Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RxfXOTqppaf7Pyn3thpYNHBT7_M.roa
File: RxfXOTqppaf7Pyn3thpYNHBT7_M.roa (raw, json)
Hash identifier: ZPp7Mmcz0Tk8xXfEGRVcQaF8dt4BJgaenKyYZcqMlXM=
Subject key identifier: 47:17:D7:39:3A:A9:A5:A7:FB:3F:29:F7:B6:1A:58:34:70:53:EF:F3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 034B2368
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RxfXOTqppaf7Pyn3thpYNHBT7_M.roa
Signing time: Sat 01 Jan 2022 16:04:42 +0000
ROA not before: Sat 01 Jan 2022 16:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210702
IP address blocks: 185.180.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55255912 (0x34b2368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4717d7393aa9a5a7fb3f29f7b61a58347053eff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:bd:18:e6:70:26:ca:92:0d:38:0a:a2:78:
bf:59:51:24:70:b6:61:af:cf:6d:c0:b5:1a:20:ec:
eb:28:85:86:93:77:0a:80:82:e6:62:83:50:44:99:
dc:88:8c:c7:a2:64:3e:46:6d:91:3f:1e:65:d6:a2:
a9:0c:2f:a0:57:67:fc:73:61:99:8b:a1:e3:89:84:
0b:32:7a:0d:4f:7d:9e:c4:f2:94:4a:e6:b7:36:3c:
36:f6:4c:fb:bf:1b:1d:f0:dc:cd:1b:a3:e0:c0:a8:
48:67:34:a1:6b:40:3e:95:e0:d8:ac:8e:bb:c4:c5:
7e:1e:9d:37:61:52:96:f7:cc:8a:03:0d:e3:22:e7:
e4:51:57:a4:5e:77:0f:3c:c7:e9:fc:74:ba:f9:74:
c5:61:98:3a:4f:20:25:bf:65:b6:2d:64:cf:93:41:
bb:b3:5f:3a:a5:6f:8b:b0:e0:90:fb:dc:69:a3:b0:
49:39:8c:7d:df:60:d7:b8:c0:72:97:b7:d8:77:be:
ec:9b:84:9d:3a:a0:f3:fe:8a:bf:2a:1a:f3:7c:d7:
f8:04:11:8f:32:7a:4a:06:d8:23:d0:aa:2b:eb:fb:
fc:91:90:9b:7c:b6:18:41:af:4d:80:71:86:74:b4:
91:62:ee:7d:17:c2:6a:1e:7e:83:69:36:4c:14:14:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:17:D7:39:3A:A9:A5:A7:FB:3F:29:F7:B6:1A:58:34:70:53:EF:F3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RxfXOTqppaf7Pyn3thpYNHBT7_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:06:63:03:f3:2c:67:13:60:e9:9d:9b:70:e1:7c:47:6b:7e:
96:3d:54:36:61:31:3d:0f:4d:7e:85:b5:dd:03:a7:95:12:28:
27:cc:23:87:ee:c8:fd:27:a0:44:42:f8:e2:24:fe:6a:e6:73:
06:0d:d7:d0:c3:f0:90:24:f1:c7:dd:d2:3d:b8:64:e3:bb:60:
44:cb:21:86:17:2e:2f:c9:39:e2:0f:8c:cf:c2:a5:77:c3:77:
e6:65:b5:a6:39:b2:3c:f8:22:a3:f2:a6:3b:62:23:c2:71:c3:
07:8f:14:2f:76:c0:a5:90:bf:a8:ee:48:c5:4d:aa:d4:c0:20:
aa:23:3b:5f:7c:be:1b:bb:55:92:a9:05:7f:da:0b:d4:96:f3:
0e:57:81:bd:b8:d0:be:af:c9:0f:c2:6b:62:61:e6:99:b9:67:
b6:35:d7:6f:55:90:fc:d1:2a:bb:d5:67:8e:50:71:d2:76:81:
e9:31:d3:4f:e4:84:b5:07:8c:92:c2:ff:e3:12:54:1d:66:f4:
50:c9:03:6b:de:09:15:28:7a:e7:6a:0a:83:e6:4c:e3:01:8b:
2c:f2:02:30:dd:4f:47:05:fe:e5:5d:ed:14:4f:06:a2:91:c1:
ca:0e:9a:44:dd:f3:19:b2:24:72:02:56:66:ce:a1:e8:b3:88:
67:1a:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org