Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/sdWI49H2kRdSR1owpKOqlVMZoo8.roa
File: sdWI49H2kRdSR1owpKOqlVMZoo8.roa (raw, json)
Hash identifier: ypqVQb+dXdTXvlKf2MVsghgxZnngtNhm+hhreR0PBEA=
Subject key identifier: B1:D5:88:E3:D1:F6:91:17:52:47:5A:30:A4:A3:AA:95:53:19:A2:8F
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 04998D
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/sdWI49H2kRdSR1owpKOqlVMZoo8.roa
Signing time: Tue 24 May 2022 20:27:49 +0000
ROA not before: Tue 24 May 2022 20:27:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205604
IP address blocks: 185.212.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301453 (0x4998d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: May 24 20:27:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1d588e3d1f6911752475a30a4a3aa955319a28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:77:6c:2c:3b:e2:c4:cc:a1:19:95:19:3d:
88:7b:b7:72:09:9b:95:74:90:81:de:85:dd:7b:87:
ed:e9:21:b3:03:b7:76:9a:0c:7f:80:ab:2a:50:08:
38:ac:87:7c:39:a2:2b:8a:9d:b2:2c:49:6a:7e:39:
ef:1d:ef:91:45:4d:9b:3a:18:68:e0:7e:95:11:5b:
4d:ad:a3:ec:ad:a5:a5:b4:70:fc:dc:a4:01:84:66:
f0:4e:7b:69:90:41:be:7b:76:3b:44:8b:e1:71:ce:
1b:71:ae:e7:80:6d:77:29:f0:72:3c:28:33:b4:3b:
ab:4d:56:36:d8:81:bd:51:b4:00:a5:88:fe:c0:4e:
c9:7b:61:48:bb:a2:34:c2:9c:d8:de:48:e5:70:49:
b4:5d:17:f0:57:94:40:dc:36:39:f4:1f:9f:ca:e3:
24:de:07:90:12:ee:14:ca:5e:aa:28:1e:70:fe:91:
f6:bf:99:6c:d8:a2:a8:db:09:1c:83:e2:fa:33:d2:
5a:9d:f1:8a:4d:c5:fb:6b:43:fd:f3:69:87:ba:33:
38:f4:80:10:d4:12:a1:67:38:8a:1b:35:1b:6a:73:
c1:39:bc:b0:08:85:b6:00:87:8a:9e:6c:82:f2:e2:
76:c0:21:1e:b6:ea:f3:2f:e0:f7:85:22:19:f9:d1:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:88:E3:D1:F6:91:17:52:47:5A:30:A4:A3:AA:95:53:19:A2:8F
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/sdWI49H2kRdSR1owpKOqlVMZoo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:50:f3:a1:ac:7b:78:be:b6:2c:7e:dc:71:66:f8:9e:47:6b:
af:6b:8b:d4:2a:55:c1:12:f6:97:f2:66:70:7e:86:9a:5b:1c:
80:61:39:2c:59:80:cf:b4:e4:22:06:80:d9:84:07:de:a3:81:
6e:35:b4:73:27:43:85:96:8f:22:40:3d:98:f7:a2:0c:3d:1a:
bd:16:23:04:ff:26:64:ce:6a:2e:e6:78:ee:51:58:90:6f:16:
71:ae:33:79:5d:be:6e:11:81:15:40:82:ab:6d:6a:17:0c:1e:
43:53:19:4e:cf:4c:0a:67:ce:c1:54:f4:b9:7e:a4:60:d6:ff:
41:44:88:03:65:11:10:80:01:b0:53:d4:6f:3b:21:f6:0f:9c:
4a:0a:bb:f8:a3:57:75:2f:f3:fc:a6:77:86:9f:81:84:b4:b7:
ff:65:59:16:a7:97:34:a9:ab:ba:6d:dd:b2:6c:38:63:e6:9c:
f4:ff:d3:ae:36:f7:9f:26:ca:d7:48:b0:63:19:e0:a3:d9:76:
db:34:81:ee:1e:f0:fb:77:3d:f0:1f:c7:79:e9:25:43:b6:82:
41:eb:3d:46:f3:09:1d:95:fd:0d:af:3d:00:1e:ae:68:a8:10:
da:e8:89:57:0c:35:98:59:42:b2:8a:9d:6b:89:49:0b:0d:31:
2a:d6:5f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org