Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IHCoSukuOXZWGshtwoo7t7KAWkg.roa
File: IHCoSukuOXZWGshtwoo7t7KAWkg.roa (raw, json)
Hash identifier: lXSWwTCmQkFmif1xhV7xvlv8Eiy+WymJPQKI142v+t0=
Subject key identifier: 20:70:A8:4A:E9:2E:39:76:56:1A:C8:6D:C2:8A:3B:B7:B2:80:5A:48
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DF7434A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IHCoSukuOXZWGshtwoo7t7KAWkg.roa
Signing time: Sun 24 Apr 2022 08:45:24 +0000
ROA not before: Sun 24 Apr 2022 08:45:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212396
IP address blocks: 185.150.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234308426 (0xdf7434a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 24 08:45:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2070a84ae92e3976561ac86dc28a3bb7b2805a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:07:11:c6:09:c3:c5:e7:a3:a8:f5:1b:1b:
e3:c0:22:90:84:dc:b4:30:0d:99:cd:a9:79:08:ad:
d8:90:23:94:b1:73:e1:ab:78:71:84:cf:11:cf:d3:
08:04:95:c5:8d:73:21:da:36:42:28:43:22:fc:7c:
8c:ee:9f:f0:70:13:c0:8a:91:db:fa:87:c1:96:b1:
02:98:86:73:8e:56:a6:3a:d3:47:a6:34:79:73:56:
9c:ca:92:38:e6:7c:60:30:65:a0:d4:c0:24:02:60:
76:74:4f:ff:73:28:85:a3:36:cc:0c:59:d5:ce:69:
13:00:3d:b0:d5:fc:ca:85:36:22:e8:b4:aa:92:2e:
84:7f:35:5a:f6:95:97:78:c3:99:39:81:73:26:06:
27:36:22:ce:1d:7d:2e:a6:fe:18:6e:38:85:a1:16:
bb:d7:36:f7:af:13:44:e7:18:53:48:34:13:ff:b0:
8d:6c:40:4f:48:34:d3:80:01:d2:9d:a8:ca:cb:c1:
0d:67:1d:86:dc:0f:d4:e4:06:3e:84:50:ea:af:0e:
2c:f6:1e:31:f3:d6:a1:f6:08:e0:59:7b:9d:e1:4b:
ed:e5:6a:7a:47:61:f5:f6:b8:ff:a1:db:af:80:c5:
5e:4b:1d:e1:ed:45:88:16:eb:b9:f9:c2:9e:4e:56:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:A8:4A:E9:2E:39:76:56:1A:C8:6D:C2:8A:3B:B7:B2:80:5A:48
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IHCoSukuOXZWGshtwoo7t7KAWkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.1.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b7:da:eb:bf:cf:53:ef:55:5c:b0:e8:98:ee:92:13:b6:10:
9e:5d:8c:72:23:6f:03:59:8b:97:bb:c1:c1:5a:4a:82:86:d2:
95:4c:b0:d4:5c:2f:23:62:09:0a:5a:37:7f:95:c5:26:35:b4:
cb:31:ae:74:40:df:a5:87:b9:1f:11:51:94:0a:8d:80:85:f7:
6c:20:8f:56:b0:8b:22:1d:3e:b7:39:69:ca:32:ce:d1:e4:e0:
31:38:ed:27:e3:89:0c:03:1b:37:bb:91:94:4e:e4:76:c7:9b:
71:40:60:cc:41:87:b6:f1:41:0c:da:d7:95:5e:36:28:87:20:
73:f4:d5:7a:21:44:b5:b6:a1:7f:3d:f3:ac:d1:19:89:83:f9:
1b:42:96:c6:f1:d9:74:7f:23:4a:8e:53:f0:e6:8d:c0:1e:7e:
a1:91:55:7b:c7:c8:f5:97:33:3e:e5:39:68:e0:7a:b0:3d:cf:
84:19:0b:6a:87:e5:28:5f:bc:92:5f:84:a6:5b:f7:9a:0e:15:
9f:89:a5:fd:04:0c:d0:fe:c1:8e:9b:94:15:f7:d9:7c:3e:72:
a4:aa:1f:4f:7e:dc:03:33:0d:87:20:b6:29:06:c6:ef:97:9a:
f3:98:f9:b8:81:ab:bd:0c:f6:80:fc:78:cd:30:9a:22:31:39:
99:74:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org