Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/iyLA0g7Vz3lUyRw2tvv0B5Zp5Z8.roa
File: iyLA0g7Vz3lUyRw2tvv0B5Zp5Z8.roa (raw, json)
Hash identifier: EO99yeNvAVePLG370/zx5XWitzrkqx+iJGiRJMBZiDA=
Subject key identifier: 8B:22:C0:D2:0E:D5:CF:79:54:C9:1C:36:B6:FB:F4:07:96:69:E5:9F
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 1C82CC3E
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/iyLA0g7Vz3lUyRw2tvv0B5Zp5Z8.roa
Signing time: Sat 01 Jan 2022 01:57:19 +0000
ROA not before: Sat 01 Jan 2022 01:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202804
IP address blocks: 185.20.78.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478334014 (0x1c82cc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jan 1 01:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b22c0d20ed5cf7954c91c36b6fbf4079669e59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:64:96:85:23:68:eb:76:32:27:ca:dc:17:
4c:7a:17:23:89:e7:42:bd:59:0b:d4:0d:ee:7d:11:
14:fa:61:7d:11:d1:0b:2f:8f:71:17:31:d4:d5:6e:
88:53:eb:43:68:31:35:b6:d1:35:c3:1a:b4:78:57:
d0:2d:dc:07:66:c4:d4:1f:69:40:59:8d:cf:64:f5:
ae:fc:ff:4e:b3:af:38:2e:80:22:09:db:d8:d7:d9:
11:71:4b:a9:f1:7a:6f:c6:96:69:27:66:0e:e5:4a:
f9:bc:03:a9:ed:11:0a:a2:21:b1:63:3c:e8:38:45:
75:dd:37:65:9b:1b:1e:c3:12:fc:b8:e5:40:4d:dc:
e7:7e:42:d6:8f:64:b8:52:7c:20:8e:59:87:e5:1b:
36:8b:74:d2:8e:c4:75:8b:8e:b3:03:62:5c:1a:87:
07:72:4b:90:46:88:8f:e0:35:d8:d0:e2:d6:f3:3f:
2d:1f:23:10:e8:98:2d:4f:a1:b1:d4:12:89:d1:49:
90:76:75:d9:50:c4:bb:13:c9:26:f8:16:13:1c:54:
8c:15:6d:33:8f:6f:2b:c3:8b:f4:a6:c7:61:78:3d:
15:e7:77:aa:bd:1b:5f:74:15:ae:53:c2:fe:a1:fa:
36:7b:62:d8:93:9c:14:7e:70:ba:1d:76:01:2b:77:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:C0:D2:0E:D5:CF:79:54:C9:1C:36:B6:FB:F4:07:96:69:E5:9F
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/iyLA0g7Vz3lUyRw2tvv0B5Zp5Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.78.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:d8:de:2e:25:f1:05:e0:c7:6c:19:fa:a7:32:d5:69:28:b2:
4c:24:e6:0f:72:93:9f:b4:36:ed:60:eb:62:50:6b:8f:cd:de:
ba:43:bf:a8:81:fa:f0:ea:68:e5:1d:ea:11:96:90:c7:43:a7:
0b:2b:77:e6:63:df:9b:cd:57:28:61:57:b4:6d:c3:83:9a:de:
82:dd:75:fa:6c:52:0b:52:5b:66:1a:16:bc:0d:dd:de:97:76:
8d:5b:cc:4c:41:f3:b1:eb:99:5b:6a:c6:bb:da:8d:e6:90:04:
c1:cd:b9:15:d1:96:29:bb:a7:92:f7:e2:98:fe:00:1c:db:99:
65:9e:1e:19:a7:66:47:ec:43:d1:6a:08:5d:e2:cf:7a:64:f8:
a3:cb:bc:a6:3c:5f:e3:25:b1:79:1a:73:2d:0a:63:e3:ce:e3:
c1:8f:40:44:5a:b4:54:39:87:f9:ee:b1:01:ed:9b:bb:ec:29:
e7:f2:33:b3:ea:ba:dd:95:12:a4:2b:55:87:32:ac:8d:4d:0e:
a0:b7:ee:26:ef:65:8f:e5:3a:77:2e:3a:c1:51:e6:70:da:4a:
c1:8b:9e:cb:22:a7:4c:7d:ca:ca:72:f0:89:4e:8c:d0:33:ee:
4e:e2:2b:27:51:99:f4:76:5a:87:30:63:6e:38:b4:bd:23:7e:
71:a9:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org