Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/1-MvGSi65sHZzUPouMFy4PNdZxCA.roa
File: 1-MvGSi65sHZzUPouMFy4PNdZxCA.roa (raw, json)
Hash identifier: +c/1NALnC0R0GpZZOIzs0dPpdzRPK1fKAonU1JjHobM=
Subject key identifier: F8:CB:C6:4A:2E:B9:B0:76:73:50:FA:2E:30:5C:B8:3C:D7:59:C4:20
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 02A838
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/1-MvGSi65sHZzUPouMFy4PNdZxCA.roa
Signing time: Tue 24 May 2022 20:01:13 +0000
ROA not before: Tue 24 May 2022 20:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210191
IP address blocks: 185.212.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174136 (0x2a838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: May 24 20:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8cbc64a2eb9b0767350fa2e305cb83cd759c420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:65:8e:6f:73:b2:2e:20:4b:b9:15:09:2f:
ee:1d:2f:69:4c:ad:41:c6:69:f0:9a:3d:49:39:b1:
06:4c:35:14:ea:f6:78:18:47:aa:fb:73:ec:5f:61:
4e:23:13:5b:6a:ab:0c:06:d8:ba:af:2d:95:e9:6c:
52:54:24:2c:fa:70:f2:dc:92:f0:de:d0:b2:0b:ef:
8f:4d:c0:ec:cd:bc:0a:49:94:19:a1:68:56:86:e2:
00:0b:a7:b3:4b:d4:e1:dc:4e:ec:d0:c7:82:71:49:
e4:da:db:4c:44:17:3c:e6:9c:3a:b7:98:cd:d4:79:
3b:52:c0:23:88:a3:20:8c:80:dd:36:de:d8:d6:ee:
c0:8b:31:1a:bc:2f:de:ed:e9:bd:4d:c3:7a:48:36:
b4:d3:d8:02:dd:8d:48:5e:87:3c:84:2a:78:a0:cc:
22:93:e6:52:7e:7a:64:16:07:a6:53:2d:43:e2:72:
f9:70:ba:a0:2a:6a:cd:ca:17:64:44:b3:47:91:3e:
0d:c3:5b:25:38:3f:e5:3b:bc:50:ae:1a:da:f7:87:
1d:1b:7c:d4:4d:ff:7b:7a:e6:cd:38:a2:5f:2f:18:
61:42:5c:ce:5a:13:8f:bc:8b:ca:c6:6d:8b:2b:2d:
32:39:57:b5:76:f7:d2:59:13:a7:f0:7a:a4:ff:4a:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CB:C6:4A:2E:B9:B0:76:73:50:FA:2E:30:5C:B8:3C:D7:59:C4:20
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/1-MvGSi65sHZzUPouMFy4PNdZxCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:da:80:09:8d:3a:38:f0:01:79:21:12:86:89:62:aa:26:ee:
3c:1e:f0:9e:dd:07:36:99:eb:ac:9a:bc:7e:b7:ac:8c:15:db:
b9:15:26:0d:e5:5e:77:8e:c5:67:83:a3:3a:93:80:20:15:23:
43:dd:ac:d4:24:0c:47:38:72:9e:d8:30:85:c1:c9:a5:89:e7:
e2:24:ab:44:67:14:72:d6:1a:71:12:40:db:32:8b:27:27:cc:
ca:e6:fc:f2:04:6c:04:e5:39:bd:eb:8c:37:b1:83:2f:e3:c1:
f9:3b:73:68:3a:3f:d4:ad:4d:1c:7f:c8:77:62:e0:2b:7e:1c:
6d:76:8b:50:3e:fb:c1:b1:cf:05:07:f6:20:49:a8:b1:1d:aa:
9c:30:ba:92:99:d3:41:0b:dd:0a:e2:57:7b:c4:8d:70:fd:eb:
a1:8c:b2:c9:5a:d5:43:f7:64:68:b1:82:b8:61:86:58:2b:7a:
1c:43:73:2e:0b:ae:c2:c2:dc:7a:c3:d7:fa:76:1d:19:02:68:
9f:07:60:9c:d5:1f:17:3f:be:4f:1a:6a:e9:0c:ee:16:84:b5:
ed:b9:2d:86:f7:34:42:9c:cf:79:e1:cb:7a:da:fd:6c:de:57:
6e:aa:73:54:45:ab:e7:e8:96:ad:3a:fe:63:24:81:5e:6b:ed:
94:76:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org