Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/7nLZL4d2YvzZgWOKOmENpH2CojU.roa
File: 7nLZL4d2YvzZgWOKOmENpH2CojU.roa (raw, json)
Hash identifier: NKbIvOhpxooVenEphnB9KdX7jDFHAhQtgL7eZhGp3lw=
Subject key identifier: EE:72:D9:2F:87:76:62:FC:D9:81:63:8A:3A:61:0D:A4:7D:82:A2:35
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 02B9DD04
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/7nLZL4d2YvzZgWOKOmENpH2CojU.roa
Signing time: Mon 28 Feb 2022 20:20:47 +0000
ROA not before: Mon 28 Feb 2022 20:20:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.194.101.0/24 maxlen: 24
185.194.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45735172 (0x2b9dd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Feb 28 20:20:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee72d92f877662fcd981638a3a610da47d82a235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:18:51:28:56:fe:ac:93:ec:72:15:59:6d:
6f:71:7f:6d:e5:9c:67:8f:2e:fb:79:e2:ba:d8:8a:
83:3a:e4:f8:87:97:13:a8:48:36:6b:a4:ac:97:a2:
3e:0b:53:84:3c:0f:d9:7f:41:f8:b8:49:3b:10:53:
ee:be:4b:78:c8:2d:7e:63:2f:5f:cd:f8:64:2f:d1:
62:1b:d8:09:c3:57:3a:ec:e9:a4:6e:40:dd:00:28:
91:88:df:7b:af:7a:52:3d:e2:25:eb:59:ba:a0:f8:
37:19:1a:52:f3:b4:54:b8:63:64:46:c1:c2:08:23:
03:e1:4a:bc:3f:8b:10:7e:30:43:b4:01:c3:6f:17:
df:50:2a:4b:ff:16:1c:e2:c4:c6:00:72:24:67:01:
d4:fb:2b:df:a0:59:e7:d3:2d:8e:fb:81:48:a4:61:
1f:35:64:50:d1:d0:1b:e3:8a:2c:f9:80:a0:55:8d:
bb:64:45:84:6e:d0:85:2d:36:a6:c6:00:7a:c8:0b:
f0:7e:15:23:88:06:13:0e:20:98:f9:7c:c0:6d:e7:
61:58:35:26:60:94:94:28:c0:c8:1b:cd:49:89:31:
18:67:9e:fe:1d:33:d5:29:93:dd:ad:86:b3:a5:35:
a2:2c:ca:e7:40:b0:e6:06:87:d1:f9:07:0d:26:ae:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:D9:2F:87:76:62:FC:D9:81:63:8A:3A:61:0D:A4:7D:82:A2:35
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/7nLZL4d2YvzZgWOKOmENpH2CojU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.100.0/23
Signature Algorithm: sha256WithRSAEncryption
25:16:81:ef:1b:70:01:c9:f8:8b:4b:8d:c1:10:19:46:98:93:
16:3d:8b:f9:17:7a:34:de:14:ae:96:de:2a:a0:c3:d1:17:45:
95:73:5d:5f:f0:e6:dd:4e:92:59:ef:ea:c5:de:0b:60:49:d0:
ce:07:74:72:99:fa:a4:ce:d3:f0:33:5e:45:f5:1d:b8:df:a2:
ba:eb:ae:e1:3c:f3:61:78:48:81:2e:74:02:34:fc:e9:90:40:
9a:0b:49:48:5b:3e:50:47:52:3f:0d:6d:8f:67:dc:0b:6d:f8:
0d:0b:5e:50:39:89:b9:b8:92:15:72:5f:63:3e:bd:94:d8:9e:
b2:af:01:1c:26:04:66:9f:6b:93:0f:3f:d9:10:cc:64:bc:9e:
62:40:68:f4:c2:f8:0d:39:50:bf:3d:b9:bf:a1:34:a1:b9:27:
c3:19:8e:21:2b:a2:b6:b3:08:1d:60:f4:81:02:2d:24:28:9f:
88:fe:f6:e0:62:ae:2a:14:22:bf:57:55:b5:7e:9b:0c:9b:a3:
06:48:ca:a1:25:c1:32:98:5b:e2:9d:f6:7c:2a:c5:54:ae:69:
15:a8:4b:fa:15:f0:38:f5:2e:ee:f3:56:29:c4:43:e9:00:a1:
3f:61:5f:10:d4:f4:b8:0d:a2:5c:81:77:68:6a:d2:f7:c2:76:
2b:3b:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org