Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/no_ZfA9EPdlUvAclXL3WlPvZcMU.roa
File: no_ZfA9EPdlUvAclXL3WlPvZcMU.roa (raw, json)
Hash identifier: qhM6ScTJd0fQTgfIKFP8RkmcxAJ16dBVtlPh1GRw3NQ=
Subject key identifier: 9E:8F:D9:7C:0F:44:3D:D9:54:BC:07:25:5C:BD:D6:94:FB:D9:70:C5
Certificate issuer: /CN=cb2e04d7ee6961cbeb6a2405141bb1e793b0e794
Certificate serial: 0BC2511D
Authority key identifier: CB:2E:04:D7:EE:69:61:CB:EB:6A:24:05:14:1B:B1:E7:93:B0:E7:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yy4E1-5pYcvraiQFFBux55Ow55Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/no_ZfA9EPdlUvAclXL3WlPvZcMU.roa
Signing time: Sat 01 Jan 2022 10:53:58 +0000
ROA not before: Sat 01 Jan 2022 10:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21183
IP address blocks: 185.221.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197284125 (0xbc2511d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2e04d7ee6961cbeb6a2405141bb1e793b0e794
Validity
Not Before: Jan 1 10:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e8fd97c0f443dd954bc07255cbdd694fbd970c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:92:8a:11:67:18:e8:1b:9f:9a:c6:14:16:
f0:87:66:57:21:43:e7:bf:73:66:20:4a:09:1b:fe:
64:fd:98:b1:57:ae:8f:78:2a:a0:8b:ba:b4:e9:0d:
eb:ac:62:bd:05:c3:61:4e:c3:91:34:15:c3:c2:c5:
c8:f4:f3:e9:3e:3e:2a:5e:03:09:cb:d7:4b:fc:c8:
2e:60:92:c7:e1:4d:fb:2f:ea:b7:e1:6f:d0:41:da:
67:a9:72:69:5a:b7:a5:e1:9a:ef:91:22:0e:79:00:
3e:83:79:be:26:9d:c3:60:2b:d9:be:25:e1:68:52:
ce:c4:42:02:98:8d:d0:c4:7a:6c:8f:6e:10:ef:a5:
fe:e8:40:81:4c:99:4a:ff:a3:a2:85:5f:9e:5e:7b:
d8:43:81:9b:be:0c:67:28:05:d0:86:61:24:ec:c2:
43:07:7c:12:28:0d:22:82:37:a2:bd:87:1c:d2:a2:
f4:75:ec:5a:ee:33:5f:ab:11:32:98:8f:21:c7:f8:
34:04:bb:a2:1b:12:65:bb:00:1f:6e:cc:29:1a:26:
b8:5a:d7:07:aa:cd:0f:0a:7b:eb:26:bc:96:ab:2d:
19:d8:0e:4b:fe:2e:97:31:17:3a:2b:62:21:41:d1:
a8:15:c0:29:f1:72:a2:8b:ec:42:91:77:d8:0c:db:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:D9:7C:0F:44:3D:D9:54:BC:07:25:5C:BD:D6:94:FB:D9:70:C5
X509v3 Authority Key Identifier:
keyid:CB:2E:04:D7:EE:69:61:CB:EB:6A:24:05:14:1B:B1:E7:93:B0:E7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yy4E1-5pYcvraiQFFBux55Ow55Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/no_ZfA9EPdlUvAclXL3WlPvZcMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d4799f-947f-4b8a-876e-851cb2758775/1/yy4E1-5pYcvraiQFFBux55Ow55Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.252.0/22
Signature Algorithm: sha256WithRSAEncryption
43:90:e8:c9:e1:8b:58:4d:fd:b2:ec:e7:22:72:c8:52:f5:09:
81:94:86:3a:f8:a3:f0:ec:12:a0:24:a5:fc:b6:fe:20:82:a9:
7f:69:d8:35:eb:bb:6d:18:97:79:3d:92:09:6f:4b:c8:8d:57:
88:11:31:41:9b:68:1e:e5:4e:3b:c7:80:ef:b4:a3:32:e4:52:
6f:d9:71:f0:cd:58:84:e3:8f:9d:36:09:4e:d7:06:e1:c6:d5:
23:d8:07:cb:0d:d3:8d:bc:69:f6:f9:92:ca:10:5f:85:59:ef:
69:01:2a:b0:46:db:13:e1:4f:3e:a6:77:21:ae:2d:b6:20:a8:
22:1a:a5:87:bc:1a:04:d8:49:b2:b2:33:1c:0c:29:b2:8f:54:
b5:e1:3b:23:30:e5:8b:b6:2c:4e:97:bc:aa:6a:58:55:b4:7a:
9e:4e:fc:1f:df:e1:40:3d:e3:32:fd:7c:65:27:2e:3d:cf:0e:
b3:3e:3f:6a:b0:a7:c0:e8:fd:3a:22:27:55:22:31:57:35:e8:
a2:4d:9b:47:9f:69:67:f0:4f:27:f2:5f:e7:4f:ee:95:ca:cf:
1d:71:90:e9:a6:85:ad:b9:70:ef:68:1b:26:1a:60:f1:e1:8b:
e3:90:28:6d:52:ce:db:bf:b1:51:10:71:a2:c7:48:dc:26:0f:
fd:48:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org