Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/C18II7iJOs--u03_oVGxSwVNG8k.roa
File: C18II7iJOs--u03_oVGxSwVNG8k.roa (raw, json)
Hash identifier: 8qZWfujra3vkMUcpp1QQ2l4Wv2tOjXFomFr8tPZjYnc=
Subject key identifier: 0B:5F:08:23:B8:89:3A:CF:BE:BB:4D:FF:A1:51:B1:4B:05:4D:1B:C9
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 018366A0AAC93EBB7198A52FE49371188E24
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/C18II7iJOs--u03_oVGxSwVNG8k.roa
Signing time: Thu 22 Sep 2022 19:15:49 +0000
ROA not before: Thu 22 Sep 2022 19:15:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.234.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:66:a0:aa:c9:3e:bb:71:98:a5:2f:e4:93:71:18:8e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Sep 22 19:15:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5f0823b8893acfbebb4dffa151b14b054d1bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:c0:2c:14:cc:b2:cc:43:e3:45:51:7e:3b:
12:d1:e0:6c:d1:a9:eb:8f:01:43:d5:ca:08:a7:fb:
ce:29:fd:14:51:96:72:e7:23:04:6e:7c:e1:54:09:
df:b1:56:e1:f6:77:65:dd:15:b3:42:97:0a:d3:ed:
af:d5:b4:85:07:8e:be:2a:8c:28:bf:4c:e2:43:59:
f5:7a:da:4a:bf:08:86:36:68:17:92:f6:b0:d1:8f:
0e:0e:c3:a9:43:dc:84:87:a7:cf:99:c0:06:79:3f:
67:66:37:b8:bb:a9:f3:18:7d:ee:64:c5:54:1e:be:
f8:8d:50:c7:a3:1a:9a:71:af:9a:98:11:51:5c:41:
c5:5f:41:6b:5c:0f:0a:dd:28:41:d6:e7:35:04:ea:
62:6c:5f:de:40:41:28:f5:2a:00:d6:bd:e9:4b:d0:
e2:7e:60:40:58:a4:df:1e:f7:9d:32:da:f7:a1:aa:
f1:9d:e7:34:49:c6:1c:00:e6:ce:e2:67:62:67:4c:
4d:d3:3a:8c:e2:bf:72:e3:5d:14:7e:e5:c5:37:6e:
52:25:81:3b:b1:ff:e2:de:8f:41:cf:44:4d:94:f4:
81:e1:35:af:de:11:2a:27:46:50:89:1c:78:2d:66:
bc:d2:e3:6d:85:82:2e:0c:c0:91:fa:a6:f8:f6:a7:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5F:08:23:B8:89:3A:CF:BE:BB:4D:FF:A1:51:B1:4B:05:4D:1B:C9
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/C18II7iJOs--u03_oVGxSwVNG8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.100.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6a:aa:c0:61:55:a0:6d:6f:56:06:81:d3:a2:8d:3c:80:b9:
cd:2e:ea:db:be:e0:04:8e:f3:4b:25:14:19:89:f5:11:fb:66:
16:db:32:25:50:1c:9e:c3:b2:ef:57:98:18:5c:02:37:90:94:
b5:02:16:95:c7:a7:36:6a:e2:e9:a2:8b:b8:f6:37:73:b3:cf:
c3:a1:8b:fa:db:d6:3f:06:69:fe:90:a2:ae:3b:19:54:c6:24:
14:bc:43:df:99:17:bb:82:e2:42:a6:cc:c8:04:ad:05:b4:15:
58:d2:23:dd:97:06:24:e9:9b:66:1e:ec:ed:be:57:c5:76:f0:
c0:be:a5:58:a6:54:39:e7:06:6b:89:f7:5f:bf:22:e5:b3:30:
19:0d:4b:a4:b1:ca:50:fb:53:a7:da:45:5d:92:a4:ea:3b:2d:
91:bb:dc:90:96:b1:96:07:4c:c8:e7:5b:e8:f9:63:80:bb:cc:
25:00:0f:4e:be:9a:50:71:98:f6:f5:5e:d2:5a:b9:c7:a2:1f:
6a:5c:72:47:f3:45:3d:82:14:ad:76:1a:dd:01:09:8c:dd:bf:
ac:f8:61:47:84:17:6d:98:28:27:d5:26:2c:57:49:3c:5d:c9:
44:44:f3:ce:a8:11:71:67:b1:fc:d5:41:1b:0f:8f:a4:e1:70:
92:a1:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:24 2024 by rpki-client on console-ams.rpki-client.org