Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/fxri6A6pYgCCv_ObvciMTQ5famA.roa
File: fxri6A6pYgCCv_ObvciMTQ5famA.roa (raw, json)
Hash identifier: azMQfHI4lgnEnrGDK+16GITj052XIov6skIUvKXJJN8=
Subject key identifier: 7F:1A:E2:E8:0E:A9:62:00:82:BF:F3:9B:BD:C8:8C:4D:0E:5F:6A:60
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0CFE15BC
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/fxri6A6pYgCCv_ObvciMTQ5famA.roa
Signing time: Sat 01 Jan 2022 02:57:19 +0000
ROA not before: Sat 01 Jan 2022 02:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1764
IP address blocks: 185.236.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217978300 (0xcfe15bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jan 1 02:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f1ae2e80ea9620082bff39bbdc88c4d0e5f6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:73:fa:2e:67:8d:3c:03:a8:2f:09:da:54:
50:20:00:4d:bd:f7:3f:36:d3:79:3d:02:83:ad:2e:
64:66:28:5f:43:4b:d6:ce:48:42:ce:d3:03:83:80:
91:57:7f:2c:65:8a:35:55:68:1d:51:7d:a3:25:34:
a1:d3:f1:e6:bf:bd:20:43:63:0b:db:cd:dc:01:51:
36:5b:b5:dd:21:24:49:6b:07:39:6f:7e:3e:d1:19:
eb:64:75:02:eb:db:bd:b5:1c:83:fe:cd:8c:d4:6b:
a1:cd:78:71:3c:02:cc:e7:0e:82:59:8d:b6:3a:d7:
09:8f:34:fe:dd:19:29:33:65:b4:9d:06:4a:8d:d0:
91:bb:5f:7f:87:3c:f7:11:f5:ad:4d:aa:b2:83:ca:
08:9c:2a:c5:ee:70:fa:d9:20:73:51:58:44:20:1a:
ad:65:7b:60:e3:68:7d:2b:de:99:c9:be:7d:3a:38:
bc:b3:b6:2c:14:39:0b:30:b6:9c:a4:c1:13:40:a2:
f3:04:38:6a:2e:25:fe:0d:7c:82:2a:1f:5f:58:c1:
f2:f0:61:7e:04:c4:63:55:43:c6:0c:2e:23:37:b2:
6b:9d:6c:87:fe:9a:8b:c8:26:54:e8:17:fb:ad:69:
82:da:60:cb:f3:85:40:94:01:7f:f4:75:66:2c:d0:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:E2:E8:0E:A9:62:00:82:BF:F3:9B:BD:C8:8C:4D:0E:5F:6A:60
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/fxri6A6pYgCCv_ObvciMTQ5famA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:95:8c:71:75:4e:77:1f:4c:9d:83:c9:30:79:2f:b8:4b:e1:
0a:11:f8:fc:94:d3:e5:56:b4:06:01:15:86:dc:ee:a1:07:91:
66:cb:a4:2a:85:86:3b:88:76:34:80:b2:23:ad:8e:e5:3e:b7:
81:64:51:76:2b:08:82:e2:fa:e6:a5:44:27:ac:98:ed:e4:2e:
5c:ae:9f:90:2f:35:27:eb:c5:93:31:7b:48:5b:dc:a2:4b:ba:
03:49:de:c4:3c:90:ac:f5:85:20:a9:d9:fc:c3:43:3a:07:82:
7b:e5:0c:4c:2e:03:d7:eb:d2:2a:4d:37:48:c4:f0:a9:70:c5:
05:67:9c:99:39:31:80:32:dc:30:a0:d1:d9:1c:77:97:3b:7c:
05:62:46:7a:b6:c4:26:5a:11:22:19:81:35:ba:a0:31:b4:45:
67:6b:7b:54:da:8b:73:40:7d:72:26:1f:cc:59:1a:35:86:95:
c8:0e:7e:ec:ec:92:6d:73:65:69:51:8e:1e:9e:45:30:e3:8d:
43:f2:e0:3b:56:16:0e:b3:50:c9:e3:a9:c3:f4:e9:98:09:05:
c1:a1:f3:06:56:0b:ab:6a:b6:0b:c5:23:8f:62:fb:8f:80:af:
0b:ab:32:50:f9:20:95:2c:8d:59:fd:41:30:b1:30:1b:f6:14:
8d:da:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:16 2024 by rpki-client on console-ams.rpki-client.org