Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/1-bRnHLpZVlOWaiz6aPg96IXlA4U.roa
File: 1-bRnHLpZVlOWaiz6aPg96IXlA4U.roa (raw, json)
Hash identifier: K/iV5ljXHZPGHM1VHnWhvZvSDaq8M4OX/lYcDfteqdk=
Subject key identifier: F9:B4:67:1C:BA:59:56:53:96:6A:2C:FA:68:F8:3D:E8:85:E5:03:85
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 04550F93
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/1-bRnHLpZVlOWaiz6aPg96IXlA4U.roa
Signing time: Sat 01 Jan 2022 12:58:13 +0000
ROA not before: Sat 01 Jan 2022 12:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202354
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72683411 (0x4550f93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 1 12:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9b4671cba595653966a2cfa68f83de885e50385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:c7:6a:34:0b:86:09:22:59:30:8c:d9:46:
43:aa:04:e5:3a:2a:36:4c:4b:1e:af:99:b4:6e:6e:
cd:49:b9:0c:4c:5a:09:9f:73:56:04:3b:85:90:9a:
ee:01:72:4f:e6:4c:c4:25:a2:61:bf:21:c2:e2:d9:
b9:ef:65:07:e0:61:06:39:f0:57:0e:c3:c4:72:76:
04:83:e8:01:44:af:c2:4d:1a:76:5b:fc:df:79:92:
fe:4b:eb:50:95:a1:ee:dc:f0:40:07:b5:02:aa:e5:
b8:18:23:b6:fb:6e:6f:3a:1a:d6:f2:e8:e4:78:2d:
13:98:76:14:29:9c:33:f7:dc:00:1b:60:d3:a4:8d:
19:af:76:a5:be:d7:41:b3:8b:cd:f5:70:fb:3c:a5:
9e:b4:79:7f:70:9d:6e:71:cd:ff:cf:4d:f6:7d:64:
1e:26:4d:99:f5:36:00:82:28:7b:c2:11:66:c7:f1:
9f:79:b7:4f:6e:3d:eb:1a:0e:57:87:9b:2f:3c:33:
99:20:d4:1e:42:8f:8f:32:ca:a7:30:2c:43:2b:4f:
4b:52:ee:8b:07:be:dd:db:89:b4:5e:71:00:87:ac:
b4:56:5f:d4:4b:0a:56:86:d5:83:bc:2d:17:ba:bf:
e0:60:2c:11:6d:42:7c:a7:f4:db:f4:17:77:7c:76:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:67:1C:BA:59:56:53:96:6A:2C:FA:68:F8:3D:E8:85:E5:03:85
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/1-bRnHLpZVlOWaiz6aPg96IXlA4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:07:ab:74:53:70:ee:a2:ea:f0:63:62:98:98:5c:f2:36:
ce:dc:bd:44:ca:a4:04:87:a3:85:a4:03:3a:7d:78:79:09:8b:
4b:d3:75:df:e6:7b:d2:3e:c4:66:59:c5:b2:b0:fc:15:3b:1e:
65:3e:a7:3a:e3:ef:3a:cc:81:d0:de:5c:7c:8f:44:0e:73:e2:
a3:87:68:91:c1:94:a5:15:37:7d:13:57:d7:a9:58:2e:7b:93:
a5:e3:51:c8:ba:d5:ce:c4:5f:69:4b:72:dd:b0:10:fc:54:55:
92:32:23:31:12:6d:4b:b3:9e:35:4b:9f:c6:52:e4:b9:6c:84:
3d:88:0e:fa:7c:a2:97:89:a6:d8:73:d3:62:5f:83:7a:64:66:
03:10:d8:ca:ea:d5:32:7f:d2:2d:a3:54:e9:32:cc:d1:8c:df:
46:f8:65:fb:f0:af:9b:1f:79:36:65:c0:da:a9:fe:05:d4:d3:
22:ce:45:63:35:97:d2:5c:64:00:d1:5a:9f:10:5c:20:a0:df:
f7:f4:5f:2f:7e:f8:23:d7:83:df:8d:9b:84:7e:41:5b:a4:90:
fa:5b:81:13:f9:09:9a:c4:98:40:4a:89:f8:b2:9d:39:27:f6:
90:3f:5d:ee:6a:05:88:05:4a:68:ed:47:9a:5e:a8:84:8d:08:
97:80:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:36 2024 by rpki-client on console-fra.rpki-client.org