Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/yDGzJ0vTG_8IbG9QMcuOjhHjoaA.roa
File: yDGzJ0vTG_8IbG9QMcuOjhHjoaA.roa (raw, json)
Hash identifier: TCzc+YDg1bxJoHA2XZzVTk46w4TwtDmrW7zPKFuPkLw=
Subject key identifier: C8:31:B3:27:4B:D3:1B:FF:08:6C:6F:50:31:CB:8E:8E:11:E3:A1:A0
Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial: 09C9BEE6
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/yDGzJ0vTG_8IbG9QMcuOjhHjoaA.roa
Signing time: Sat 01 Jan 2022 09:06:34 +0000
ROA not before: Sat 01 Jan 2022 09:06:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.57.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164216550 (0x9c9bee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
Validity
Not Before: Jan 1 09:06:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c831b3274bd31bff086c6f5031cb8e8e11e3a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:22:0f:c2:08:64:73:06:96:b5:a3:e7:ba:
cd:54:d1:a8:4e:bc:20:95:58:20:87:5c:50:e5:0e:
8d:c7:cd:a3:c0:bc:b8:ed:e2:ab:e2:c4:75:c9:a6:
47:a9:b8:3b:3e:85:f0:55:8c:fe:2f:c6:49:20:41:
b3:45:0e:1a:91:e2:ac:1d:d2:d1:a1:5d:21:67:43:
3d:ce:17:f9:9e:5b:49:d2:4c:69:2e:0c:21:c1:f9:
d5:2f:8a:d9:91:f6:4c:03:2f:59:b2:a3:00:c3:07:
bf:08:1d:3f:41:78:77:41:58:4b:ec:7e:60:7a:70:
1f:da:c9:24:45:6e:63:43:0a:21:72:2d:0c:20:d4:
68:ab:b1:20:73:b3:f9:da:ce:3f:1d:43:6a:e0:32:
a4:24:9e:60:3f:fd:1f:b3:03:fe:94:06:07:d3:e2:
ca:df:f1:6c:41:a1:67:78:4a:b9:b2:d9:c6:30:ac:
5a:ed:36:f6:19:d7:8d:05:35:9f:a7:20:e1:bc:69:
0b:72:d8:ee:e9:58:7c:ce:69:cd:f4:fb:6d:2f:1c:
7e:7e:1c:10:9f:7f:71:ee:fe:98:51:6e:59:2d:0a:
4e:92:79:c8:cd:56:3d:26:d6:2c:dc:0d:97:fc:a5:
0f:09:f1:4d:2f:01:62:af:2c:f1:be:17:98:55:54:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:B3:27:4B:D3:1B:FF:08:6C:6F:50:31:CB:8E:8E:11:E3:A1:A0
X509v3 Authority Key Identifier:
keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/yDGzJ0vTG_8IbG9QMcuOjhHjoaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.216.0/22
Signature Algorithm: sha256WithRSAEncryption
13:35:86:b4:45:0f:54:ff:3f:20:9b:e9:d0:b7:17:40:5c:27:
f0:17:2f:51:cb:1d:e9:32:2d:4b:b5:7b:33:c9:c0:81:6f:de:
b4:4f:b5:52:65:45:6f:a6:f3:98:f3:c2:39:f6:02:e9:31:cd:
6a:d9:35:91:8a:33:85:50:9c:a7:e5:57:75:ef:af:ca:18:82:
39:7f:3d:8e:92:f0:78:b1:45:fd:10:ad:42:28:1f:b9:18:58:
3e:b7:6f:35:bd:16:35:a8:c7:f6:9d:a3:27:6e:61:5a:8b:df:
11:1f:54:2f:43:2f:f7:f4:51:da:d0:cd:12:88:bf:7d:de:94:
55:cc:9c:47:7e:fc:29:da:40:c7:47:ea:ba:94:ec:6c:26:64:
56:ab:a5:72:68:50:87:a2:16:a0:ea:ae:36:0c:ca:38:49:09:
1b:ea:f1:90:99:b3:2c:d9:5c:74:50:fd:c8:0d:ed:61:ae:83:
60:7a:6e:b7:a1:af:d7:d4:1d:40:dc:9f:17:4e:06:a4:f3:50:
14:a8:2e:06:ed:34:63:d2:66:28:63:f2:2b:dd:5d:81:5f:44:
dd:3e:8b:e0:76:c9:44:32:d8:7d:a4:e9:76:6b:d4:8d:61:9a:
73:7e:a4:18:38:89:8f:88:03:fb:85:b7:f3:79:18:ae:46:90:
19:ef:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:43 2024 by rpki-client on console-fra.rpki-client.org