Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/CLIJs7JA0V_WejH47dLu87ggDN8.roa
File: CLIJs7JA0V_WejH47dLu87ggDN8.roa (raw, json)
Hash identifier: v6LIH7bmKoFiPpacpm5uBpU3QGETbQ+DRqRtshRH42U=
Subject key identifier: 08:B2:09:B3:B2:40:D1:5F:D6:7A:31:F8:ED:D2:EE:F3:B8:20:0C:DF
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 07F15D90
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/CLIJs7JA0V_WejH47dLu87ggDN8.roa
Signing time: Sat 01 Jan 2022 13:57:04 +0000
ROA not before: Sat 01 Jan 2022 13:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49053
IP address blocks: 185.62.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133258640 (0x7f15d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Jan 1 13:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08b209b3b240d15fd67a31f8edd2eef3b8200cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f0:cc:62:d8:ab:4d:d1:9d:0c:68:45:79:9f:
a2:df:15:f1:e1:96:1c:67:cc:b6:e0:c5:dd:6d:e4:
4a:bd:6e:bd:52:73:dc:05:de:91:05:b7:e0:80:22:
fe:29:46:27:5e:dc:f4:4b:a2:44:9f:95:b3:80:fc:
f3:20:fa:ff:9c:12:ce:ef:54:33:fe:c1:18:e6:7e:
b7:e8:a7:ed:9b:7c:6c:41:45:d6:37:63:62:71:06:
68:d2:fd:da:51:8e:49:07:51:ab:c2:fa:84:1f:4d:
80:51:c1:9d:0e:49:af:f6:fd:b4:c0:2d:1c:6c:fc:
d2:cb:52:40:e4:76:bf:fd:1b:3c:b7:7f:28:16:f8:
fa:7c:d0:a7:74:2a:a1:26:3d:dc:bd:88:15:26:92:
a7:23:b7:07:93:3a:a9:08:6b:49:4c:73:4f:a2:29:
09:0c:22:1f:74:50:b0:09:3c:3c:fe:9e:4a:24:eb:
30:e3:49:70:41:f3:d2:ed:a7:be:de:70:48:7d:d5:
89:2e:16:56:bc:ec:12:90:fc:00:d1:1b:15:40:0b:
76:55:56:8b:97:43:7b:80:01:45:85:20:eb:0d:f2:
44:11:5c:49:a0:48:0a:0a:c2:0c:07:d1:5b:82:18:
09:62:23:ba:a4:00:2c:63:b6:17:83:a4:ef:85:a8:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B2:09:B3:B2:40:D1:5F:D6:7A:31:F8:ED:D2:EE:F3:B8:20:0C:DF
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/CLIJs7JA0V_WejH47dLu87ggDN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.203.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:76:fa:6e:52:bd:b1:c3:ec:04:be:28:0d:a6:c7:8e:34:a0:
af:73:36:95:09:34:d4:72:84:1f:ed:ea:c2:e6:1c:dd:eb:a5:
c0:9b:51:fb:4d:21:14:2a:33:22:2d:2e:a4:68:1f:07:a8:20:
68:5b:21:a3:cb:0f:37:67:ba:3f:56:49:a8:5f:e4:8e:ff:6c:
50:b1:34:aa:25:42:d0:6b:24:a2:3b:41:10:65:1c:68:85:0d:
0c:ff:31:9a:00:07:5a:05:b7:26:0b:cf:c2:f0:29:66:a7:3c:
f1:dd:d0:08:3f:08:97:48:82:ae:e7:86:08:cc:51:f7:87:72:
71:51:fa:86:f5:e0:7c:cb:5c:3c:72:b8:54:d3:ae:d1:db:75:
7a:f7:1a:2d:0b:ee:a4:16:ac:02:ba:b0:9b:74:1b:0a:5b:19:
67:76:ed:75:ad:b3:44:b4:6a:5d:58:bd:25:90:28:76:62:ed:
91:dc:c1:48:07:91:34:96:63:05:6e:48:c5:66:40:b5:bc:01:
ae:49:55:b1:a1:84:0e:46:c2:9d:28:d5:7e:5e:c0:51:a7:08:
24:89:08:ff:11:70:7b:29:c2:6b:b6:54:1a:61:68:09:0c:db:
4e:ee:ba:23:f1:a9:e9:49:4a:db:94:ad:ab:60:12:5c:60:1f:
a4:4c:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:32 2024 by rpki-client on console-fra.rpki-client.org