Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/Y3TvHcDeGndVh8Gfr9aWTyODs8Q.roa
File: Y3TvHcDeGndVh8Gfr9aWTyODs8Q.roa (raw, json)
Hash identifier: k+41QUQMR6PFNA+iNBdMfjC/kjdxXLoFqG3hDWJRaDQ=
Subject key identifier: 63:74:EF:1D:C0:DE:1A:77:55:87:C1:9F:AF:D6:96:4F:23:83:B3:C4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 14362A33
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/Y3TvHcDeGndVh8Gfr9aWTyODs8Q.roa
Signing time: Sat 01 Jan 2022 08:59:39 +0000
ROA not before: Sat 01 Jan 2022 08:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203030
IP address blocks: 185.27.224.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339094067 (0x14362a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Jan 1 08:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6374ef1dc0de1a775587c19fafd6964f2383b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:7d:65:5f:60:94:4f:aa:4a:24:d4:e2:99:
82:89:cf:43:57:76:79:a2:c8:52:03:cf:99:66:bd:
1f:ff:44:68:1d:a3:d2:78:87:b4:d7:26:c6:c6:f5:
39:d1:73:fe:af:53:5f:b2:3a:8e:e6:8e:d7:7d:11:
17:70:02:2f:23:70:af:2e:9d:df:09:5a:cb:1c:62:
d4:20:8a:84:4f:3e:08:96:10:86:33:a3:05:97:44:
8d:d9:91:da:e3:e9:d5:ca:5f:49:c2:21:a7:69:f8:
ed:7d:06:9c:b8:2e:d5:b5:9d:cc:1a:02:11:87:43:
92:bb:64:d7:cb:50:88:33:c8:65:e1:73:88:d3:67:
15:de:f9:04:0f:6c:9d:a8:80:b2:0e:fa:ef:ed:12:
10:89:4b:7f:0c:4f:57:5f:dd:69:28:6c:d9:d7:e3:
c0:3b:55:22:ed:c1:4b:32:08:c5:8e:4f:b2:2a:81:
30:fd:87:9f:2a:8e:b4:25:61:6d:d2:98:29:e8:ee:
da:eb:84:4c:b0:7c:9e:ff:73:4a:d3:d3:ff:96:f1:
66:d5:56:46:d2:e1:0e:f1:cc:79:18:3f:d4:16:c8:
22:8f:ab:eb:57:1b:1e:e6:8b:34:0b:71:4a:78:a9:
76:0a:f6:d8:62:e8:10:c4:fc:a6:13:c4:96:b0:e8:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:74:EF:1D:C0:DE:1A:77:55:87:C1:9F:AF:D6:96:4F:23:83:B3:C4
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/Y3TvHcDeGndVh8Gfr9aWTyODs8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.224.0/22
Signature Algorithm: sha256WithRSAEncryption
71:3e:92:18:69:11:91:9c:3b:4b:c0:4a:ea:42:f9:38:1d:aa:
3b:62:dd:a5:59:28:74:79:f6:d8:55:2b:cb:1b:ce:bc:57:76:
cf:56:a0:69:94:12:93:1c:fa:26:07:f8:38:ed:27:3d:7b:e4:
4a:68:cd:2f:64:3c:eb:d3:8a:f9:e7:6d:32:93:2a:39:8a:3d:
2a:f7:30:1b:cf:44:7b:d0:72:11:89:4a:a4:48:a6:e8:ab:8f:
5a:38:1f:dc:30:49:31:92:af:86:b3:54:56:79:14:20:6d:dd:
f8:b0:9d:33:55:94:59:85:88:d9:c5:01:2e:9d:84:83:10:ef:
57:91:bc:6a:13:19:6c:94:95:d0:d8:9d:a4:02:40:ab:2a:f1:
c3:76:f0:13:67:ba:c6:4e:b0:41:3e:3e:25:ab:76:3e:03:c1:
70:92:93:46:6f:1d:67:1a:ab:18:d5:2d:cc:25:31:58:1b:34:
2b:71:95:8a:5a:07:56:e7:50:d2:95:68:09:4b:8b:85:5a:8f:
02:21:7a:6b:19:ed:91:2b:53:af:92:12:a8:1d:5b:4a:1e:c0:
2c:14:e3:e2:e1:29:3c:b3:f4:05:f5:2c:c6:68:7c:13:5a:3b:
35:9a:39:34:e4:82:5b:77:e4:51:02:31:aa:8c:b1:53:e9:03:
0b:46:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:54 2024 by rpki-client on console-fra.rpki-client.org