Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/FiPdmFj88PprEUw4-2HGivb72iE.roa
File: FiPdmFj88PprEUw4-2HGivb72iE.roa (raw, json)
Hash identifier: PCJ4AhZNFo4QSPcm4n8slVGcRSGU6BLqq9BXX3zM7zg=
Subject key identifier: 16:23:DD:98:58:FC:F0:FA:6B:11:4C:38:FB:61:C6:8A:F6:FB:DA:21
Certificate issuer: /CN=946733318c62c47920fe375ad99cb729ee90a1ad
Certificate serial: 02C85764
Authority key identifier: 94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/FiPdmFj88PprEUw4-2HGivb72iE.roa
Signing time: Sat 01 Jan 2022 14:08:14 +0000
ROA not before: Sat 01 Jan 2022 14:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207894
IP address blocks: 185.114.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46684004 (0x2c85764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946733318c62c47920fe375ad99cb729ee90a1ad
Validity
Not Before: Jan 1 14:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1623dd9858fcf0fa6b114c38fb61c68af6fbda21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:cc:ec:15:62:d0:4b:cc:71:9a:b1:6a:8d:
8a:22:d8:12:bf:1f:03:1a:f4:fb:d8:ea:50:46:a4:
44:93:e6:fa:4b:72:c9:c4:40:c1:e5:8f:82:33:c8:
54:2a:d1:c3:91:7e:d2:32:cc:85:55:12:b4:0b:17:
ee:6d:fc:e2:bc:e0:82:7e:87:1b:38:41:57:27:b6:
23:e7:e2:08:6b:24:9f:2c:62:2d:b2:80:b2:4d:6d:
04:58:fd:07:d4:b0:c8:1d:5a:a3:a1:da:87:d4:aa:
48:98:df:50:da:d6:5d:5a:a5:2f:a5:41:c9:f5:33:
92:3c:0e:07:ed:ea:25:ad:87:5e:b8:89:2d:49:46:
09:f2:3c:65:37:f6:2b:29:1b:62:6c:7c:72:dc:f6:
f3:7c:62:b4:65:a4:3f:9a:67:8b:ed:a7:1c:d9:3e:
74:64:14:27:4f:9c:4b:f6:9c:1d:ad:96:df:29:aa:
f7:0c:58:ad:dc:74:de:7a:bc:95:4d:b1:26:5c:e6:
83:d9:aa:5f:9b:de:2d:5a:e6:be:fa:9e:cf:80:c6:
ec:ad:05:e2:37:96:b9:27:fd:f6:45:d3:e2:e6:8d:
3e:13:58:8a:bb:75:bd:c7:40:a6:3b:e8:f2:dd:a4:
2e:09:e1:1e:cb:3e:7a:3e:1f:d9:d0:00:d4:46:ae:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:DD:98:58:FC:F0:FA:6B:11:4C:38:FB:61:C6:8A:F6:FB:DA:21
X509v3 Authority Key Identifier:
keyid:94:67:33:31:8C:62:C4:79:20:FE:37:5A:D9:9C:B7:29:EE:90:A1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGczMYxixHkg_jda2Zy3Ke6Qoa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/FiPdmFj88PprEUw4-2HGivb72iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7609e-6396-4155-ad35-b74089d8e59e/1/lGczMYxixHkg_jda2Zy3Ke6Qoa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.197.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1b:68:39:25:33:6e:2a:99:a6:ff:0f:74:a3:7a:7e:76:58:
cf:69:29:66:17:e4:30:a5:91:3f:c9:9f:8e:8e:b3:c7:34:6d:
f7:73:1c:29:37:58:31:9e:7e:d2:2d:1a:6c:70:bf:59:6b:3b:
07:c3:5b:21:a1:d8:35:eb:1c:73:16:4d:59:63:b4:5a:31:0b:
e2:a0:5a:a2:6a:e5:8c:e7:1f:30:92:9c:6a:c9:a0:76:86:f8:
3e:7e:de:39:3d:cb:ff:26:75:8d:4d:ca:f9:d8:9c:e1:2a:45:
c8:e8:1d:76:bc:e8:56:08:43:6c:9d:4c:43:76:46:52:d9:e0:
59:e0:8b:54:49:e2:70:b1:e2:7e:f3:64:4a:12:f5:d0:78:5d:
72:8a:4a:79:97:dd:36:17:63:f0:d0:72:9a:ae:be:23:29:30:
81:9a:e2:e7:f0:d7:14:7b:5a:66:21:6d:09:25:ef:ac:2c:be:
17:c4:38:ba:43:29:5d:74:a5:09:d6:bc:b1:d6:6a:77:85:de:
df:9d:df:3a:df:57:04:7e:2a:fc:05:5c:04:f3:ea:c4:af:9f:
b3:2f:c6:2b:57:31:fc:c3:97:f6:07:96:17:61:2e:d6:34:75:
92:46:b0:91:ab:7f:8b:91:f6:8d:d3:71:57:16:8b:7f:2b:8d:
cf:aa:c8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:59 2024 by rpki-client on console-ams.rpki-client.org