Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/1AJR9ch_t_NFQ8KzSJFLWeQaDBo.roa
File: 1AJR9ch_t_NFQ8KzSJFLWeQaDBo.roa (raw, json)
Hash identifier: mGNE+vwR3F4osTpYicsyj4cuhlP/SmnMb1GGZoKy+nk=
Subject key identifier: D4:02:51:F5:C8:7F:B7:F3:45:43:C2:B3:48:91:4B:59:E4:1A:0C:1A
Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial: 018281B950C12B1F3D257F6D348C04E29FA5
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/1AJR9ch_t_NFQ8KzSJFLWeQaDBo.roa
Signing time: Tue 09 Aug 2022 08:29:41 +0000
ROA not before: Tue 09 Aug 2022 08:29:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209061
IP address blocks: 185.223.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:b9:50:c1:2b:1f:3d:25:7f:6d:34:8c:04:e2:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Validity
Not Before: Aug 9 08:29:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d40251f5c87fb7f34543c2b348914b59e41a0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:0a:65:f7:71:4f:bd:38:ff:04:49:4c:0d:
06:56:53:56:9c:e8:03:63:be:18:52:02:04:f8:b9:
b6:cc:ff:3e:e0:12:57:cb:b4:95:41:4b:19:8d:99:
71:e6:75:2d:90:6d:9a:7f:aa:fa:5c:d5:56:b0:20:
3d:38:25:8c:9f:34:3e:1f:67:04:d4:62:7c:03:a5:
1b:ad:ff:09:8f:a6:53:50:10:b8:ad:88:74:20:b5:
55:25:e2:ea:40:79:f2:ee:a1:3c:86:bb:69:fb:4a:
08:62:46:7c:34:c8:88:b3:29:db:d0:e3:35:a0:43:
b2:11:26:19:e4:36:12:d1:32:dd:c8:de:9b:79:b9:
3b:ee:14:0a:cf:57:2c:e1:2c:3f:73:eb:c8:6e:82:
7e:88:4b:26:dc:e6:93:1d:7d:42:9e:1c:17:b6:17:
11:0c:37:e5:97:a0:61:ce:26:6d:1a:5c:c2:ed:9b:
4a:c6:65:76:a5:fb:1f:86:12:f5:8b:e5:72:0b:cd:
ae:72:9c:53:7b:2e:62:c4:93:08:41:56:6d:d8:b7:
bb:84:f6:47:63:12:90:2d:a4:7e:f9:d3:3d:b4:e1:
79:7a:26:bb:96:90:d8:40:d7:e7:7a:11:e6:b9:ae:
7a:f7:ac:4c:4c:e9:22:f5:da:f5:1b:28:62:ed:a0:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:51:F5:C8:7F:B7:F3:45:43:C2:B3:48:91:4B:59:E4:1A:0C:1A
X509v3 Authority Key Identifier:
keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/1AJR9ch_t_NFQ8KzSJFLWeQaDBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.215.0/24
Signature Algorithm: sha256WithRSAEncryption
17:d6:cc:01:0a:59:14:c8:1c:2e:49:df:76:13:4e:b1:de:83:
7b:f2:38:c4:d7:8a:c6:73:57:6c:a2:bc:50:22:f1:48:17:da:
cb:72:bb:1b:3d:9b:db:d0:e2:88:b1:a4:a1:f0:d8:ff:19:e2:
7c:43:94:57:74:82:3f:52:95:87:87:03:82:37:a4:e6:b5:38:
a6:61:f9:96:47:d0:c5:a6:70:10:7b:3e:3e:56:e2:10:81:de:
e6:0b:e0:e9:63:80:e6:98:03:bf:40:2d:15:ca:80:53:d3:a5:
0c:6d:31:79:85:4f:c2:b6:54:32:18:b1:63:1c:dd:0c:c1:d1:
fb:9c:8c:bb:0e:75:05:c4:f9:10:50:e5:7b:fe:5a:36:1b:1d:
55:03:3c:dd:40:1d:bd:b7:cf:b2:77:3f:11:2e:67:ad:45:64:
46:a7:bf:29:83:b2:78:0d:41:47:22:bd:43:9e:ab:99:b2:93:
1d:8a:8e:96:0c:3a:de:8b:b7:25:80:c5:52:b7:c3:26:f4:61:
77:42:b7:48:ad:e9:b2:f8:b5:23:85:c3:39:ec:85:ac:77:84:
c9:7d:57:6a:ec:95:91:d9:ee:ac:f8:7f:ab:7d:8c:b4:c2:6c:
60:df:e8:72:72:de:2e:ed:83:57:e5:f0:f6:61:95:11:3e:7f:
fd:4f:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:57 2024 by rpki-client on console-fra.rpki-client.org