Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/CPS0rlKgTGAQrPjQa7dp-UYUwZ4.roa
File: CPS0rlKgTGAQrPjQa7dp-UYUwZ4.roa (raw, json)
Hash identifier: Ud4T7jQqL776QChFrLRVlORC3qEK+EJHI7UCwoWEC5s=
Subject key identifier: 08:F4:B4:AE:52:A0:4C:60:10:AC:F8:D0:6B:B7:69:F9:46:14:C1:9E
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 082D79B5
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/CPS0rlKgTGAQrPjQa7dp-UYUwZ4.roa
Signing time: Sat 01 Jan 2022 11:05:02 +0000
ROA not before: Sat 01 Jan 2022 11:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35398
IP address blocks: 185.211.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137198005 (0x82d79b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Jan 1 11:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08f4b4ae52a04c6010acf8d06bb769f94614c19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:9a:77:ab:04:ea:2b:ba:50:4a:bc:47:4a:
0b:ce:f8:73:ee:7b:7f:9b:63:30:74:ed:8b:34:bc:
b0:b5:ba:86:a0:63:62:18:1e:e8:73:23:3f:96:87:
81:6b:19:dd:63:28:21:ae:6d:06:42:74:57:0b:ef:
6d:cb:4d:42:75:e8:4a:7c:cf:a8:1f:8a:2f:0b:56:
91:28:21:d1:00:8f:0c:46:8b:3e:2c:11:f3:00:ec:
76:3a:4e:42:82:18:5f:2b:e3:56:05:f2:a2:fc:ff:
cf:c0:b0:4b:32:31:d5:18:a5:23:3b:8e:0b:44:72:
08:da:98:1e:f0:4c:ca:a9:52:8e:20:9b:56:f6:fb:
ca:c0:13:99:35:a2:28:fe:65:55:d4:06:a6:6c:ff:
0f:20:66:6e:18:d2:b2:bb:61:34:1c:e8:7a:f3:94:
1c:fb:41:e0:c4:8f:82:af:75:2f:43:6a:fc:5f:c3:
48:25:13:a6:64:29:2a:65:53:bf:bc:49:b9:ef:2b:
23:aa:45:59:18:82:7d:cd:4c:a6:89:1d:51:bc:ce:
70:52:0f:8d:4f:c3:58:9b:15:5b:89:5c:54:07:a2:
41:cc:d8:78:6a:3b:26:ae:49:45:1d:73:2a:d9:e2:
b8:4d:2b:85:c1:fb:d6:70:20:60:ae:ff:9c:2a:59:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:B4:AE:52:A0:4C:60:10:AC:F8:D0:6B:B7:69:F9:46:14:C1:9E
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/CPS0rlKgTGAQrPjQa7dp-UYUwZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.28.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:49:98:c3:fa:e9:04:9c:f0:74:94:0c:41:09:95:c0:64:83:
64:8b:ac:78:a4:d3:f1:43:eb:8b:6a:ae:a5:80:8f:cb:7d:25:
d2:76:d7:29:70:5f:11:ee:ac:a9:14:98:83:fd:5f:3d:e0:c4:
4a:af:1d:c9:6f:f7:6e:46:b7:0d:25:8c:51:31:3e:80:ac:da:
2e:6a:a7:93:7c:90:02:bf:17:5e:7a:da:4b:47:e4:e0:0e:d2:
a3:25:46:e6:7a:a6:ac:46:0e:0a:68:b5:fa:8e:97:e3:f4:3b:
67:2f:d7:12:b5:83:e4:a0:2a:c2:38:b5:c9:20:ad:88:95:40:
05:df:b2:32:30:2f:62:dc:bb:18:4a:67:7c:73:13:45:ed:56:
64:9d:43:55:ca:b1:5f:3a:72:5c:45:9e:51:b5:b0:85:58:b4:
64:ad:13:12:f5:83:18:18:56:2d:b5:8c:83:83:27:19:fa:78:
dc:54:06:7c:0e:b3:4a:e5:53:af:20:85:47:57:c0:7a:69:2c:
8a:90:f7:ca:e4:8c:01:1e:56:54:38:ff:79:65:ec:28:80:7c:
b5:d1:62:6d:d6:8d:45:d5:69:f1:4c:a3:a4:57:10:5a:13:c5:
01:54:20:0a:27:9c:bd:15:0c:6e:24:98:9b:06:db:d5:c9:1d:
84:2d:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org