Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/JlO1IebA14-BK34MNR9Vs7W9fPc.roa
File: JlO1IebA14-BK34MNR9Vs7W9fPc.roa (raw, json)
Hash identifier: gfjyKKtp0dTfZIqULHA9L6Rn3yDEmgQx87/hqoQ3JPc=
Subject key identifier: 26:53:B5:21:E6:C0:D7:8F:81:2B:7E:0C:35:1F:55:B3:B5:BD:7C:F7
Certificate issuer: /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial: 01C720E5
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/JlO1IebA14-BK34MNR9Vs7W9fPc.roa
Signing time: Sat 01 Jan 2022 14:57:31 +0000
ROA not before: Sat 01 Jan 2022 14:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206036
IP address blocks: 185.202.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29827301 (0x1c720e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
Validity
Not Before: Jan 1 14:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2653b521e6c0d78f812b7e0c351f55b3b5bd7cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:af:35:27:24:b9:67:53:06:4c:6b:bd:e9:
2a:c7:f9:49:a7:eb:e0:38:b2:21:9c:f5:94:0d:c3:
95:da:68:f4:ff:97:b0:02:62:a3:08:23:9c:00:08:
30:49:cd:10:3a:6a:6d:34:96:d1:f8:fb:6b:b7:a6:
98:31:e4:79:3f:50:d8:6b:a4:5e:53:94:6a:f8:90:
0a:15:b7:22:ca:2d:fe:b2:8b:df:1d:df:0b:fc:7b:
81:4b:c2:34:08:90:35:d4:f1:5e:38:7e:6d:5f:1a:
48:37:43:68:cf:26:b5:f9:ad:b4:92:00:74:74:3c:
a8:05:56:9e:d5:6e:3f:51:a5:45:3c:65:5f:2a:69:
3f:23:ae:d1:ff:e6:f1:8c:96:b2:c7:0f:0a:ed:55:
6e:35:52:99:78:1e:2d:fb:0e:47:9f:97:28:bc:5d:
d3:ee:66:cb:53:63:41:c8:db:8c:8e:bb:1e:9e:24:
63:4f:a7:de:37:ea:c2:9f:b0:9c:15:35:5d:ec:ae:
ec:84:7e:d5:36:f4:d5:f1:7b:6f:a0:52:28:ea:30:
6c:93:f0:8a:ee:9a:3d:cb:ae:7f:ba:f4:7a:91:ff:
0b:07:f0:99:aa:51:9e:8d:4f:5d:54:64:18:f6:06:
e7:55:45:27:a0:fd:d7:cd:72:29:af:d1:2e:13:a3:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:53:B5:21:E6:C0:D7:8F:81:2B:7E:0C:35:1F:55:B3:B5:BD:7C:F7
X509v3 Authority Key Identifier:
keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/JlO1IebA14-BK34MNR9Vs7W9fPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:19:5f:15:f0:81:2f:4b:50:28:a4:e2:1f:97:b3:60:8f:1e:
57:d3:82:dc:d9:81:07:b7:70:8a:a6:fa:1e:d1:eb:01:7f:68:
9e:b9:ee:8f:02:2b:73:a5:ea:d9:55:ea:05:7b:23:0d:3f:19:
77:55:59:49:ce:7d:75:49:15:42:54:ae:60:97:b1:27:f0:5d:
a6:47:ed:95:20:d9:1c:8f:ab:c4:14:6d:ff:d4:04:b2:6e:51:
3c:f3:b8:ea:07:d9:87:bb:be:e6:9b:90:24:01:07:cf:2e:1a:
f8:24:b6:05:4c:3b:9b:51:87:5e:cb:e3:e1:2d:8c:06:56:a1:
22:38:7f:41:51:2b:84:7e:b5:83:e8:0d:1d:71:60:fa:5c:d3:
9d:9d:b9:9c:a0:7a:4c:1c:93:7b:e7:c2:a8:68:51:27:b2:ce:
33:d2:4a:a3:66:1e:c7:0a:59:82:84:c1:b5:e2:2b:c9:ea:97:
87:31:47:76:08:ea:8c:0f:9b:bb:d0:04:30:d4:99:3e:79:c9:
12:01:fe:be:e8:68:92:37:62:28:68:2f:9c:fa:2d:16:c6:2d:
b7:38:62:02:dd:4f:0b:6e:35:5f:82:c4:1b:ad:95:f0:24:f3:
1b:83:dd:50:69:b0:ee:1e:bd:b1:17:e3:fa:56:ee:60:86:33:
13:d9:7c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:04 2024 by rpki-client on console-fra.rpki-client.org