Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J49HPpBannDZRUK3kzheI5DmuDo.roa
File: J49HPpBannDZRUK3kzheI5DmuDo.roa (raw, json)
Hash identifier: yf2Bi7LNsPyAH9CnmZ58z+OxAcdN1TG3Pvw/7+tNln4=
Subject key identifier: 27:8F:47:3E:90:5A:9E:70:D9:45:42:B7:93:38:5E:23:90:E6:B8:3A
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA87503
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J49HPpBannDZRUK3kzheI5DmuDo.roa
Signing time: Sat 01 Jan 2022 05:04:51 +0000
ROA not before: Sat 01 Jan 2022 05:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16247
IP address blocks: 185.192.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212366595 (0xca87503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=278f473e905a9e70d94542b793385e2390e6b83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:03:99:6d:b8:dc:3b:9d:33:ec:65:74:7d:
e3:05:fb:f9:db:f9:06:93:a3:b4:f3:f1:e1:fa:cd:
ad:af:e2:de:b9:3b:dc:7a:f6:44:f1:f8:62:b8:b1:
3f:23:dc:9b:a7:1e:99:11:da:a5:ee:cd:25:77:bb:
a4:5b:10:56:46:ea:e3:57:70:56:77:41:3e:f5:8a:
d9:d8:6a:ca:90:47:92:c0:8d:68:7b:ef:fd:f5:aa:
d6:95:d6:f3:74:18:b0:9d:e6:26:7e:47:1b:62:91:
71:6f:3c:7e:f5:d7:49:01:7c:78:dd:3d:3a:40:cf:
71:66:13:35:73:3b:88:ff:26:20:0f:9d:7a:6a:a0:
d0:cc:af:e9:af:fe:ab:14:29:ce:5e:b3:f7:2d:aa:
86:17:90:ca:f9:ec:23:8f:69:eb:25:8a:94:a0:b2:
e5:f8:b7:e7:9f:4a:93:d0:1d:15:42:ed:c7:5e:91:
6a:de:d5:37:b3:83:7e:44:79:3b:1f:f0:3a:28:a3:
f7:e2:3d:77:d3:de:ce:a3:52:c9:b0:2e:42:1a:3c:
9f:30:99:c2:af:ef:db:46:1d:05:25:43:61:d3:61:
e9:fd:d0:2d:7a:64:4d:86:55:f8:06:38:23:d4:78:
6d:44:5a:65:82:4a:fa:85:97:04:60:bd:73:da:3e:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8F:47:3E:90:5A:9E:70:D9:45:42:B7:93:38:5E:23:90:E6:B8:3A
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/J49HPpBannDZRUK3kzheI5DmuDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.16.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:6d:90:4f:fc:c9:e9:9b:21:63:4e:4d:f3:af:e2:62:31:
6a:6d:57:16:69:18:87:21:59:bf:a5:ac:36:5c:1f:a3:bd:80:
ca:f7:a6:09:55:a8:65:6d:53:a0:78:c2:bc:0b:30:c9:dd:3e:
b6:72:d5:ed:dc:c4:80:c8:05:05:d8:6b:1e:6b:7b:01:a1:35:
b6:7a:1b:ed:fb:6f:a6:59:ce:23:f0:23:08:61:ac:97:7e:e4:
0c:ba:37:cd:ae:82:24:49:0f:d4:2e:43:cb:44:dd:50:d5:42:
1b:6f:a1:00:e4:ac:ed:f3:8c:4b:65:94:96:19:97:43:66:5a:
8b:0f:4d:00:7c:16:63:62:59:00:da:18:c3:ec:01:3f:b1:19:
9d:f8:93:04:75:0c:ce:9c:08:63:5e:9b:c8:f6:f7:0b:13:3b:
87:ba:5b:4c:1c:4d:7c:0b:61:86:0e:e7:c4:ef:f6:65:a3:75:
f3:ad:ef:f3:e5:9b:a9:0f:c4:f4:35:a7:4f:18:86:03:4c:14:
dc:77:ba:f4:8c:49:11:95:8c:16:ce:24:14:3a:f9:b2:52:8a:
42:b5:49:31:be:fa:0b:e2:27:f9:87:fa:96:2d:21:62:38:2b:
a7:02:67:28:dd:28:64:24:49:67:a1:fd:8c:53:e8:e5:f4:82:
32:5a:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org