Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/997UjSu_FuV82N6aYy77Pk4h6rc.roa
File: 997UjSu_FuV82N6aYy77Pk4h6rc.roa (raw, json)
Hash identifier: 4QMF3vPy60O/zyjtqUpd7GvO8mjrUqZAiRfBDUn6WC8=
Subject key identifier: F7:DE:D4:8D:2B:BF:16:E5:7C:D8:DE:9A:63:2E:FB:3E:4E:21:EA:B7
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 07CACDEE
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/997UjSu_FuV82N6aYy77Pk4h6rc.roa
Signing time: Sat 01 Jan 2022 01:54:56 +0000
ROA not before: Sat 01 Jan 2022 01:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57390
IP address blocks: 185.68.56.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130731502 (0x7cacdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 1 01:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7ded48d2bbf16e57cd8de9a632efb3e4e21eab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:9e:96:a2:8f:fd:74:77:8a:92:35:04:22:
a0:a3:9f:5a:fd:dd:21:f6:86:42:a7:15:d5:2e:e2:
1f:94:13:25:28:29:2a:2b:74:6d:70:43:4b:9f:18:
b3:a2:3e:f3:b6:14:db:7d:1e:40:ca:6d:0c:c4:97:
e6:e9:6c:7f:94:20:91:e7:d8:1c:bb:f3:03:ed:1b:
6d:9a:7d:88:4d:8b:f2:b1:a1:ff:83:a3:fc:b6:8d:
f3:38:df:e8:a4:2c:c9:09:65:ca:f9:aa:19:e8:35:
43:15:25:a7:97:f3:c9:10:ee:f5:df:6a:38:3c:3e:
f5:d9:f9:ff:95:6c:10:4f:24:5a:c7:53:86:12:d7:
22:4d:9b:9f:a3:0e:6f:d8:ba:2d:ad:15:29:24:70:
d8:c6:f8:78:33:1f:77:d1:e5:78:c8:cf:4e:08:7d:
05:1f:b5:c6:4a:8d:07:6e:82:13:4b:07:19:d0:1c:
93:85:f7:07:df:5a:5d:c4:24:4d:3d:f3:49:3c:d4:
dd:37:00:32:3b:70:a2:08:27:b4:66:63:86:6a:b9:
d9:98:8b:89:17:ca:a6:8a:2f:f5:63:c1:fe:e6:0d:
9d:ee:bd:ed:53:f5:de:d2:85:28:95:05:fe:44:b4:
69:8f:30:9b:d0:bb:e2:d8:15:b9:f4:ed:be:c3:16:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:D4:8D:2B:BF:16:E5:7C:D8:DE:9A:63:2E:FB:3E:4E:21:EA:B7
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/997UjSu_FuV82N6aYy77Pk4h6rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:ed:21:e3:95:23:55:65:57:35:25:15:90:68:c0:57:18:12:
96:76:82:86:0f:06:ff:85:3f:1f:40:36:3c:19:e5:f6:95:ec:
b3:3a:ab:9e:1c:d7:21:11:87:33:b9:9e:18:68:73:28:30:28:
cd:4f:46:a0:e6:4d:38:cd:7a:75:da:67:e9:f6:3e:f7:0f:84:
ae:cc:91:cc:34:0b:5d:06:db:2a:c0:d4:65:94:e3:ee:76:74:
9d:ce:68:00:b2:be:99:e5:2c:2d:fc:73:3a:e0:b2:20:93:bc:
02:3f:0f:46:8f:d7:ec:1e:44:f9:fe:ea:08:61:73:89:ad:29:
72:9e:dc:c1:fc:8e:48:cd:9b:97:2f:d0:5a:12:b6:67:08:75:
5b:39:57:a8:22:5f:75:70:9f:85:83:11:99:50:4a:9a:07:85:
19:06:9c:2e:62:c4:a8:f4:6e:b7:f1:1a:92:d8:bc:b6:71:21:
08:e5:5d:88:50:44:78:d6:53:92:7b:16:1a:91:3b:f4:d7:1b:
5e:5a:b9:3d:b0:47:08:d4:37:c8:69:a0:c6:c1:25:93:cd:da:
92:1f:19:ef:f5:7d:fb:13:fd:15:ab:b5:c7:2a:8d:d6:05:81:
4e:7d:1d:44:d2:92:4a:cf:12:32:30:2e:5c:11:06:e4:cf:f9:
71:60:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org