Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/sgLHeNJL71JWIO1ebfnQeWV5rwY.roa
File: sgLHeNJL71JWIO1ebfnQeWV5rwY.roa (raw, json)
Hash identifier: 9z+94wx6H2EH0zZXvb4YG9PjLqhSsqXQF625Kh9E6VA=
Subject key identifier: B2:02:C7:78:D2:4B:EF:52:56:20:ED:5E:6D:F9:D0:79:65:79:AF:06
Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Certificate serial: 018262624393A586DF78826A3E0D524FFB59
Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/sgLHeNJL71JWIO1ebfnQeWV5rwY.roa
Signing time: Wed 03 Aug 2022 06:26:23 +0000
ROA not before: Wed 03 Aug 2022 06:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 185.13.208.0/22 maxlen: 22
2a03:a540::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:62:43:93:a5:86:df:78:82:6a:3e:0d:52:4f:fb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b
Validity
Not Before: Aug 3 06:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b202c778d24bef525620ed5e6df9d0796579af06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:af:24:0f:f3:a3:ab:21:ae:04:5c:97:ae:
6e:83:5a:8d:a2:ef:c9:2b:c8:e7:f1:82:98:f7:d6:
dc:2c:97:71:19:f0:e8:10:a7:34:0e:69:67:78:db:
ce:5d:60:08:24:07:26:4e:eb:dc:bf:3c:8c:61:f3:
4c:73:0d:e2:cd:9c:45:02:40:7a:55:15:e4:70:08:
01:7b:d0:e0:06:c9:b2:9e:c9:87:86:65:7d:f1:dd:
42:35:1d:e6:84:d5:d5:a7:f8:f5:0c:7f:b1:0d:21:
24:bc:b3:2f:b7:fe:bc:62:5c:fc:22:d3:4a:24:b5:
4e:4c:0d:37:fe:bc:dd:c2:7b:5a:5c:45:b5:94:d4:
16:34:77:d5:b6:73:11:9d:f7:72:7a:7e:09:33:60:
01:6e:7a:15:65:f0:4c:e2:9d:d0:36:7a:b0:65:f8:
a9:5f:77:a7:51:40:7e:39:c7:0b:60:f2:9a:33:06:
31:a7:ed:59:25:3b:2c:ae:e9:41:9e:99:78:27:b1:
8c:db:de:22:10:0c:d3:01:fa:04:13:3c:03:31:6e:
73:5b:1c:27:6a:a3:d5:7c:fe:4f:76:fe:a1:1a:86:
48:4c:e1:85:d0:bb:4f:72:25:aa:82:3a:84:db:88:
ed:61:5f:25:4e:01:bc:85:db:dc:f0:e5:b2:21:0c:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:C7:78:D2:4B:EF:52:56:20:ED:5E:6D:F9:D0:79:65:79:AF:06
X509v3 Authority Key Identifier:
keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/sgLHeNJL71JWIO1ebfnQeWV5rwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.208.0/22
IPv6:
2a03:a540::/32
Signature Algorithm: sha256WithRSAEncryption
21:78:ef:38:e4:bc:0f:5e:5b:2a:44:ec:20:c1:ea:1f:42:ae:
7e:a3:41:fb:f2:f5:e7:d3:dc:4b:e0:1f:e5:6b:af:d4:4b:7c:
69:5d:0f:05:73:0d:cb:fc:5e:fc:d6:6c:3d:94:d9:e1:e8:f9:
58:8c:72:75:b4:63:c2:7a:4b:33:79:dc:63:57:52:fe:3d:76:
2d:28:5b:05:ee:4d:1d:6f:9f:9f:df:3d:19:fb:fa:ba:62:1c:
75:8e:c0:bf:61:db:59:95:1c:db:93:c2:6c:ef:2d:98:fd:f7:
a9:bb:22:4e:d2:6d:93:58:dc:8c:f4:53:1c:59:c6:c7:dc:a7:
94:37:59:7e:1f:2c:b7:17:81:7b:4c:bb:c0:e8:82:1a:c6:31:
29:3a:d6:8c:bb:c1:c4:40:ff:c0:98:4f:67:ae:d8:0f:b6:6e:
0e:56:9b:4a:10:33:fd:f1:8b:a9:69:70:25:7b:be:b6:55:34:
89:d0:9d:c9:cf:8e:2a:5a:d5:41:15:9d:c6:e4:96:4a:b5:de:
c6:18:71:71:e4:76:f1:4a:33:d2:dd:06:82:99:ed:c3:9a:ba:
89:53:02:b9:89:4b:92:e5:54:5d:61:c4:68:5a:3d:c3:b5:93:
a3:51:f1:6b:e1:ef:56:7d:57:1d:66:53:97:dc:29:17:ec:43:
c9:8b:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:39 2024 by rpki-client on console-fra.rpki-client.org