Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/rfnJ2EWWQSoAMXmVRoCq2F7eX7I.roa
File: rfnJ2EWWQSoAMXmVRoCq2F7eX7I.roa (raw, json)
Hash identifier: tSAQiCOL10DNKGAg6Gsf1sf+0HXb3SOeK0h0OQTw5nk=
Subject key identifier: AD:F9:C9:D8:45:96:41:2A:00:31:79:95:46:80:AA:D8:5E:DE:5F:B2
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 06F330F9
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/rfnJ2EWWQSoAMXmVRoCq2F7eX7I.roa
Signing time: Sat 01 Jan 2022 01:52:34 +0000
ROA not before: Sat 01 Jan 2022 01:52:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116601081 (0x6f330f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 1 01:52:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adf9c9d84596412a003179954680aad85ede5fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:00:f1:b6:91:88:11:f8:28:95:7f:76:ec:
4c:0c:92:3a:c1:ad:b1:8f:6f:f2:02:6b:c9:ba:02:
a0:34:0f:b3:da:b6:4e:e7:1c:0b:e5:38:0e:20:fd:
4b:88:36:75:47:07:f2:e1:00:fa:d1:36:2d:1b:66:
09:dc:b0:34:aa:03:93:2c:8e:ad:e3:06:32:1e:a5:
b8:b5:ae:99:81:b2:26:2e:f0:04:aa:f3:d5:9d:e2:
94:be:e6:d5:98:e0:8c:5a:3f:e5:9c:a6:9e:d2:71:
c4:af:6f:7d:82:26:5f:75:bd:70:43:16:23:a2:2f:
c5:f0:d0:bc:fd:d3:db:15:dd:61:d4:0a:57:bf:30:
5d:9a:3a:f2:21:7a:fe:fc:8a:d3:4e:ac:a0:07:8c:
e6:0c:0b:af:b7:5a:c1:e3:5a:1a:4b:52:4d:ab:fc:
72:37:15:f3:4a:e1:03:42:a7:23:d8:00:7a:71:8a:
fd:19:1f:83:68:97:7c:3a:0c:72:7f:85:ab:97:c8:
51:d4:a7:31:f1:5e:f6:50:f4:0b:37:d6:8a:f3:34:
11:39:5f:58:b4:15:7f:7f:95:50:68:fc:fe:ce:9a:
16:80:64:a1:67:6b:84:27:22:00:cd:1c:c8:25:23:
23:f6:99:66:a7:66:95:95:e7:5f:4c:4c:48:e3:de:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F9:C9:D8:45:96:41:2A:00:31:79:95:46:80:AA:D8:5E:DE:5F:B2
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/rfnJ2EWWQSoAMXmVRoCq2F7eX7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
36:4a:17:47:59:ef:9a:86:72:b2:44:c9:b2:b8:60:bd:a1:fb:
8a:22:3e:ec:47:7a:70:9b:80:ad:aa:c2:54:75:76:96:66:dd:
61:45:5d:a4:0d:a2:9b:e1:f8:47:67:a8:0b:c7:b1:58:6a:fe:
a2:75:b6:52:dc:e8:16:6a:8f:7f:ea:bb:76:71:98:e3:b5:12:
13:c1:82:75:be:e7:3c:49:f7:1a:6f:67:c4:1c:28:03:b9:32:
b2:be:39:06:c9:3e:a2:6a:cf:44:54:a2:06:06:e8:fb:f8:bd:
7b:25:e7:98:09:b1:2d:70:ca:2e:f3:a0:ea:bf:52:e5:47:35:
fe:82:4a:7e:19:d0:cb:4f:35:22:e4:28:d6:91:27:6a:26:ba:
80:7b:47:1d:1e:21:6a:98:0a:9e:2b:16:1c:b1:bb:f0:01:f0:
32:45:70:a9:e7:5f:39:8a:6d:51:b6:a8:c8:f7:aa:22:57:e7:
50:06:7a:e4:a4:31:43:0a:0c:27:4c:bd:9d:73:d5:3f:a9:92:
7f:d8:2f:e1:d1:a6:9c:57:43:25:0f:6f:d3:74:dd:a8:ab:ee:
7d:01:c1:d1:00:b2:74:ca:bc:09:7c:87:52:1d:ef:b9:87:a5:
0c:b5:ec:3c:43:2d:1e:9d:2d:c2:55:1e:48:4f:a1:46:62:05:
b9:c4:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-fra.rpki-client.org