Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/1C20OoF9kjXBbuIuauk8tU02wHs.roa
File: 1C20OoF9kjXBbuIuauk8tU02wHs.roa (raw, json)
Hash identifier: 4gj+4I8i4WoAOJwcBb+cuHn1ig39XsvvuYN7+Dhmc4E=
Subject key identifier: D4:2D:B4:3A:81:7D:92:35:C1:6E:E2:2E:6A:E9:3C:B5:4D:36:C0:7B
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 07EA08B9
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/1C20OoF9kjXBbuIuauk8tU02wHs.roa
Signing time: Sat 01 Jan 2022 14:02:42 +0000
ROA not before: Sat 01 Jan 2022 14:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202796
IP address blocks: 185.194.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132778169 (0x7ea08b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 1 14:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d42db43a817d9235c16ee22e6ae93cb54d36c07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:c2:58:20:7b:dc:1a:1c:9b:5d:b8:9b:1d:
d3:4f:0b:93:37:db:40:8f:54:4c:80:ef:b4:87:f5:
cc:b1:1a:02:b1:fd:92:df:9a:e1:05:e2:7b:8c:45:
50:53:d8:22:79:4c:c1:61:cc:60:17:47:d6:0d:e6:
08:bf:99:ad:37:83:48:13:a0:41:2a:57:f7:ec:04:
7a:74:7c:1d:f5:25:26:7d:dc:4f:4b:66:7f:37:81:
23:a6:4c:79:dc:5f:25:17:19:e5:62:53:fd:1e:c5:
e7:9e:f8:75:7d:55:e9:9f:fd:63:78:ae:8f:28:7b:
e9:b5:42:29:22:70:79:f7:c1:f0:20:3c:d2:4b:91:
4d:c3:69:a5:ee:c5:f8:e9:8a:a3:4f:9b:84:e3:db:
6f:f3:84:4d:11:02:c4:9c:37:71:f2:21:5a:07:98:
7e:a3:6f:76:3e:50:f7:47:2d:2e:90:64:8a:1a:ef:
13:1c:9f:5a:80:98:93:34:ec:a9:ac:e1:e6:43:31:
da:ad:f4:5e:22:11:54:d6:99:7b:61:64:d0:9e:11:
3c:35:bc:67:ae:99:98:a4:5a:86:4e:91:d1:d4:bd:
cb:fa:71:aa:38:34:f8:0a:91:9a:8f:2f:a5:5f:66:
70:a3:5d:e1:57:ee:48:46:4b:98:12:fd:c7:9b:1c:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2D:B4:3A:81:7D:92:35:C1:6E:E2:2E:6A:E9:3C:B5:4D:36:C0:7B
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/1C20OoF9kjXBbuIuauk8tU02wHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.250.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:73:32:bc:34:4d:7b:47:d5:5b:eb:da:84:b1:d2:6c:ef:
ab:cd:2f:f6:c2:8f:71:da:7f:e5:63:4f:76:86:37:90:54:6d:
10:90:40:5a:19:2c:db:9d:cc:fd:86:19:a4:22:88:d8:46:51:
c2:6f:20:91:59:25:dd:e5:4c:4c:64:a1:3b:97:70:f1:1a:13:
21:93:29:b1:65:2f:36:4e:ce:93:08:bd:a5:76:82:4d:47:c7:
98:2e:48:64:f4:cd:35:c4:11:ad:1e:d1:06:c4:64:93:70:1e:
4a:4c:74:17:67:da:ca:97:d2:67:03:ee:83:f2:ee:b6:03:d7:
61:b2:a8:5d:c4:ac:66:7e:93:a5:e2:dc:80:a8:fe:f9:a0:ed:
8a:26:2f:91:d7:5a:09:1d:ff:d5:9d:11:82:ea:1a:ee:2e:29:
2d:78:35:d8:fb:89:02:46:f0:7e:33:53:15:6e:70:1a:89:59:
17:2b:53:6e:2d:1b:6a:10:1f:a0:0f:3f:1b:4f:ff:ec:89:d9:
ea:9a:f1:bb:7a:26:95:7a:8b:fc:ce:e7:d0:c3:1b:50:9d:8b:
7e:75:19:ee:b6:ec:32:bc:fe:b2:39:43:63:c7:8a:4b:68:54:
c8:a3:79:32:47:00:d0:96:5b:ac:aa:24:e3:a2:7e:1e:24:8d:
43:87:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org