Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F2g7Nn8MNvvh8OVKHnU1v4ktEY4.roa
File: F2g7Nn8MNvvh8OVKHnU1v4ktEY4.roa (raw, json)
Hash identifier: 0dyrnMb0sYmT3K8YJrBwG3jvii+YyTI50ld8Am0ZTYE=
Subject key identifier: 17:68:3B:36:7F:0C:36:FB:E1:F0:E5:4A:1E:75:35:BF:89:2D:11:8E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16CDAE2D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F2g7Nn8MNvvh8OVKHnU1v4ktEY4.roa
Signing time: Sat 01 Jan 2022 12:01:28 +0000
ROA not before: Sat 01 Jan 2022 12:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3269
IP address blocks: 188.72.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382578221 (0x16cdae2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17683b367f0c36fbe1f0e54a1e7535bf892d118e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:34:c1:d3:34:df:4c:ea:ca:79:bb:14:92:
29:1d:2f:50:57:a4:70:99:72:45:ca:55:a1:16:c4:
85:df:94:8d:c7:56:59:fd:c4:88:17:3f:4c:09:65:
2d:f6:d5:ab:42:52:0d:f0:5e:30:c9:da:ae:69:c6:
81:56:6e:a5:e4:16:a9:e2:d1:e3:66:76:66:2f:e8:
86:ce:5e:fe:8c:95:cf:40:19:ca:3b:d2:61:2f:ff:
0b:c7:5e:9e:34:db:8b:47:cf:62:98:d9:47:8e:fb:
cf:61:f4:68:45:9e:a1:1a:85:88:ac:e0:40:89:c4:
ab:16:da:03:24:47:6a:5c:a1:7d:6a:9f:7d:70:94:
d4:fa:55:70:58:66:ff:24:14:69:fc:c2:58:b8:ea:
90:20:0c:64:7f:cb:3e:61:2b:05:07:0a:e5:2c:f1:
68:4b:0a:ad:6b:b1:54:21:b8:66:43:9c:0d:6d:10:
d6:92:78:50:2b:45:9f:71:29:38:75:bf:45:ee:86:
42:8d:4b:18:a6:51:a4:08:45:1e:ef:09:9a:d2:da:
a7:88:ce:2c:4c:dc:73:37:be:4a:47:3e:fb:6e:96:
91:86:59:6d:87:43:4f:95:65:5d:2e:13:8a:3c:08:
fe:9b:66:39:7d:05:7b:4e:c5:59:6e:48:22:60:ab:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:68:3B:36:7F:0C:36:FB:E1:F0:E5:4A:1E:75:35:BF:89:2D:11:8E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/F2g7Nn8MNvvh8OVKHnU1v4ktEY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.120.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ce:8a:63:13:d9:2d:90:42:d3:c5:41:df:d4:dd:4a:e0:4c:
f5:97:1b:5d:cf:ec:5b:f0:ed:1a:d6:9c:b6:11:87:b5:1f:12:
8e:7f:c1:ec:85:69:5f:2c:df:e6:0c:95:d7:74:c7:b7:23:bf:
82:d7:c1:29:2f:3b:95:46:0d:88:e2:5b:ef:a4:1c:ff:a8:52:
e6:cb:0f:49:61:0c:78:70:d9:b6:6e:f0:43:09:1f:a4:37:90:
46:59:d7:84:3f:f1:a0:8c:43:80:f7:99:ed:9b:97:0c:d3:36:
0a:af:a0:62:2d:42:ce:a0:e7:e3:c7:f2:ea:fe:68:16:4e:c6:
81:15:d9:88:7b:cf:b7:55:66:b1:d9:3f:09:da:4a:30:0b:36:
80:38:f6:f2:7f:1e:08:67:9b:8b:4c:7d:70:6a:0b:4d:3e:26:
43:96:a5:7c:6e:6b:8f:df:cf:69:8e:db:42:79:99:0f:9c:ce:
cb:6c:d1:6f:94:94:0f:0e:a2:45:05:29:a3:ab:23:d5:e3:4b:
4a:60:b5:cd:74:36:d7:7f:1e:e6:91:73:cd:9d:ab:ee:d3:a3:
c5:cc:48:16:7b:06:f5:47:70:c7:ab:a0:ba:59:f4:09:43:d3:
87:88:0e:40:65:98:1d:c0:8e:cd:bd:7e:78:2f:14:1f:00:d2:
2a:9c:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org