Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/jeGReF3Ywb20CjfhM_KknlLbHwY.roa
File: jeGReF3Ywb20CjfhM_KknlLbHwY.roa (raw, json)
Hash identifier: M9rcAKSWrUuXfgY/K/ujlnldcN347QxBnm17sypYj/k=
Subject key identifier: 8D:E1:91:78:5D:D8:C1:BD:B4:0A:37:E1:33:F2:A4:9E:52:DB:1F:06
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 09A35571
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/jeGReF3Ywb20CjfhM_KknlLbHwY.roa
Signing time: Fri 18 Feb 2022 13:12:18 +0000
ROA not before: Fri 18 Feb 2022 13:12:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.193.165.0/24 maxlen: 24
185.193.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161699185 (0x9a35571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Feb 18 13:12:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de191785dd8c1bdb40a37e133f2a49e52db1f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:5d:e7:8b:0a:44:41:05:f2:e5:0b:30:57:
7b:5f:a2:01:3f:a8:36:6f:26:cf:df:18:aa:64:4c:
57:c7:f8:01:39:61:51:82:ff:bd:df:79:43:99:2a:
e2:cc:02:6c:12:63:45:c2:c8:f1:c7:47:4a:30:11:
35:8a:29:12:44:72:10:d8:65:c3:50:94:cc:4c:c2:
ad:8e:1f:8c:91:a2:38:d4:ea:a7:76:d5:cb:26:eb:
49:bd:c0:30:fd:01:ea:29:36:78:11:58:eb:73:6e:
95:71:cb:c3:e7:ab:01:45:52:79:e9:cf:c6:e1:24:
0c:17:a6:60:13:16:9d:63:1f:9e:8a:93:60:6a:27:
54:a6:15:95:92:00:7a:f9:d9:70:59:97:e8:a2:c8:
f5:46:4f:5b:2d:31:99:55:c5:8c:42:ce:83:b6:80:
73:1e:64:f5:a9:04:6d:69:73:f8:02:54:d1:05:bc:
f9:07:05:48:78:29:aa:ca:97:b4:c0:52:7c:ba:a5:
1d:78:ba:55:45:17:42:da:46:35:6f:35:78:7e:b1:
63:4a:9a:1a:0d:82:67:70:25:6f:8a:72:5a:19:c0:
25:9c:cf:0a:f5:40:82:15:0c:93:5d:8d:0d:65:9d:
41:8a:65:a8:fb:eb:04:bf:0e:9c:cc:4d:94:42:85:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:91:78:5D:D8:C1:BD:B4:0A:37:E1:33:F2:A4:9E:52:DB:1F:06
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/jeGReF3Ywb20CjfhM_KknlLbHwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0-185.193.166.255
Signature Algorithm: sha256WithRSAEncryption
0b:42:93:a1:a3:dd:62:ae:78:6e:61:9d:e5:47:48:da:00:39:
10:82:4b:f4:ff:fd:d2:a6:a1:fe:22:b7:ed:ad:66:07:df:74:
8e:ba:38:b6:a9:3d:f0:fe:be:a8:7d:40:f0:db:28:cd:a1:7c:
01:b0:1a:c6:97:67:01:34:f6:6f:44:c9:2b:c4:f0:45:3a:6f:
ab:85:01:ba:5f:64:fa:0e:fa:57:3f:5a:ca:c9:bd:03:aa:21:
d7:a8:f9:38:26:a7:59:4a:2e:b1:cf:73:06:4b:11:f2:db:34:
d9:8e:ba:bd:e0:c1:ee:2e:2d:00:00:0f:e1:24:ae:25:8f:9d:
76:67:ac:64:15:0b:e9:5b:08:db:08:fa:e8:8d:b6:c5:a0:84:
1c:26:77:d4:fd:db:c1:ee:7c:17:42:ee:14:4d:a5:2b:98:a6:
dd:2f:a8:ef:d8:27:93:e5:1e:ea:e3:f9:e5:55:a5:55:9d:f4:
68:d4:b2:11:b4:31:7a:5b:56:05:6d:e7:50:8b:e3:da:84:c7:
c9:fe:94:dd:12:ed:a3:4a:9c:b9:f0:a2:40:33:75:55:fd:d6:
6b:d5:35:2e:a7:23:7c:9c:7e:12:b8:d7:fb:62:12:4e:a6:f0:
32:8a:05:a3:52:f6:2f:2f:03:13:6b:58:fc:c8:20:e1:6c:ce:
97:25:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org