Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fCqbnNNHyMLFbLKr9NaVhMSjs3A.roa
File: fCqbnNNHyMLFbLKr9NaVhMSjs3A.roa (raw, json)
Hash identifier: 9q7w4r/zwrOoMUZVoZEGrZpy3tryWkc7ReqCuv6wpec=
Subject key identifier: 7C:2A:9B:9C:D3:47:C8:C2:C5:6C:B2:AB:F4:D6:95:84:C4:A3:B3:70
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 033CB1FD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fCqbnNNHyMLFbLKr9NaVhMSjs3A.roa
Signing time: Sat 01 Jan 2022 16:04:33 +0000
ROA not before: Sat 01 Jan 2022 16:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205455
IP address blocks: 185.212.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54309373 (0x33cb1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c2a9b9cd347c8c2c56cb2abf4d69584c4a3b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:41:2b:38:48:72:10:b7:ee:0b:33:8d:46:8f:
4e:f1:f6:90:3b:db:6a:60:fc:d6:0e:53:e6:cc:ce:
a4:90:87:bb:70:fc:9b:b2:38:c9:da:25:3e:8e:79:
95:37:43:f4:d9:96:1f:63:8c:c9:79:01:fd:c4:d1:
5b:5a:06:96:d9:87:47:02:29:72:27:25:e1:f4:28:
e4:da:08:2e:bd:9c:85:28:f0:02:93:0a:8e:7a:92:
2b:9b:5e:2b:34:44:73:6f:3c:7c:dd:c7:fc:2c:6d:
07:1b:0c:1a:e1:f8:f7:74:59:49:20:6c:52:35:08:
9e:f6:ba:ea:bc:0e:d9:a7:6a:c2:f6:57:6b:c6:2f:
10:2d:74:01:39:f2:f0:0c:7e:54:38:d4:a4:39:1c:
c0:2e:ec:ac:71:3a:3f:85:6a:9d:d2:93:c2:e6:b5:
9c:cf:0c:6e:bb:e8:14:8d:fd:38:3f:18:7c:07:17:
59:22:36:db:f8:b9:5c:9f:80:a4:05:de:ff:62:67:
48:ce:7a:96:31:99:c8:99:86:49:22:3b:ac:74:eb:
88:eb:b0:62:f3:a0:a2:49:49:25:d3:86:a9:8f:fd:
7e:50:1a:87:00:c1:dd:89:20:4f:89:ba:9b:39:45:
54:b4:4e:07:e1:5a:6a:b3:a7:60:86:8d:f5:b3:23:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:9B:9C:D3:47:C8:C2:C5:6C:B2:AB:F4:D6:95:84:C4:A3:B3:70
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/fCqbnNNHyMLFbLKr9NaVhMSjs3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:24:91:d2:6c:ed:f0:c2:6b:17:1e:9f:e7:8f:e4:25:12:57:
69:09:48:00:a8:04:d8:c2:02:34:18:a3:0a:e0:ba:2f:4f:47:
55:2f:7e:5b:64:de:d9:25:15:71:1b:c4:6d:5a:71:b5:84:ca:
09:86:39:6a:25:37:ff:05:9a:8d:14:9e:33:fe:49:e4:77:b3:
ce:52:51:16:e9:c9:b8:f9:22:67:e3:bc:ac:e5:88:57:07:de:
c1:40:08:58:32:60:de:58:02:c4:0d:27:af:78:f3:99:5e:7c:
e5:e7:53:67:92:a8:b7:b1:84:86:30:74:84:25:51:e8:2e:01:
7a:7e:37:1c:59:8d:d5:fb:51:85:1d:73:0a:81:e7:c0:b4:e1:
5f:c0:60:50:f5:f9:c4:1a:13:02:c9:90:44:ab:ea:b6:40:60:
46:2b:79:c1:ed:9a:dc:72:d5:5a:de:11:95:e0:8c:fe:56:9a:
f8:3b:68:68:a7:ef:54:e4:2c:75:dc:a1:fb:29:89:0f:49:67:
d5:56:9d:d3:77:10:fa:36:5f:8d:dc:36:4c:fb:b7:6d:d9:fa:
73:7c:0f:44:a3:fd:cf:d8:89:98:f2:9f:d9:fd:5b:9e:75:fb:
58:23:b7:d4:aa:ac:ad:07:f1:9e:4c:94:6e:b1:96:8a:19:af:
49:4e:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org