Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ng7v7yUfsYUWeisRxDNHbk8mNQo.roa
File: Ng7v7yUfsYUWeisRxDNHbk8mNQo.roa (raw, json)
Hash identifier: ZnM57p6iyKGUrXQJLQfB1VhOuFjwVTo9MIgxiCLjkas=
Subject key identifier: 36:0E:EF:EF:25:1F:B1:85:16:7A:2B:11:C4:33:47:6E:4F:26:35:0A
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01852EA299380FEA3C99251F7746E2D7E83D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ng7v7yUfsYUWeisRxDNHbk8mNQo.roa
Signing time: Tue 20 Dec 2022 08:24:45 +0000
ROA not before: Tue 20 Dec 2022 08:24:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:a2:99:38:0f:ea:3c:99:25:1f:77:46:e2:d7:e8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Dec 20 08:24:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=360eefef251fb185167a2b11c433476e4f26350a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:0e:13:1e:82:72:bf:21:9f:c2:e2:a1:9b:
21:fa:5f:b8:2b:d5:8d:1a:e1:4f:5d:d5:c5:b0:ed:
48:5b:8f:b6:6a:9a:a5:22:63:7a:01:33:37:6b:91:
e3:24:e5:46:98:15:48:69:e9:6b:fe:a4:f0:ee:84:
03:4c:b0:0c:45:cc:80:93:1e:d9:ab:94:e4:03:b8:
24:b8:73:78:48:0f:ea:ab:99:f5:fb:33:b6:ce:e5:
5f:d2:30:2e:d2:aa:32:a0:82:ac:a6:72:c1:c5:75:
66:62:4b:26:a5:d7:6b:6d:6e:5f:50:d3:06:af:2e:
3f:f6:f9:9c:70:89:61:45:a2:af:52:28:60:40:d0:
47:62:08:40:ae:f6:e4:ad:cb:4d:b4:9d:7e:74:3c:
f8:cd:42:90:8e:b6:49:fe:e9:52:91:84:6e:16:32:
43:f9:25:fa:3a:76:24:53:53:59:d4:4f:c9:f6:d6:
fd:58:e8:85:c4:c9:6d:0e:8f:2a:cb:38:9c:c4:f6:
eb:0a:2f:45:44:f0:51:43:77:4f:36:69:d5:c8:ee:
7c:43:dd:bd:d7:4b:a9:36:c2:25:74:a2:4c:e6:5a:
7a:d5:83:26:40:bf:5b:d6:cb:fe:c1:e5:d9:86:c5:
57:b4:48:5b:e2:82:3e:a5:ef:be:49:71:29:fe:c9:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0E:EF:EF:25:1F:B1:85:16:7A:2B:11:C4:33:47:6E:4F:26:35:0A
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ng7v7yUfsYUWeisRxDNHbk8mNQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:65:6e:5e:78:be:c1:51:90:6e:b6:47:a8:25:17:76:b5:31:
d9:f8:95:47:a3:34:d1:34:14:d4:56:8e:ea:11:19:1d:ea:ff:
7c:39:f9:87:55:6b:c7:54:5a:ed:06:a2:4f:15:92:fe:a0:e8:
32:18:4b:c6:5a:99:c5:d6:c2:21:4d:03:ad:1a:e1:75:ad:c0:
d2:dc:f3:16:ce:06:6d:0e:73:00:81:81:e1:eb:4e:3e:d3:62:
68:b6:2c:1f:17:1d:e1:a4:7f:61:c1:87:d8:5e:3f:af:7d:c1:
a8:02:61:a3:0e:8e:a1:dd:85:bd:f8:51:b1:44:b9:d6:f3:2b:
2a:82:a6:6e:a4:8e:76:c2:e5:3d:ae:d8:33:c6:38:34:53:f1:
0f:27:51:12:a9:e6:f7:06:b0:46:53:84:4a:08:31:62:c5:e3:
be:76:51:64:45:46:07:3a:c9:0a:d0:4d:a8:f9:af:d6:20:87:
5b:38:37:3c:89:8f:fa:f3:84:ca:90:9d:ef:a9:c1:10:8c:db:
e3:a2:2c:c7:08:24:af:76:4d:d8:56:b4:1c:46:38:00:1b:b0:
9b:72:59:54:bb:57:a8:cc:b9:92:ed:a0:74:7f:b7:c3:ab:18:
7f:77:5e:be:d9:89:ab:5a:87:e0:08:2a:a1:d4:ae:7b:9e:c5:
e1:a2:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org