Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/R16gtBZdndyahVcpvHUldDO5C44.roa
File: R16gtBZdndyahVcpvHUldDO5C44.roa (raw, json)
Hash identifier: NojlwOtm5d0e9fUS5IIDoKLwvSr5S64MeC5uEkNPu/U=
Subject key identifier: 47:5E:A0:B4:16:5D:9D:DC:9A:85:57:29:BC:75:25:74:33:B9:0B:8E
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0F03A68C
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/R16gtBZdndyahVcpvHUldDO5C44.roa
Signing time: Sat 01 Jan 2022 07:01:46 +0000
ROA not before: Sat 01 Jan 2022 07:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205877
IP address blocks: 185.203.171.0/24 maxlen: 24
185.203.170.0/24 maxlen: 24
185.203.169.0/24 maxlen: 24
185.203.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251897484 (0xf03a68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Jan 1 07:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=475ea0b4165d9ddc9a855729bc75257433b90b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:5f:c2:65:90:d6:a4:fa:90:bb:e3:e4:92:
55:90:3b:77:c5:d6:56:19:4e:54:4e:6d:ca:99:95:
04:89:e0:c7:6f:52:ac:3b:d9:a9:71:1b:a0:db:99:
1e:aa:46:de:f0:d7:fd:d1:2f:a0:46:c2:8e:16:31:
f7:0d:02:8b:13:3b:a3:1e:33:aa:d9:09:23:c0:6b:
96:16:12:8c:be:9c:df:1e:6e:92:1f:6c:73:25:80:
60:0a:86:34:ef:8f:c2:86:33:e2:b9:35:04:a4:1e:
d6:79:40:db:d8:ae:41:aa:ac:9b:09:99:d8:44:7c:
4a:76:0f:8a:2b:94:80:8c:86:fc:e6:e2:f0:6c:9c:
7e:18:9d:f9:33:92:9f:89:f5:39:03:1d:58:3e:2c:
12:99:50:00:84:af:2e:1a:66:30:63:e0:68:d0:fa:
4d:d3:98:58:b8:d8:11:af:25:3b:c2:db:d1:4d:ba:
fa:56:eb:9a:9d:59:c5:03:01:cc:f1:95:c6:8c:e1:
10:55:9d:d2:30:0c:d2:0c:ad:d2:fa:47:7b:a0:2e:
4a:1d:69:6d:f6:0a:07:2e:74:81:a2:4f:be:fb:69:
e1:1c:a2:76:38:59:d3:bd:f6:cd:54:18:eb:82:6a:
f0:50:43:b1:75:41:47:19:63:78:6d:de:63:33:a5:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5E:A0:B4:16:5D:9D:DC:9A:85:57:29:BC:75:25:74:33:B9:0B:8E
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/R16gtBZdndyahVcpvHUldDO5C44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:25:e1:b1:78:c8:6f:63:2f:ce:9a:26:ec:6b:bd:03:85:17:
31:71:c6:46:7e:27:1d:f7:86:42:e8:4e:57:09:0d:1c:72:51:
94:fa:5d:48:f0:7d:1d:e5:69:67:c3:dd:92:6c:bb:5c:a6:a5:
e4:52:01:f8:07:67:a6:79:a6:22:66:91:8c:84:1c:dd:10:96:
f9:8c:0a:bd:88:ee:92:09:84:19:d3:b3:70:b0:63:49:3b:df:
bf:76:7d:71:d1:b8:86:9c:c4:83:96:84:04:f8:21:e5:12:d4:
1b:8e:65:e5:79:b8:6c:4c:48:bf:02:fc:47:42:c0:94:81:f6:
4a:9a:24:ca:d9:01:67:ad:2a:2e:5b:0a:a6:54:8a:92:a2:3f:
c0:31:21:27:f3:38:e7:b5:10:5b:8d:0f:6f:31:ee:4b:f7:07:
a0:ce:9a:66:33:d1:d4:26:a1:c1:9f:ed:d4:9f:88:6b:3f:a6:
81:8b:17:a8:d0:cb:df:2e:aa:74:8e:e5:94:88:d8:dd:91:20:
5b:f4:92:10:46:c4:6b:70:af:4f:77:f7:7b:6b:48:04:95:d7:
e6:5f:58:5c:34:7d:7d:00:6c:bc:61:63:8c:41:4e:0a:3f:d6:
0b:bb:05:1d:e2:ee:69:90:c4:fa:8c:71:c1:6c:c8:95:1a:b2:
3e:5c:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-fra.rpki-client.org