Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCo60b8MvjNUtllg8EAylHAKEwc.roa
File: CCo60b8MvjNUtllg8EAylHAKEwc.roa (raw, json)
Hash identifier: 0K+h38z1L3GL4VN0s+cJLp1ROAKMuO5/nPAQ7RtpLjQ=
Subject key identifier: 08:2A:3A:D1:BF:0C:BE:33:54:B6:59:60:F0:40:32:94:70:0A:13:07
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853E94DEE61C7A08A95EEF82C88EAA58C1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCo60b8MvjNUtllg8EAylHAKEwc.roa
Signing time: Fri 23 Dec 2022 10:43:41 +0000
ROA not before: Fri 23 Dec 2022 10:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204821
IP address blocks: 185.238.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:94:de:e6:1c:7a:08:a9:5e:ef:82:c8:8e:aa:58:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 23 10:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=082a3ad1bf0cbe3354b65960f0403294700a1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:0b:5d:0d:88:71:87:f0:d7:4e:89:2f:63:
26:66:b0:36:0b:bc:d0:1a:b5:55:97:e9:c8:37:1d:
3a:35:a3:a2:4c:4d:f7:89:1d:1a:e0:3f:ec:b4:1f:
82:31:b7:2f:11:d4:77:c9:a8:51:58:18:80:2b:98:
c2:ad:00:1d:ba:70:0a:03:e0:48:f3:15:56:e3:51:
fa:bd:eb:de:03:aa:88:4b:d1:e7:9c:2b:11:e7:ba:
56:aa:95:17:8a:b3:b9:cb:04:5d:78:0d:a1:50:d5:
b7:54:76:6c:3c:fd:c2:72:02:88:0e:2b:5f:f7:cb:
d8:d5:62:99:f2:ce:fa:73:0e:e0:c2:09:32:a8:f8:
0d:b5:7e:bd:32:9d:da:4f:82:eb:4b:d6:4d:75:69:
b8:d0:40:53:5e:d2:6c:5d:b0:a4:06:a4:49:07:04:
cc:8b:78:e2:62:c4:1e:94:a1:a3:0f:b3:0a:b6:ec:
f6:f2:4d:f3:ee:03:bd:31:94:ae:81:c0:59:73:bc:
f8:f7:70:23:f7:9f:95:14:3a:1c:d7:6a:8d:0b:21:
27:39:f2:d7:36:af:d2:69:03:57:2e:f3:ac:6e:ba:
49:16:61:02:ba:78:7f:6c:aa:0f:22:ce:7b:60:4f:
4a:6b:ef:0a:b1:86:75:af:1b:b5:f2:cd:8d:34:a4:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2A:3A:D1:BF:0C:BE:33:54:B6:59:60:F0:40:32:94:70:0A:13:07
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CCo60b8MvjNUtllg8EAylHAKEwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:00:af:15:09:08:eb:3e:e1:54:c9:73:41:0a:2e:93:51:7c:
e4:9f:ad:f5:f8:0d:1a:0a:9a:9f:3c:28:1e:c0:18:ba:93:dd:
3c:10:e3:14:d1:83:58:39:41:3e:d2:de:72:61:b2:2c:af:6c:
f1:2e:85:87:96:97:45:ae:30:17:33:2d:f8:41:cc:db:1d:50:
37:95:b1:af:ee:3a:30:45:49:cf:99:21:3e:f0:84:7a:68:2f:
d4:98:a3:60:58:54:a5:72:22:41:5a:31:d0:12:b8:af:b1:87:
e2:02:fd:b4:0e:34:d6:d2:51:8d:61:79:24:a5:91:94:2c:c5:
1d:cc:df:b1:28:54:b9:1a:39:78:11:f8:5c:36:07:11:1f:be:
3f:43:c2:a5:a1:dc:4d:40:ba:52:e9:dc:0a:42:68:c1:e7:09:
57:a5:ff:0e:84:bb:fb:e9:30:a3:3c:ff:37:6d:48:59:06:d6:
c3:21:6f:ae:53:64:ee:95:85:94:4e:59:59:49:0a:94:62:04:
43:f2:9c:a7:62:c9:7c:46:51:08:b8:54:aa:4c:74:bc:0b:f0:
af:98:95:44:b5:e7:51:8e:f6:16:ee:5e:66:f4:89:05:41:c7:
3b:7a:5a:66:da:0f:02:7f:98:01:ad:df:4e:e7:28:68:e2:9c:
fa:d6:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org