Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/onRl0TJ-aHP5LbjC-vz8Q-FoeOs.roa
File: onRl0TJ-aHP5LbjC-vz8Q-FoeOs.roa (raw, json)
Hash identifier: rwLGbrx+S33MJO0sOoWFxCUsxO5X9SfyAwJE+yVnVGI=
Subject key identifier: A2:74:65:D1:32:7E:68:73:F9:2D:B8:C2:FA:FC:FC:43:E1:68:78:EB
Certificate issuer: /CN=23ff02e63e8467f2119432f8dc8401334bc3528d
Certificate serial: FCF269
Authority key identifier: 23:FF:02:E6:3E:84:67:F2:11:94:32:F8:DC:84:01:33:4B:C3:52:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_8C5j6EZ_IRlDL43IQBM0vDUo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/onRl0TJ-aHP5LbjC-vz8Q-FoeOs.roa
Signing time: Sat 01 Jan 2022 00:52:15 +0000
ROA not before: Sat 01 Jan 2022 00:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 185.253.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16577129 (0xfcf269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ff02e63e8467f2119432f8dc8401334bc3528d
Validity
Not Before: Jan 1 00:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a27465d1327e6873f92db8c2fafcfc43e16878eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:94:5c:d4:72:86:c6:4b:fc:af:38:db:05:
ed:4b:c9:97:d9:a3:2a:fa:4e:55:5d:c6:15:d2:44:
24:49:b7:00:a8:8c:0c:31:4a:e8:6e:24:1e:35:b1:
47:1a:fa:7e:30:4b:bb:86:04:bb:5e:64:3f:a6:7c:
d4:fd:2f:98:cc:e7:3d:59:83:f3:28:0b:cd:c5:0f:
7c:04:b3:f7:65:a4:a4:bf:44:b4:7b:83:82:e9:67:
a2:b5:35:e3:f6:10:3a:15:e7:ec:82:20:25:8f:e0:
39:2b:b0:13:23:b9:93:0c:63:19:56:02:bd:a1:20:
a9:0b:58:7a:97:15:5f:97:26:77:1d:a2:31:a5:26:
80:dd:d7:12:30:8c:77:ee:08:ab:9f:6e:c1:87:4c:
b9:87:a5:2e:81:7c:79:41:35:21:9a:e7:9b:9c:81:
32:4d:d8:d0:40:8f:e5:0d:75:5c:dc:db:74:4e:1f:
32:89:b7:f0:13:d5:bb:5a:b8:35:5d:23:78:a7:ef:
6b:68:61:ea:9d:f4:2c:52:b1:87:d4:74:d7:b3:08:
00:e4:67:6e:b3:dd:46:d9:dd:64:53:ce:ca:2c:46:
2c:1b:5c:a7:2d:67:56:d9:6d:cf:9f:eb:34:5f:0f:
f4:00:d3:7a:b1:47:e6:c3:b8:14:3a:6f:d4:c4:8f:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:65:D1:32:7E:68:73:F9:2D:B8:C2:FA:FC:FC:43:E1:68:78:EB
X509v3 Authority Key Identifier:
keyid:23:FF:02:E6:3E:84:67:F2:11:94:32:F8:DC:84:01:33:4B:C3:52:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_8C5j6EZ_IRlDL43IQBM0vDUo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/onRl0TJ-aHP5LbjC-vz8Q-FoeOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c343e3-b963-450b-98e5-7ddab80396aa/1/I_8C5j6EZ_IRlDL43IQBM0vDUo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:18:9c:21:dc:89:45:08:94:0b:29:2e:1c:b8:b3:17:25:a0:
17:9f:52:c2:1c:e7:66:1d:7d:66:b9:6b:bb:1f:2c:50:6f:5d:
64:0c:fc:9a:c0:b2:68:28:1b:b4:fa:ca:64:b0:86:da:a9:42:
54:c8:c6:d5:b6:24:8c:df:16:ee:e6:14:f3:02:5b:b1:3c:ed:
84:6e:39:35:36:33:6d:c1:15:24:b8:72:ee:d6:4d:71:54:25:
68:e3:16:30:94:6f:98:e2:da:88:99:ee:39:43:a9:fb:29:8d:
e2:91:e7:8a:2f:d6:99:8e:82:39:72:14:1c:00:63:73:af:da:
8f:31:01:ec:51:cc:6d:10:b5:58:4e:b2:05:6e:78:b6:7e:c9:
18:2d:34:9d:0b:80:9d:02:a5:f1:1a:55:a2:c1:40:e3:25:8b:
77:aa:4f:64:43:0b:bd:bd:e2:26:2e:38:4f:87:bd:a2:51:e2:
07:7e:41:6e:0d:3f:b2:da:b5:57:3f:e8:46:49:6c:80:86:6f:
2c:c1:13:93:81:b6:8a:0a:37:7e:06:36:df:5f:ae:0f:81:a5:
5b:55:21:3a:f4:ec:9d:43:e4:37:7a:c8:d2:60:a3:c6:75:2c:
8b:cc:23:c8:53:aa:6a:6e:80:fb:ad:3c:78:88:25:c4:96:58:
b4:0e:dc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-fra.rpki-client.org