Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RcEBf3nvztSEKLsCfRG5bT30Bik.roa
File: RcEBf3nvztSEKLsCfRG5bT30Bik.roa (raw, json)
Hash identifier: TxYK6n0UkT9UfGpMWR0um8JfVWDriS/B1kF0oKby0cg=
Subject key identifier: 45:C1:01:7F:79:EF:CE:D4:84:28:BB:02:7D:11:B9:6D:3D:F4:06:29
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841DAFCDF6183B06CB6C4F771F07E33BD5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RcEBf3nvztSEKLsCfRG5bT30Bik.roa
Signing time: Fri 28 Oct 2022 08:22:51 +0000
ROA not before: Fri 28 Oct 2022 08:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211076
IP address blocks: 185.196.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:af:cd:f6:18:3b:06:cb:6c:4f:77:1f:07:e3:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 08:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45c1017f79efced48428bb027d11b96d3df40629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:54:81:8a:55:57:11:34:8f:83:15:b8:5b:
c6:55:da:b5:d3:de:52:b4:31:3f:3b:b2:8b:ee:be:
35:df:7b:9b:aa:91:ec:e2:9b:00:ee:da:5c:7e:fe:
91:7f:77:4e:d5:39:e9:67:ac:27:a5:25:b2:38:aa:
5d:c8:3c:e4:b2:d4:e0:e8:bf:00:1c:97:82:c1:09:
04:c8:6a:1a:34:96:7b:c4:6b:1f:ea:77:b1:80:03:
b6:7b:28:db:25:b8:ac:52:79:1e:a1:cb:e0:22:50:
04:3a:97:84:d3:bb:f9:a5:2e:c1:1e:c3:5f:c8:b4:
50:46:18:ee:11:92:1d:0f:29:fd:cd:a2:e1:da:81:
99:2c:7b:55:2d:03:cc:f1:da:61:cc:9b:3d:08:25:
e3:45:60:5a:51:bf:13:7a:3e:34:86:c7:1f:d5:fb:
fd:3c:f3:41:5a:f2:b6:26:89:ed:bc:62:cf:11:ca:
ff:6e:32:2a:9b:fa:6a:6c:2e:86:0f:db:f4:49:5a:
da:d9:31:47:c0:aa:15:6f:b9:30:3d:f3:41:9a:a5:
cc:62:2f:36:24:08:e0:e5:3b:b3:71:2f:41:41:5d:
06:79:aa:70:c5:94:ec:d6:df:84:66:01:43:c8:e3:
10:a4:b1:27:32:e3:db:0d:53:2c:7b:0d:f2:b5:98:
2d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C1:01:7F:79:EF:CE:D4:84:28:BB:02:7D:11:B9:6D:3D:F4:06:29
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RcEBf3nvztSEKLsCfRG5bT30Bik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.245.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3e:db:f7:d1:b1:73:11:7f:ed:88:fd:49:d5:c9:ab:65:87:
9d:ea:de:2c:9b:ce:f4:e1:c6:12:0d:8c:2d:b5:ff:90:96:a4:
82:a8:6c:d0:0c:db:1a:fa:95:83:87:1d:07:bf:7b:5a:33:df:
54:8c:4c:87:8e:b5:c7:1e:ba:1f:4f:ff:f7:96:a1:0b:84:42:
35:54:5e:b1:7a:d2:fa:fb:cc:65:2e:e7:bc:48:b7:21:57:bb:
4d:47:03:54:e1:f5:47:b2:62:27:02:a3:ab:44:8f:a6:04:44:
94:45:4a:e5:72:8e:4c:1e:6e:6b:53:1b:7f:d5:0a:20:15:7c:
58:e6:c7:1b:96:ca:00:5c:bb:6e:91:78:41:29:f7:7b:7c:57:
3e:8f:3e:e9:41:3c:c5:c1:94:10:d4:b7:17:25:7a:1e:9f:5f:
08:be:4a:6e:d3:63:ca:34:1a:25:77:d4:36:65:07:ff:28:c5:
c0:4c:b4:33:2c:5b:7c:db:87:ca:e2:11:0e:48:e2:df:3b:11:
aa:71:92:41:00:fa:2e:4e:c2:39:79:a5:3d:ea:89:25:46:6a:
f6:68:ec:dc:85:2c:54:63:f2:77:b6:0e:18:07:cd:7d:27:07:
29:0c:21:11:7e:bf:e6:8d:4e:6f:ef:78:bd:77:d1:2c:31:e4:
2c:7e:6a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:59 2025 by rpki-client