Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/677qvIlnEnxnhsetLF2G73Q11VA.roa
File: 677qvIlnEnxnhsetLF2G73Q11VA.roa (raw, json)
Hash identifier: N/hx6oTxGt/Cx8FCKGf5wGyrZkHqGPDq0pil+pNF10s=
Subject key identifier: EB:BE:EA:BC:89:67:12:7C:67:86:C7:AD:2C:5D:86:EF:74:35:D5:50
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0184D17733E794CB0041416518CC32203066
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/677qvIlnEnxnhsetLF2G73Q11VA.roa
Signing time: Fri 02 Dec 2022 06:12:40 +0000
ROA not before: Fri 02 Dec 2022 06:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 185.192.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:77:33:e7:94:cb:00:41:41:65:18:cc:32:20:30:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 2 06:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebbeeabc8967127c6786c7ad2c5d86ef7435d550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3f:5a:83:43:67:5b:94:02:8d:fd:a4:e1:97:
56:12:6a:e7:15:4f:74:15:11:c5:7a:67:c1:1a:c9:
90:8f:9c:95:f5:c5:23:5e:41:ca:d9:68:c5:64:c4:
d1:2a:b9:80:ba:d9:6d:fe:b3:e5:f8:53:62:73:89:
1b:d2:a6:09:4e:62:41:ec:f8:1c:f3:e9:b4:d6:f9:
e2:d9:dc:ae:21:5c:68:6f:8b:19:1e:18:9e:4d:54:
1b:83:4c:4b:e4:6d:b4:ba:ff:f5:31:91:41:2b:a8:
b6:12:3c:d7:6d:f5:8f:a7:ea:43:1f:c9:13:8f:a2:
df:3c:e8:fb:c4:db:48:24:20:3b:fb:bc:ec:ab:5d:
57:19:ae:fc:10:13:6c:8e:20:ab:8a:ec:2c:2b:29:
2d:b3:4e:1e:70:58:dc:26:9e:0e:05:62:1b:36:26:
fe:23:fd:89:1a:2a:34:88:47:72:66:7a:39:92:79:
ca:f4:7a:56:c0:fe:7d:90:ef:a6:dc:01:ed:fb:c9:
53:2e:c7:e2:dd:ba:4d:c9:56:f2:fe:bc:0a:21:49:
78:8f:74:4b:46:85:a7:e6:0b:f6:62:9a:c9:3d:ce:
2b:81:f3:d0:57:73:2e:89:8e:28:d4:1c:85:80:37:
47:07:be:cb:84:81:bb:b9:c1:18:d7:b0:10:9f:37:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:EA:BC:89:67:12:7C:67:86:C7:AD:2C:5D:86:EF:74:35:D5:50
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/677qvIlnEnxnhsetLF2G73Q11VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.68.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3f:2d:21:f6:b5:d0:a7:17:7b:a8:41:07:05:ae:f5:58:c6:
51:b2:fb:ce:85:c4:dd:c6:0f:6f:87:e0:99:90:e1:88:dd:9b:
f2:b1:9b:a9:a7:3d:5b:8c:f9:a5:79:a2:1b:06:73:69:e1:e8:
20:68:82:36:c3:03:ee:89:41:03:b1:76:8b:a1:28:32:11:f8:
f2:c8:a9:f8:02:18:f2:a4:65:05:a6:bf:69:e0:d8:3b:d3:4d:
26:9e:c5:b3:1e:f7:9f:35:65:2d:59:f7:1f:6d:75:c8:7d:29:
95:6c:c8:ef:81:7b:2f:56:b0:ac:ae:92:6a:5a:3a:e8:78:24:
aa:43:35:61:ef:a7:05:37:87:23:eb:26:2c:26:38:0b:49:27:
ed:53:4a:ec:f8:4b:50:99:e1:b0:8e:5b:0e:79:8b:ef:7e:e5:
69:06:b6:d8:9f:07:20:2e:a2:7c:91:1b:94:47:f8:e0:d2:6a:
81:00:26:8a:84:f2:b7:85:bc:89:08:81:10:91:9a:74:f7:9f:
50:0a:de:ae:e2:79:5b:03:60:bd:d1:5f:c8:f2:ed:f8:8f:3f:
e9:96:91:a6:87:1a:3b:c7:b9:b0:e9:a8:b3:0e:9e:47:49:8e:
1f:31:59:10:38:37:a6:1b:17:3a:cb:97:60:9a:41:93:4e:3b:
36:36:60:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org