Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/FountjgMXXg1mYNmYeGxDmiSiUE.roa
File: FountjgMXXg1mYNmYeGxDmiSiUE.roa (raw, json)
Hash identifier: QBfoxMLlG9pRmtefisSwq4mU9cxMqabdemALJ9Kl83U=
Subject key identifier: 16:8B:A7:B6:38:0C:5D:78:35:99:83:66:61:E1:B1:0E:68:92:89:41
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 0131D6E7
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/FountjgMXXg1mYNmYeGxDmiSiUE.roa
Signing time: Tue 01 Feb 2022 12:58:02 +0000
ROA not before: Tue 01 Feb 2022 12:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206713
IP address blocks: 185.194.166.0/24 maxlen: 24
185.194.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20043495 (0x131d6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Feb 1 12:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=168ba7b6380c5d783599836661e1b10e68928941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:85:f7:d1:cd:2e:07:71:92:eb:64:5a:25:
44:b8:77:78:f2:10:cd:0e:e0:94:c9:0a:17:2a:d9:
e0:71:a6:05:92:84:a2:31:8b:4b:9e:27:b2:39:b0:
00:4a:be:a6:ff:c2:c2:f5:b9:8c:85:e0:7c:35:a2:
0d:08:d5:5c:a4:c4:08:28:23:33:03:f9:88:62:ed:
aa:c1:9c:f5:b8:b1:12:24:e2:83:8a:d4:66:dc:ca:
d5:59:94:fe:c3:3b:4d:c4:af:58:a8:2e:71:7d:15:
d4:68:ba:a2:57:9d:bc:81:6a:e0:09:7a:96:33:d7:
ba:9c:b7:3a:ad:5f:39:bd:fc:24:38:dc:0a:ac:2e:
32:73:c6:1d:6c:10:00:c7:18:59:7e:4d:31:2e:26:
b9:6c:1f:9e:d4:b6:ad:33:a7:d5:f9:6a:4c:77:0b:
5a:c2:e1:c8:9f:ce:aa:c0:eb:79:0a:61:a1:cc:8a:
a7:03:4d:82:7d:ed:b7:3a:83:97:1d:de:41:ca:a7:
e5:e4:7a:10:b5:87:2b:e9:33:c3:5a:7e:b4:79:cf:
fc:26:5f:76:3c:13:02:1f:3e:5f:41:f2:c3:a9:51:
a2:78:4a:75:58:b1:ae:87:37:ca:8a:d4:99:7a:1d:
23:b8:43:c2:05:88:d2:fe:cb:db:3c:52:09:3c:4e:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8B:A7:B6:38:0C:5D:78:35:99:83:66:61:E1:B1:0E:68:92:89:41
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/FountjgMXXg1mYNmYeGxDmiSiUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.166.0/23
Signature Algorithm: sha256WithRSAEncryption
45:5b:45:13:27:c2:95:a3:a1:a3:6e:e6:45:3d:3f:0e:89:8e:
00:a4:f7:d8:89:9a:c6:df:6c:9e:a0:2d:58:1e:f1:a4:f0:cc:
88:22:5d:9b:d7:12:33:59:85:84:da:16:9e:1a:ec:3c:89:50:
28:5c:5f:d8:9b:28:e2:4a:75:9a:1c:f7:57:99:fa:15:b1:79:
bb:0d:b4:46:5d:ab:ab:10:91:96:c9:44:40:90:e7:c8:a8:af:
36:8d:d4:e9:51:88:3d:54:9d:4a:43:be:9b:1a:c6:1d:be:2e:
ad:18:78:7f:7a:14:3a:00:be:e4:9f:cb:a9:6f:ac:07:84:d5:
5c:e8:88:d2:3f:da:b0:e8:5f:05:27:01:02:50:3f:c1:ea:d3:
50:06:bb:2e:fa:7a:85:2e:cf:52:a2:ae:09:b6:ba:ac:39:21:
5f:44:52:b7:1f:a6:ac:2a:7c:2f:c9:d4:0f:76:46:69:47:05:
be:31:38:cb:05:8a:31:7b:74:df:28:a2:69:47:c2:6a:a4:55:
00:34:bf:72:54:96:0f:45:32:c2:16:b9:d2:b7:ee:84:2a:8b:
4e:08:a1:ae:19:f7:03:4b:d2:5a:09:ca:65:c4:aa:fa:de:10:
1d:f6:df:01:7c:6e:34:0d:dd:9c:97:3f:1c:2b:4c:4c:3a:60:
f0:24:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:31 2024 by rpki-client on console-fra.rpki-client.org