Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/fTSzi6GhE9VDmmnRToyUFlR2LCA.roa
File: fTSzi6GhE9VDmmnRToyUFlR2LCA.roa (raw, json)
Hash identifier: 9lYRgxBAuUERb62nXm7XS5qloDVTHCEaqkbpqNULngs=
Subject key identifier: 7D:34:B3:8B:A1:A1:13:D5:43:9A:69:D1:4E:8C:94:16:54:76:2C:20
Certificate issuer: /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial: 018290FBE10CBABE09FBF9FD2136ADE64F6C
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/fTSzi6GhE9VDmmnRToyUFlR2LCA.roa
Signing time: Fri 12 Aug 2022 07:36:42 +0000
ROA not before: Fri 12 Aug 2022 07:36:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208972
IP address blocks: 185.233.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:fb:e1:0c:ba:be:09:fb:f9:fd:21:36:ad:e6:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
Validity
Not Before: Aug 12 07:36:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d34b38ba1a113d5439a69d14e8c941654762c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:0c:04:4b:f7:60:57:07:15:c9:16:c8:1f:
a3:1b:f2:93:9c:e6:8c:91:27:a5:1e:73:df:0f:a9:
41:6c:79:77:f2:58:a0:77:82:a4:bf:45:a2:e1:d0:
09:01:a2:f9:ff:81:7e:13:78:05:6b:33:1b:ed:43:
92:fb:64:f9:5e:71:ca:cb:f4:f9:4d:80:0a:db:27:
32:00:21:ca:47:3b:34:f7:54:5e:31:3e:d8:98:c1:
85:d5:9e:bd:b3:7d:7e:33:0d:b9:16:9c:12:18:f6:
70:20:ae:f9:46:37:08:b4:8e:78:ff:13:55:4b:2e:
53:83:b2:95:a9:21:95:60:b5:c5:6d:0a:13:00:22:
4f:89:dd:f7:0b:35:2e:f0:62:83:1e:3e:b9:16:3b:
2c:96:5f:3f:b3:ed:ee:49:11:e4:b4:89:b6:a2:e1:
8d:c0:58:7a:90:ae:8f:a4:a9:94:0c:92:b5:1a:69:
cc:62:a7:d4:0e:b9:24:f5:f5:90:d9:49:47:59:1d:
bf:65:e0:51:ee:c5:11:ff:ee:f0:34:23:e5:5f:2b:
c2:87:0a:47:c4:c4:27:48:75:0e:19:fb:32:6d:7f:
90:00:2b:c6:d1:c2:d4:4f:db:44:0b:fb:8a:fe:9d:
d3:93:65:9c:05:bf:a4:87:fa:27:bf:cd:b4:f2:2b:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:B3:8B:A1:A1:13:D5:43:9A:69:D1:4E:8C:94:16:54:76:2C:20
X509v3 Authority Key Identifier:
keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/fTSzi6GhE9VDmmnRToyUFlR2LCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.219.0/24
Signature Algorithm: sha256WithRSAEncryption
65:97:ad:7c:42:a0:07:cc:48:16:0b:66:6c:25:91:fc:9e:90:
60:1b:a6:04:d1:a6:22:2e:28:80:bd:a5:39:5d:db:97:a1:5f:
a8:d9:28:8b:14:d2:f8:ef:04:cf:e5:eb:ea:2c:0e:53:71:1c:
ab:25:e2:dd:dd:66:e6:91:2b:3f:fd:4a:0b:fc:06:e6:c2:e2:
fe:01:18:c4:70:bb:ab:8e:d7:fb:d8:c4:20:31:fc:43:45:2c:
65:fd:fa:fb:29:4d:df:90:c1:4c:d3:25:02:52:7b:fe:04:cf:
a1:05:08:19:4c:2b:38:b9:33:46:0c:81:56:cd:a6:59:3e:7f:
b0:da:4f:24:ee:ae:84:26:09:ad:6c:63:26:8e:54:86:83:e5:
7b:5f:0c:b4:14:27:b7:00:e2:f0:97:f3:a3:28:90:fa:6e:c0:
f3:f3:3a:fb:c7:45:c7:24:7b:bf:2d:cc:d2:27:4a:f7:30:25:
95:93:42:f3:27:1e:18:58:01:06:27:e6:dd:80:7a:91:64:55:
92:ed:32:08:ab:68:b5:ad:bb:cf:94:d0:85:c5:73:08:bb:43:
12:fd:42:15:8d:c2:47:c1:70:67:db:df:b3:f8:34:5a:03:6f:
ac:e4:28:8f:43:5d:17:e7:bc:11:40:0b:5f:27:92:06:48:7a:
31:88:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:53 2024 by rpki-client on console-ams.rpki-client.org