Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/3I-K9hG1ZM0v25WhOt1s6EH64Vc.roa
File: 3I-K9hG1ZM0v25WhOt1s6EH64Vc.roa (raw, json)
Hash identifier: imjvP7GV/XhRAQfTdNyk7ZujZWuGL4DOPBq/4+Rs+iw=
Subject key identifier: DC:8F:8A:F6:11:B5:64:CD:2F:DB:95:A1:3A:DD:6C:E8:41:FA:E1:57
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 0182CA195C0238789E65B73C72DCD00F0F42
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/3I-K9hG1ZM0v25WhOt1s6EH64Vc.roa
Signing time: Tue 23 Aug 2022 09:47:15 +0000
ROA not before: Tue 23 Aug 2022 09:47:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.221.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:19:5c:02:38:78:9e:65:b7:3c:72:dc:d0:0f:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Aug 23 09:47:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc8f8af611b564cd2fdb95a13add6ce841fae157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:04:6c:50:43:04:23:1e:1f:48:73:ae:b2:
5e:da:06:e7:a2:8b:a1:3d:1e:7c:2c:f9:49:17:30:
2a:fb:55:ca:40:b4:e5:e6:03:c3:83:ca:50:1f:e0:
1f:18:23:2d:d0:b6:a8:b7:83:b9:43:ae:fe:c2:7c:
0d:36:3e:a7:95:a4:f6:ce:39:40:8e:88:8a:2f:da:
27:3b:55:88:aa:87:2c:a9:c3:d0:b6:53:07:63:0e:
f9:ff:41:57:a3:e4:59:19:08:d5:ae:dd:c5:28:8c:
37:13:64:f0:10:ef:da:9e:fc:c6:a8:70:ad:b9:5a:
40:c2:0e:48:f6:d5:9b:27:c7:3b:36:3d:a8:74:7f:
e7:b2:4e:b0:71:41:2f:69:fd:71:8e:bf:52:74:7c:
76:27:47:ce:83:8d:10:95:c4:c1:3f:7e:27:02:89:
69:af:92:3f:22:1d:45:ae:0a:be:b3:bb:e0:97:e4:
00:5d:c5:95:7c:e9:3f:2a:16:f5:40:37:ed:fd:28:
84:36:1b:c7:64:cc:07:74:65:0c:a9:44:98:6a:78:
a5:c4:ce:41:33:b0:37:cd:c3:40:1d:a0:2a:be:27:
ea:c9:40:ab:bf:1a:17:25:88:16:92:80:81:7c:8e:
1b:41:5c:6f:6e:9d:8a:6d:85:67:be:34:a3:d2:31:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8F:8A:F6:11:B5:64:CD:2F:DB:95:A1:3A:DD:6C:E8:41:FA:E1:57
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/3I-K9hG1ZM0v25WhOt1s6EH64Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.219.0/24
Signature Algorithm: sha256WithRSAEncryption
64:93:b2:a9:ac:91:47:b2:ce:b7:86:7c:70:86:ee:b3:71:44:
87:bd:b4:19:7d:45:0b:ec:e3:e7:c5:e2:4c:dd:b2:49:69:e3:
88:05:de:99:dc:d7:cc:7c:eb:b7:4a:93:9a:72:6b:5d:72:bd:
48:c0:f9:e7:17:a5:51:cb:2a:35:2f:93:52:26:95:95:df:47:
12:76:b2:b1:ef:cb:cc:91:06:30:4f:5d:70:f6:67:2e:fe:79:
ab:72:ca:1e:84:56:ee:4d:3b:47:96:7b:fa:e1:b0:42:3a:9a:
4e:2d:dc:3c:4b:1f:df:ce:89:ad:a5:c2:47:e1:35:e4:5c:ac:
50:33:dd:71:41:44:6e:94:7f:fb:71:4c:24:d1:25:0d:11:ee:
9d:78:c6:ca:d9:95:be:9f:c4:1f:77:c0:a8:83:2f:6b:d3:b1:
ed:11:81:55:a8:fe:ad:aa:c3:ec:53:cf:64:06:88:12:79:22:
fa:1e:4a:f8:c9:02:41:03:d9:ff:c8:ad:2e:02:68:ff:6c:c7:
5a:e4:2f:79:a1:f8:31:2b:c8:db:18:a3:53:5b:33:b6:23:f3:
6d:88:67:79:c9:ea:35:39:7c:09:dd:e0:a9:f4:a1:52:0f:04:
bd:8c:29:dd:c5:86:68:88:34:5e:76:60:5d:3c:91:81:d3:0c:
64:3a:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-fra.rpki-client.org