Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q_DznAnIKUEVfovVFlRo7JcCzlM.roa
File: Q_DznAnIKUEVfovVFlRo7JcCzlM.roa (raw, json)
Hash identifier: 7GdQ4LoxOJQUdro42WffVR3tgOfGhc4SJJOSy4xXPzU=
Subject key identifier: 43:F0:F3:9C:09:C8:29:41:15:7E:8B:D5:16:54:68:EC:97:02:CE:53
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01850725371F89F1882CB34BE0D0FBC4B0CE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q_DznAnIKUEVfovVFlRo7JcCzlM.roa
Signing time: Mon 12 Dec 2022 16:22:37 +0000
ROA not before: Mon 12 Dec 2022 16:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29066
IP address blocks: 185.215.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:25:37:1f:89:f1:88:2c:b3:4b:e0:d0:fb:c4:b0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 12 16:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f0f39c09c82941157e8bd5165468ec9702ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:10:e0:c1:46:20:7e:d1:7a:93:d4:15:1a:
2b:10:73:48:47:60:25:af:2a:33:76:55:8e:eb:32:
d2:7a:8b:60:1f:be:d7:90:91:33:30:e6:d0:77:ff:
3c:20:96:14:8a:9c:1b:3b:13:56:ab:b0:1d:38:ca:
3a:2c:a1:e4:9e:8b:6c:90:a5:e3:6e:ef:fd:4a:e4:
cd:23:14:8f:65:8f:29:38:66:5d:d6:1a:7c:25:ce:
8a:f1:00:a8:23:48:85:b0:9c:57:d1:dd:c8:7a:74:
3f:d1:8f:9f:24:5f:f0:3d:30:23:e8:f6:2e:bc:17:
c3:45:fd:f1:bc:14:a4:c8:6d:85:b5:93:fc:be:1e:
22:05:32:94:d8:5a:f2:75:d3:48:07:52:40:18:41:
58:4c:97:14:1a:aa:5b:c4:98:85:1a:a0:2e:fe:37:
a3:30:80:95:c0:3f:6e:aa:96:88:9c:87:e9:1b:ac:
77:4a:e5:89:79:14:61:be:c1:91:f2:6c:44:ba:88:
34:01:3e:6f:50:a3:e6:f1:07:94:b1:b5:f6:af:76:
df:38:6f:a0:ab:d0:52:94:f6:16:b3:f5:3c:75:5d:
d1:4c:30:6e:01:22:74:8a:66:a3:94:43:ff:f2:6c:
65:ba:13:e0:d3:a0:16:0d:22:2e:74:9a:26:7b:40:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F0:F3:9C:09:C8:29:41:15:7E:8B:D5:16:54:68:EC:97:02:CE:53
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Q_DznAnIKUEVfovVFlRo7JcCzlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.245.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:32:6e:50:75:88:7a:65:d7:a1:8c:a7:c8:08:58:33:81:b5:
fa:ce:8c:9c:3a:db:7e:51:e4:be:07:d4:0a:32:9e:9d:49:8a:
8c:ea:01:36:0b:f5:31:bc:7e:5c:33:e9:fe:92:50:2a:05:83:
0d:f5:80:e4:34:8d:ca:91:95:c9:31:a5:10:0a:51:29:81:64:
3e:15:9c:8a:e8:a1:1c:51:e4:7f:59:e7:f7:18:cc:a4:ef:14:
78:b1:a3:f5:81:de:cb:8a:d9:75:7c:14:32:08:57:a0:64:33:
11:9d:c1:39:df:54:81:d8:62:7f:bb:43:e0:e9:93:d0:a0:8a:
e5:00:10:f2:2b:87:98:16:2c:cc:bf:38:8e:f5:09:4e:e0:c7:
62:f0:25:1d:d8:79:97:b7:bf:be:d3:cf:c7:94:3c:1b:c5:b0:
5c:fa:16:02:b2:14:e0:24:71:e3:be:4a:3e:db:58:b4:11:7b:
f4:6e:75:a8:a3:b3:bf:5a:38:15:be:be:7a:23:c7:79:66:fa:
1d:26:20:6a:e8:eb:0b:2c:cc:ba:5f:70:ca:c5:6e:cc:68:73:
43:ee:c6:6d:2b:df:26:b2:04:3d:c4:43:83:0f:76:af:e2:26:
72:13:6b:93:80:8f:f6:31:ab:d8:ae:95:40:52:b4:26:e9:a7:
39:8d:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org