Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/9_jQxTsLVte_NtYsfjGhWsbVmS0.roa
File: 9_jQxTsLVte_NtYsfjGhWsbVmS0.roa (raw, json)
Hash identifier: tqRtEvQemyIoKa/mgRMDW7mkZrjEE5iwt6j7/mZRJfc=
Subject key identifier: F7:F8:D0:C5:3B:0B:56:D7:BF:36:D6:2C:7E:31:A1:5A:C6:D5:99:2D
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 0182B50D7AA2483919337ED4DD8772FAD194
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/9_jQxTsLVte_NtYsfjGhWsbVmS0.roa
Signing time: Fri 19 Aug 2022 07:42:15 +0000
ROA not before: Fri 19 Aug 2022 07:42:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212257
IP address blocks: 185.160.96.0/22 maxlen: 22
185.160.97.0/24 maxlen: 24
185.160.98.0/24 maxlen: 24
185.160.96.0/24 maxlen: 24
185.160.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:0d:7a:a2:48:39:19:33:7e:d4:dd:87:72:fa:d1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Aug 19 07:42:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7f8d0c53b0b56d7bf36d62c7e31a15ac6d5992d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:78:1d:62:8c:1d:a7:3d:c8:0c:0b:7b:0f:
12:4f:92:20:4e:da:7c:b6:5f:be:ae:68:78:aa:f9:
98:04:d1:37:0f:28:51:23:62:f1:5a:0c:b1:ff:96:
21:99:33:0b:95:2e:81:41:53:87:af:c4:c7:3e:65:
df:5b:12:45:68:7f:f7:54:38:ae:b4:b6:48:ae:1c:
73:d7:10:65:8a:1c:40:47:db:c9:32:6e:8c:7b:3d:
29:2c:55:11:1e:cb:52:19:e4:d9:b1:54:a3:30:bb:
34:5a:ac:6b:fb:fb:fe:9d:41:fd:d1:69:76:62:97:
d1:3c:0a:3a:03:77:53:66:b3:e3:9f:ac:37:11:df:
50:c3:46:74:a7:ed:e0:7d:a7:c2:f1:f7:8a:fc:ea:
39:65:99:3b:b0:9e:04:2a:41:1d:cc:7e:3b:bb:71:
2f:67:cb:5f:21:e0:40:af:7a:2f:45:41:21:ad:e0:
67:30:6d:69:2a:ea:39:f9:06:3e:fd:a9:5c:a7:ac:
2b:24:67:a6:21:00:46:96:b5:bf:f3:38:6d:a9:62:
c0:53:38:7d:ce:51:21:f4:15:93:ab:d4:aa:29:2a:
79:10:a8:68:e8:29:84:ad:bf:d3:cf:78:c3:d1:83:
c3:98:b0:e0:52:a5:59:b4:29:05:d5:e4:bf:93:9d:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:D0:C5:3B:0B:56:D7:BF:36:D6:2C:7E:31:A1:5A:C6:D5:99:2D
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/9_jQxTsLVte_NtYsfjGhWsbVmS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
92:e0:90:39:d6:f4:e3:af:6b:43:55:b0:8d:0d:ac:f0:ed:e1:
0e:d8:f7:cf:4c:32:5a:23:6a:65:d3:e9:a9:16:59:64:3a:ce:
97:85:97:cb:e2:e3:6b:e2:4a:9b:ab:cd:bc:8e:90:36:52:8c:
41:ac:a5:0d:93:e6:8e:24:07:e4:f1:ac:e0:4f:7b:43:d1:70:
a6:61:a4:2d:4f:92:6e:6d:af:ad:55:21:b7:11:c8:15:b8:45:
79:86:ff:b6:a0:47:28:90:6d:2f:b4:9c:83:f4:b5:03:0a:08:
0b:d9:df:34:b5:16:b0:87:61:e6:b4:b8:24:15:fd:d4:a1:ba:
f5:1e:60:13:f7:6f:c0:02:57:45:0e:59:73:6e:59:e8:ee:cf:
6d:97:01:dc:9d:20:69:59:00:a5:40:cd:8e:63:d6:bf:ff:5f:
eb:93:a0:20:22:79:18:3d:aa:d5:9e:89:fa:42:93:72:f9:7d:
e6:4e:39:06:c4:82:16:07:2c:36:cb:a5:37:6f:de:42:30:6e:
0c:70:29:c8:04:e9:a0:7f:ca:5e:88:f0:52:9b:33:4d:94:f4:
45:5e:5c:0f:21:5d:5e:54:2b:c8:8b:33:c8:c2:dd:1f:7a:44:
98:ef:4d:33:2a:92:52:1f:4e:97:f7:eb:82:38:cf:96:06:83:
88:ae:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:52 2024 by rpki-client on console-fra.rpki-client.org