Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/FgSDwj9lJwghHHPpFXSHM_Y-2ao.roa
File: FgSDwj9lJwghHHPpFXSHM_Y-2ao.roa (raw, json)
Hash identifier: ZhEEtHqMWIbSGz8ABMmSr0Z6/a+ntVeSevf5ldthuAo=
Subject key identifier: 16:04:83:C2:3F:65:27:08:21:1C:73:E9:15:74:87:33:F6:3E:D9:AA
Certificate issuer: /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial: 01418233
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/FgSDwj9lJwghHHPpFXSHM_Y-2ao.roa
Signing time: Tue 04 Jan 2022 15:42:27 +0000
ROA not before: Tue 04 Jan 2022 15:42:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205093
IP address blocks: 185.230.236.0/24 maxlen: 24
185.230.238.0/24 maxlen: 24
185.230.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21070387 (0x1418233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Validity
Not Before: Jan 4 15:42:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=160483c23f652708211c73e915748733f63ed9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:4f:33:80:28:fb:52:b2:ce:8b:ae:98:68:
ac:09:a9:0c:4b:3d:79:5d:eb:83:89:b8:25:86:92:
54:1d:3e:8f:63:47:ad:bd:0e:cf:5f:52:5f:9c:f1:
30:93:7b:53:95:be:86:87:16:37:0c:03:81:6f:4a:
66:01:72:93:51:eb:f0:9b:19:eb:58:5e:c4:1f:0a:
a6:3f:6d:29:4c:58:82:26:8d:9b:c5:97:36:fd:e3:
1c:92:03:06:08:bb:a3:8a:c6:32:3f:80:b6:2a:ca:
4d:9a:7d:17:91:13:14:99:b0:a3:9a:97:5e:d4:e5:
72:b3:28:ad:b3:0f:2f:dc:e4:d4:36:27:5a:e9:80:
8e:34:14:7a:77:27:50:05:9d:36:66:d2:e0:ea:ae:
90:7a:f9:4a:0b:6e:09:c6:f9:06:30:a5:80:03:86:
1a:85:34:da:6d:46:9e:57:7d:4f:a9:cb:70:2a:e8:
7a:f5:a8:23:35:8c:31:c0:1d:9f:eb:96:e2:56:10:
82:6d:87:86:a3:6f:6c:20:e2:7b:b9:4b:5e:18:55:
9b:8e:f5:be:98:87:de:65:50:13:0a:17:fe:61:e9:
92:13:3c:2c:0f:17:40:23:bc:67:7b:91:b2:92:7a:
f7:f4:84:85:a6:5d:89:58:3f:b6:79:6e:21:73:9f:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:04:83:C2:3F:65:27:08:21:1C:73:E9:15:74:87:33:F6:3E:D9:AA
X509v3 Authority Key Identifier:
keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/FgSDwj9lJwghHHPpFXSHM_Y-2ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.236.0-185.230.238.255
Signature Algorithm: sha256WithRSAEncryption
30:26:57:59:7d:7f:fa:27:e6:42:c2:e9:9a:b8:b1:74:3d:f8:
de:c5:00:71:4b:7f:79:00:2a:d3:a9:37:ff:f3:20:46:1a:89:
56:01:38:20:6e:1b:d6:59:71:f6:4d:19:21:a0:5d:85:23:89:
87:e4:64:7f:73:63:0c:0a:88:da:29:de:d2:12:89:ae:72:25:
f8:10:bf:fd:ee:a7:9b:b8:c9:58:72:a7:e2:02:8a:bf:6a:46:
1f:bb:2e:cd:f9:25:1f:e3:5e:50:06:be:e5:5c:76:d0:5c:bb:
81:92:c8:75:5d:48:03:7a:b0:00:5d:84:17:e5:5b:84:11:70:
a2:c1:c7:b1:98:86:4a:a9:7c:bd:31:17:3b:0a:f9:22:0a:d7:
be:70:f3:f5:9d:6d:89:81:78:9c:92:b2:ba:5f:d9:22:bf:00:
78:aa:36:77:7f:4f:95:f6:fa:c4:8c:05:b1:20:a2:99:91:46:
fe:20:b5:e9:e3:0f:73:13:bd:e5:b2:18:86:78:a9:eb:d5:38:
51:4c:53:c1:5e:d5:75:a2:41:f1:4e:a6:ef:43:02:01:d8:e8:
40:4d:76:a7:a5:f6:52:a0:56:1d:11:39:d9:4a:db:5b:71:ba:
c6:02:10:1f:ef:68:aa:4e:ba:3e:9c:30:f6:fe:c0:42:3b:26:
06:82:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:17 2024 by rpki-client on console-fra.rpki-client.org