Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/saDyYmAvZMHdrPz0PQ-lkvKQrpc.roa
File: saDyYmAvZMHdrPz0PQ-lkvKQrpc.roa (raw, json)
Hash identifier: Y7bfEUksHwSGZ2WCfQOdhTd4TJZTOwee2pUocPoFskQ=
Subject key identifier: B1:A0:F2:62:60:2F:64:C1:DD:AC:FC:F4:3D:0F:A5:92:F2:90:AE:97
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01840350218028B79765D0BDBC9999B7A877
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/saDyYmAvZMHdrPz0PQ-lkvKQrpc.roa
Signing time: Sun 23 Oct 2022 05:28:13 +0000
ROA not before: Sun 23 Oct 2022 05:28:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202029
IP address blocks: 185.212.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:03:50:21:80:28:b7:97:65:d0:bd:bc:99:99:b7:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Oct 23 05:28:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1a0f262602f64c1ddacfcf43d0fa592f290ae97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6e:e3:ec:04:94:8a:24:84:b1:90:69:37:a4:
4d:37:f2:48:eb:4e:71:6e:fb:f8:c0:91:3e:af:b4:
7c:96:be:42:6f:71:dd:f1:97:45:96:b0:39:40:26:
70:b0:c3:c7:9d:83:b9:42:63:5d:3f:6e:2b:65:07:
2d:94:49:cf:64:36:2f:68:6d:06:38:b9:b3:e9:74:
12:a9:5b:fe:49:02:5f:6b:aa:34:54:0e:ad:55:d8:
0a:ff:b2:de:8b:d3:a4:c5:39:c7:ff:a5:7a:92:ca:
bb:5f:8b:43:0d:a5:40:c6:9e:29:cb:12:c5:14:d5:
14:ae:18:a2:3e:bd:99:53:88:95:d6:44:5f:3b:eb:
92:e7:f1:58:52:5b:da:73:e9:46:68:8b:a9:54:c3:
00:bc:9f:45:10:27:c5:6b:b3:0f:0e:4f:90:f9:55:
72:a1:c6:f9:fb:8d:27:4c:f0:2a:8a:62:f7:2e:07:
f9:19:75:10:29:1c:62:2f:00:50:22:d8:c1:b6:d3:
c9:fa:4d:da:30:cc:e0:88:ee:3d:36:14:04:ce:5a:
61:dc:01:9a:4c:c2:0d:92:2d:21:50:3e:ad:85:04:
43:b8:39:ff:6e:94:f3:e6:6a:11:72:10:50:4a:1a:
49:18:c1:13:b9:d9:8e:60:0e:f8:88:44:f2:78:5a:
6e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:F2:62:60:2F:64:C1:DD:AC:FC:F4:3D:0F:A5:92:F2:90:AE:97
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/saDyYmAvZMHdrPz0PQ-lkvKQrpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.194.0/24
Signature Algorithm: sha256WithRSAEncryption
19:06:ea:73:c9:3e:a1:e2:b3:45:3c:65:98:8e:52:51:68:39:
97:fe:20:d6:91:de:75:87:06:24:ea:42:c4:c0:c6:ee:a8:19:
78:3b:b4:3d:20:31:df:c5:4a:29:0e:76:ba:cf:e0:df:2b:c9:
d5:e8:ff:18:fa:82:aa:cf:a7:87:f3:6c:11:4a:84:e8:1e:1b:
e5:1a:fb:dc:91:56:1d:67:e4:91:2d:83:3d:fe:16:b4:45:8b:
28:aa:e7:1a:23:b7:8e:0b:d9:d7:61:72:d4:77:c2:bd:cf:36:
c9:f0:13:b5:09:a9:da:0b:a7:a6:2c:d3:11:38:4c:0f:93:d5:
27:10:75:aa:05:8b:61:9d:40:a1:db:0f:4f:99:a9:50:03:31:
72:05:30:ed:15:df:18:c2:2c:af:9a:1b:d1:6e:b7:bc:3f:c9:
ca:5b:57:0b:6c:86:99:96:24:99:65:9b:d1:79:33:28:ec:24:
84:be:ea:92:05:0d:18:b7:77:bb:e4:1d:6b:56:a8:4e:1b:87:
c6:60:f8:58:d4:06:0d:0d:14:aa:60:20:0d:f8:16:89:fe:e2:
a9:6b:fb:58:2a:48:d7:e7:8b:54:4d:52:9c:3b:a4:5c:cd:15:
f2:ac:12:ca:ab:1e:a1:d3:6f:41:bc:6f:15:83:7c:5b:cf:52:
35:99:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org