Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/tacpFz8VVlqHESBer6afjSnVKAc.roa
File: tacpFz8VVlqHESBer6afjSnVKAc.roa (raw, json)
Hash identifier: v4duJa7lsUWF5p2tAvmnnPE5gfc/RrM7/cAbF+aJlwA=
Subject key identifier: B5:A7:29:17:3F:15:56:5A:87:11:20:5E:AF:A6:9F:8D:29:D5:28:07
Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Certificate serial: 19E3F51D
Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/tacpFz8VVlqHESBer6afjSnVKAc.roa
Signing time: Sat 01 Jan 2022 02:58:00 +0000
ROA not before: Sat 01 Jan 2022 02:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213303
IP address blocks: 185.228.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434369821 (0x19e3f51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14
Validity
Not Before: Jan 1 02:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5a729173f15565a8711205eafa69f8d29d52807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:2b:b3:ba:f3:72:3a:32:46:10:13:fe:eb:
9b:fb:1b:33:b6:3b:47:11:a6:9d:bf:cf:1b:13:2a:
7b:30:2d:93:d5:b8:ab:31:8f:e5:02:04:2e:e7:11:
cc:c3:04:29:e6:60:45:2d:69:f5:7b:95:10:9a:f9:
7e:be:3b:53:5b:b7:73:f5:15:c2:6c:6b:02:b1:04:
59:bb:60:7d:3c:cd:c4:cb:32:dd:ea:ac:a6:d7:a6:
84:9e:b8:7e:dc:e9:ce:d6:85:19:e4:c8:5f:36:4e:
83:53:12:bb:cd:50:55:ea:48:8d:16:56:19:76:e3:
5e:0c:99:75:61:c9:d6:dd:6a:c9:f0:50:b1:13:82:
48:4b:40:84:be:4c:65:71:78:47:4e:a4:48:f4:e5:
fd:82:d0:e3:d0:a0:83:b3:f3:ae:f5:81:b8:e0:73:
7e:d9:10:aa:d8:4f:61:9d:26:17:3f:ce:14:7b:64:
1d:98:38:35:5b:b4:c2:c0:2e:00:30:c8:6c:97:26:
a7:61:f8:c5:4c:08:27:01:26:93:d7:6f:02:c8:f7:
42:01:1e:16:a7:c7:1c:1d:da:4d:d2:88:64:c7:4c:
64:d6:c5:b3:b3:ce:d8:4c:1a:2d:30:69:ac:5c:64:
14:0a:b4:5a:05:3f:3c:0b:26:b5:84:f3:ac:1e:07:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:29:17:3F:15:56:5A:87:11:20:5E:AF:A6:9F:8D:29:D5:28:07
X509v3 Authority Key Identifier:
keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/tacpFz8VVlqHESBer6afjSnVKAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:96:4b:ee:8b:9d:3c:d2:c7:ae:b3:a4:68:79:e4:cf:b0:c6:
92:c7:e1:f1:00:ec:14:1f:1a:86:ab:ad:d6:79:f6:35:aa:52:
66:02:83:2c:d3:12:7f:ae:59:21:10:b2:1e:6d:4b:a4:d3:2b:
a4:80:3e:28:58:a8:65:59:10:8b:d5:07:bf:09:99:93:97:67:
cd:bc:fd:f1:6b:23:d9:01:ab:8e:44:f8:43:19:54:57:f1:77:
74:3d:ed:76:f0:4f:45:bc:fc:e9:b0:12:4a:c7:22:f0:e6:9b:
1d:15:49:a0:7f:25:48:68:94:e4:cd:54:5d:52:94:92:9f:54:
9d:73:5a:8e:7a:f0:80:ae:93:28:4a:47:c4:c6:3e:eb:89:19:
6d:8d:cd:6b:d9:d1:e1:98:d6:b8:91:0a:6f:c1:60:26:aa:65:
3d:1f:07:58:3d:0d:e0:0e:25:70:3a:61:14:0a:d1:9e:03:27:
5e:5a:c5:55:f6:dc:8e:25:3a:77:db:56:60:55:45:3b:01:2f:
e2:32:8b:72:f5:04:ab:f3:b8:c1:e6:f7:aa:5f:23:1d:79:01:
b5:47:02:d2:34:14:32:2d:8a:88:9f:5c:84:44:31:68:28:aa:
72:05:00:9e:73:68:da:02:9c:34:80:a0:d2:01:84:b1:b2:f6:
c8:0c:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:07 2023 by rpki-client on console-fra.rpki-client.org