Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/COrBBPXsZ-kVeEI3MXj-JpgydfI.roa
File: COrBBPXsZ-kVeEI3MXj-JpgydfI.roa (raw, json)
Hash identifier: 5/IL07dCQBxXB13unfFq7DPw/66iQLnZEcEU45x0qvQ=
Subject key identifier: 08:EA:C1:04:F5:EC:67:E9:15:78:42:37:31:78:FE:26:98:32:75:F2
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0C97AD23
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/COrBBPXsZ-kVeEI3MXj-JpgydfI.roa
Signing time: Sat 01 Jan 2022 14:55:43 +0000
ROA not before: Sat 01 Jan 2022 14:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43006
IP address blocks: 217.148.240.0/20 maxlen: 24
185.169.146.0/23 maxlen: 24
217.70.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211266851 (0xc97ad23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Jan 1 14:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08eac104f5ec67e9157842373178fe26983275f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:cf:42:b5:2c:ca:50:85:99:5d:5c:74:bb:
f1:21:38:0f:1f:ba:b5:79:1a:a0:0f:c1:97:87:13:
28:17:72:51:11:90:0b:9a:2e:60:03:71:05:b7:0e:
f9:42:39:7c:e3:2d:85:1a:3a:d4:e9:33:0a:d9:d7:
87:16:7e:79:14:a1:e1:e3:7c:17:2a:db:f6:6f:23:
95:47:de:49:3f:53:fd:a7:bc:a4:9d:9f:09:5a:31:
46:69:74:27:f2:80:e4:48:4c:5c:b7:c7:6f:cf:09:
78:fc:bf:d0:be:5f:b3:e9:29:5e:61:26:71:1e:22:
1f:cd:05:ef:8e:e6:ed:bc:73:6d:ae:80:62:b6:e6:
ac:24:2c:29:42:75:1f:2d:7e:48:04:a8:bc:f3:5b:
97:25:c4:12:a3:d1:47:e4:2c:4c:73:a3:91:36:f7:
96:03:0b:e8:65:ce:00:8e:62:87:72:b0:bc:7a:53:
2d:e0:df:d2:e1:b4:8c:23:94:aa:ec:14:34:ee:2f:
3b:6e:08:0e:37:87:27:49:02:de:cf:73:ea:b6:8e:
90:c3:d1:ec:4f:ec:39:b2:d5:3a:16:70:e4:4a:8f:
07:a8:e5:b3:86:dd:05:48:1e:d5:fd:d1:38:08:af:
30:72:bc:f2:c6:45:bd:ca:5b:ba:2a:6d:f0:cd:d5:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:C1:04:F5:EC:67:E9:15:78:42:37:31:78:FE:26:98:32:75:F2
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/COrBBPXsZ-kVeEI3MXj-JpgydfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.146.0/23
217.70.224.0/20
217.148.240.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:f8:ab:31:61:46:02:6b:56:0f:02:72:71:9e:01:f7:5d:78:
ac:82:f1:ae:54:28:d0:14:7d:c1:32:63:fa:e5:31:1b:53:cf:
5c:13:bd:f0:3f:16:7e:fd:35:d0:7e:c3:eb:b2:c0:71:cd:2f:
85:d9:29:45:15:39:f6:94:66:49:db:c8:8a:e1:43:83:68:b9:
e1:05:1d:00:e4:68:16:6b:dc:26:40:92:a4:5b:c3:fb:84:a9:
aa:93:05:38:11:1f:5c:01:98:0b:25:19:fd:11:56:7b:03:c9:
53:f4:ac:f8:c2:11:b8:ba:db:fe:48:92:9b:45:bb:c0:7d:a7:
f8:23:4d:c3:a0:5d:15:52:65:0e:72:55:15:d6:b7:4f:39:e3:
b9:f1:be:ea:af:c3:8d:af:01:f5:4b:39:c3:ef:a2:5f:98:6b:
7c:fe:f0:04:03:61:7c:d8:3d:88:7b:e2:a2:69:f8:81:86:1d:
f1:7a:d8:a8:61:12:82:40:b0:3a:87:f3:3f:2e:53:e8:b2:03:
c0:34:87:38:af:ce:3d:8e:47:93:96:56:c0:4d:64:61:e9:c0:
fc:3a:59:f6:fd:24:6d:30:88:bc:8d:cd:f4:80:d0:db:59:2b:
a8:98:2b:a7:df:ca:a6:cd:82:76:8c:b6:f1:3e:39:68:3b:c5:
e0:2a:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:33 2024 by rpki-client on console-fra.rpki-client.org