Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/jICQffnSlkcIqg4Df82uXlmN5lc.roa
File: jICQffnSlkcIqg4Df82uXlmN5lc.roa (raw, json)
Hash identifier: hZXRmwMyB4tPuP0rBZqFuhqXoxvOAtVdtzTi8NVRTY8=
Subject key identifier: 8C:80:90:7D:F9:D2:96:47:08:AA:0E:03:7F:CD:AE:5E:59:8D:E6:57
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 01829BE524AADE9D9DD3EC73348B377558E3
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/jICQffnSlkcIqg4Df82uXlmN5lc.roa
Signing time: Sun 14 Aug 2022 10:27:41 +0000
ROA not before: Sun 14 Aug 2022 10:27:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209782
IP address blocks: 185.126.203.0/24 maxlen: 24
185.126.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9b:e5:24:aa:de:9d:9d:d3:ec:73:34:8b:37:75:58:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Aug 14 10:27:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c80907df9d2964708aa0e037fcdae5e598de657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:62:e6:97:5c:d9:04:18:5d:cd:f8:d8:d4:
34:b0:31:cd:2d:bd:c6:6b:f3:73:ac:76:04:30:6e:
b2:10:6d:2a:1d:24:28:37:fe:75:8c:9b:15:e0:3d:
12:cc:d5:3c:32:cd:bc:51:31:07:4e:ea:f4:a1:e7:
31:e2:6c:10:c9:e6:ab:58:9b:5b:20:a1:21:1b:d9:
23:17:db:ec:40:7b:fe:f0:e4:4f:44:fd:1b:51:b7:
49:e7:0b:26:7d:8a:7c:2b:e5:b7:c5:bb:1c:46:53:
93:7f:d2:48:ef:4b:34:1d:ef:3d:15:4d:c1:10:f9:
c4:eb:1c:2d:89:1e:8a:40:87:b0:9a:22:e3:0e:be:
e9:28:54:3e:1a:0c:98:e6:c1:ab:f5:bf:ee:86:9c:
a8:b3:ba:a7:5d:34:89:16:8d:96:82:07:13:82:0f:
8d:59:3d:ad:cb:81:31:0a:a4:b9:1a:1c:a8:24:9f:
c0:b0:41:ce:cb:4a:57:d8:fe:38:92:c1:96:aa:b2:
56:ef:d4:e1:96:1f:f0:b7:58:64:0b:ce:84:4e:5f:
84:c9:7e:0f:c7:06:7d:1f:5b:39:0c:36:58:cd:dc:
7f:55:e9:c0:c8:da:e5:2d:ca:7e:cf:53:11:b0:7e:
96:00:3f:e8:58:0b:a4:9e:3c:2c:01:32:1c:8b:b7:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:80:90:7D:F9:D2:96:47:08:AA:0E:03:7F:CD:AE:5E:59:8D:E6:57
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/jICQffnSlkcIqg4Df82uXlmN5lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.202.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3d:af:95:4a:51:f4:ba:bd:31:77:59:65:98:f5:82:1e:77:
3a:c8:4a:ba:7f:eb:6a:64:53:5a:e2:e5:0c:bc:9b:79:a7:b6:
2a:85:66:eb:f3:11:5e:26:8b:df:2f:e9:0c:b6:ba:ee:7a:d9:
a0:2b:87:61:5c:45:40:41:d6:09:83:e1:44:ba:f9:14:fa:a0:
03:7b:9e:8d:d4:df:44:e8:89:2b:cb:8b:3b:ce:de:43:ff:f4:
22:bf:b8:83:b8:70:00:02:df:73:de:94:a2:ef:59:6b:8a:4b:
8c:0b:f8:4c:0a:d7:95:90:5c:6a:c2:c4:16:e0:34:0f:fc:c2:
fc:08:2d:12:d9:62:1b:c1:bb:7a:a4:67:60:b1:1f:cc:cd:b3:
7c:4a:74:74:bd:83:17:15:e9:fa:1e:40:b0:77:fb:93:25:cb:
b9:38:61:34:90:df:a3:5e:6d:48:95:91:8a:ee:19:8a:a2:00:
3e:e0:c3:e3:62:99:3e:f0:25:d7:e6:e7:10:72:cb:96:45:d1:
ac:79:6f:17:2e:f8:20:29:39:d5:9d:06:43:dd:3e:2b:74:30:
e8:e5:b7:37:3f:38:73:4c:82:77:e7:89:9c:e7:ff:85:8a:fb:
c4:13:9a:18:bb:59:94:15:71:7d:20:d6:a7:7a:4d:f8:dd:d1:
d1:86:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:46 2023 by rpki-client on console-ams.rpki-client.org