Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/f-Cn7PwYRfCnrgCgvqeLSJuEfaM.roa
File: f-Cn7PwYRfCnrgCgvqeLSJuEfaM.roa (raw, json)
Hash identifier: qeSRQop4kGTXOtAWfbbiRFVFFE6TxDz6GhqX8TiT6D4=
Subject key identifier: 7F:E0:A7:EC:FC:18:45:F0:A7:AE:00:A0:BE:A7:8B:48:9B:84:7D:A3
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 07EA6D7A
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/f-Cn7PwYRfCnrgCgvqeLSJuEfaM.roa
Signing time: Sat 01 Jan 2022 14:02:43 +0000
ROA not before: Sat 01 Jan 2022 14:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208034
IP address blocks: 185.194.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132803962 (0x7ea6d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jan 1 14:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe0a7ecfc1845f0a7ae00a0bea78b489b847da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0d:eb:93:ad:4c:d2:f2:9a:2e:21:92:0e:92:
3f:e4:50:33:0f:76:7d:5f:01:5d:60:4d:55:95:39:
5f:8f:40:88:50:ba:2a:17:91:2f:e7:e1:8c:05:ef:
b3:3b:0e:8c:2c:14:12:00:36:c2:80:0c:7b:92:75:
3b:22:65:46:3e:b3:af:e9:9f:0e:92:e4:b1:a2:c0:
0a:1a:88:df:08:43:5d:c3:03:d0:4a:2b:44:c6:38:
8f:8a:7a:ae:dc:02:36:45:3c:5a:7a:b9:76:9c:c8:
7b:2a:3e:d0:04:cb:ab:78:9c:4c:6e:25:4a:da:11:
94:fe:7e:44:b7:d8:27:52:bc:92:3d:76:a4:bf:73:
4d:bc:04:ff:cb:4d:6e:52:2e:3f:fb:78:9e:a0:c1:
eb:3f:8d:c0:cb:17:3d:98:26:d9:e5:33:f0:8f:e2:
73:16:c8:2d:6b:f4:0f:eb:49:b8:23:5a:0a:ea:b2:
a6:b8:bb:71:0f:f0:27:85:27:7f:6f:39:d9:a3:73:
f5:69:42:56:3b:be:59:07:3c:b1:30:bc:00:47:95:
15:ea:f4:77:a5:58:7d:d7:34:29:3b:95:60:f9:09:
2d:c1:fc:28:fd:f4:b2:84:96:73:e3:c3:5f:e4:4a:
b4:3b:15:e0:d3:6d:12:a7:c1:94:e5:69:99:ca:2e:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E0:A7:EC:FC:18:45:F0:A7:AE:00:A0:BE:A7:8B:48:9B:84:7D:A3
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/f-Cn7PwYRfCnrgCgvqeLSJuEfaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.249.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b7:08:f1:c6:03:93:66:9f:66:64:24:9f:f5:74:4f:cc:21:
d6:6c:bb:f3:36:25:f7:14:4e:16:9f:0e:b1:22:3f:e7:50:10:
18:8e:4c:ff:51:d1:8c:5d:82:2b:1a:25:5c:85:ab:16:c5:23:
f3:ee:9d:4b:fe:c2:3d:0b:c1:27:1d:38:c5:85:cb:2e:69:6d:
92:b0:2d:50:a1:b9:f3:eb:e0:32:e9:1f:c1:44:81:0c:24:87:
21:e7:fc:20:b8:d2:d3:ae:59:24:57:d9:b2:02:9f:ba:b4:e5:
a0:df:9e:57:ed:27:57:e5:c0:8a:14:9a:2b:c3:d9:52:92:04:
83:63:3b:44:c7:fd:9d:78:cc:7c:0f:94:d5:1e:4f:7f:7a:04:
1e:18:3e:a2:8e:2c:08:9c:53:57:f1:74:2f:51:db:69:38:32:
1b:43:28:59:e6:31:45:92:03:88:fa:72:f6:5b:11:6f:12:4b:
13:ff:14:79:47:52:01:e3:86:62:1a:fd:cc:cd:75:52:32:e5:
64:49:69:1c:3c:4a:b0:8a:54:3f:7c:99:79:e1:cb:15:e1:bb:
96:bd:7b:56:c5:eb:2c:ce:d6:c7:35:7c:28:14:bf:a3:d3:43:
92:36:49:e0:f3:74:c7:42:1d:e5:73:98:6f:04:43:78:28:c0:
be:3c:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org