22:05:
df:2d:83:99:4b:91:b4:15:de:4d:50:45:ae:f7:b6:e8:5f:9a:
89:5e:8c:24:82:f8:55:15:9d:36:b5:f4:fd:21:3f:f9:e3:2b:
42:fc:79:7f:c6:e6:40:d5:8d:a4:10:be:ee:9c:46:a7:03:26:
18:65:14:c9:d1:c3:bb:3b:22:22:23:ad:12:8e:0c:52:ab:75:
0d:b2:7a:1e:55:e3:60:8b:56:6f:2b:6c:1f:e6:d8:e0:bc:03:
da:05:9e:15:28:db:e0:76:f8:26:61:10:4f:7e:19:03:65:87:
d3:70:3a:b5:23:6e:36:84:53:5d:68:a0:1f:db:b7:9f:57:a8:
cd:71:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:52 2024 by rpki-client on console-fra.rpki-client.org