Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/HbzWdmaoU7VFXCkjQnpawurKUo8.roa
File: HbzWdmaoU7VFXCkjQnpawurKUo8.roa (raw, json)
Hash identifier: 8Q/x6JwZCZWTRHI0jBkUfOWE0hCVsQqQCMs3eMSziK8=
Subject key identifier: 1D:BC:D6:76:66:A8:53:B5:45:5C:29:23:42:7A:5A:C2:EA:CA:52:8F
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 17EFDD83
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/HbzWdmaoU7VFXCkjQnpawurKUo8.roa
Signing time: Sat 01 Jan 2022 10:53:27 +0000
ROA not before: Sat 01 Jan 2022 10:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212939
IP address blocks: 185.66.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401595779 (0x17efdd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jan 1 10:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dbcd67666a853b5455c2923427a5ac2eaca528f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:ac:44:8b:e7:ba:79:7b:8c:4e:5b:4a:1e:
4d:e8:ab:f1:b5:ee:a1:28:c8:57:27:91:1e:7b:84:
7f:cc:b4:d5:56:6b:e2:5f:bb:5e:39:39:ea:3e:3b:
0b:95:d2:3a:8e:77:e8:cd:8e:e9:7b:0f:d3:f2:01:
67:4a:9f:d1:f7:12:c9:98:b1:c7:f2:fb:7f:78:05:
2c:9b:cf:c3:76:d7:82:b1:99:f1:9a:30:a3:78:b1:
91:ff:90:7b:cb:50:6f:4b:96:54:c4:ab:d8:20:9e:
75:79:ca:84:3a:72:56:c3:e4:70:92:9e:90:da:60:
44:7b:76:79:ef:af:7d:85:34:da:4f:b8:43:f9:fc:
ae:6e:71:98:aa:0d:c4:f1:cb:fb:5f:7d:66:22:ab:
fc:d4:1c:28:c9:ee:6e:84:fe:41:5c:87:73:96:cf:
a0:89:43:57:96:63:1f:eb:48:56:39:70:01:0d:bf:
39:69:d1:8c:40:89:f0:48:ce:14:ba:fc:d1:62:ca:
57:c2:e2:7a:7a:02:f4:84:0f:88:a3:ef:10:df:bf:
71:2a:77:d6:23:e1:8f:94:85:07:21:ad:dd:4c:8a:
09:74:ef:7b:de:ea:35:ec:13:27:6e:49:a8:3e:d5:
5e:ac:a9:a7:fa:8e:bb:34:29:84:72:ae:93:4d:20:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BC:D6:76:66:A8:53:B5:45:5C:29:23:42:7A:5A:C2:EA:CA:52:8F
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/HbzWdmaoU7VFXCkjQnpawurKUo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.230.0/24
Signature Algorithm: sha256WithRSAEncryption
49:eb:6d:a7:08:c0:46:98:11:73:a5:a0:42:cf:36:54:df:37:
8f:c5:8e:61:77:c6:4a:d7:0b:70:e7:0e:67:de:e1:dd:78:0c:
58:82:bd:d2:fe:ee:88:22:f9:76:de:1d:ed:8b:a2:0c:b0:33:
5c:da:08:7e:aa:ea:24:35:1f:ac:5c:2a:49:9c:dc:2a:78:02:
1f:38:fb:01:f7:10:e1:ed:8f:a6:68:b7:5d:cf:4e:d9:c9:46:
fa:f1:0c:d7:21:4f:30:b1:a8:76:c4:7f:a6:99:e7:85:49:64:
9d:ab:b7:89:0f:7c:0b:86:a3:72:a0:61:42:fc:0f:9b:c0:7b:
ed:b7:d9:db:a2:ac:8b:a2:0f:0e:62:9b:1e:52:5c:d7:3b:fb:
26:dc:61:d9:10:90:55:f0:7f:53:ce:c4:f9:ae:6b:5e:d0:25:
e3:bc:79:7f:6f:65:bb:db:e3:48:d2:18:7d:c2:74:fa:25:3d:
f8:31:a5:4f:19:11:61:c7:bd:b9:b4:01:e4:23:cb:e6:eb:54:
b5:c6:ee:82:55:08:ab:cb:c6:be:99:d4:37:c4:53:76:8a:83:
1e:50:3e:ac:ba:f8:2d:0b:fd:e2:b3:5e:9d:5f:ef:5f:a7:87:
e8:ab:9b:c6:5b:97:e6:d0:63:b4:1c:83:b0:a7:08:b4:7f:e3:
e5:cb:d0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:31 2024 by rpki-client on console-fra.rpki-client.org