Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/tgO13WP-jsl4SR9C22ZqTygP1ys.roa
File: tgO13WP-jsl4SR9C22ZqTygP1ys.roa (raw, json)
Hash identifier: ML5nPLY3hivWpFjlnviwRW8zR1lXqJfP2rgCt/I0mtg=
Subject key identifier: B6:03:B5:DD:63:FE:8E:C9:78:49:1F:42:DB:66:6A:4F:28:0F:D7:2B
Certificate issuer: /CN=a316c7659af1d56bc718faf614f092758f5edc7f
Certificate serial: 0183E6E15BA91462EF816F8AB221BA483B07
Authority key identifier: A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/tgO13WP-jsl4SR9C22ZqTygP1ys.roa
Signing time: Mon 17 Oct 2022 16:57:52 +0000
ROA not before: Mon 17 Oct 2022 16:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213151
IP address blocks: 185.221.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:e1:5b:a9:14:62:ef:81:6f:8a:b2:21:ba:48:3b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a316c7659af1d56bc718faf614f092758f5edc7f
Validity
Not Before: Oct 17 16:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b603b5dd63fe8ec978491f42db666a4f280fd72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:75:d3:a6:60:2d:ba:d2:d0:b1:b0:11:b7:
f5:92:88:2d:bb:8a:e7:a2:aa:a2:70:69:5c:8c:ef:
57:65:14:b1:c1:4b:2a:19:4d:cc:b4:dd:e5:d2:cd:
9f:a2:ba:d5:88:2f:13:9e:4c:e1:b1:ef:77:fb:40:
5f:e0:13:fe:43:7d:4f:67:45:d2:70:47:a6:bf:07:
e2:17:74:72:50:05:44:c2:ea:9b:21:3b:6f:d8:81:
a1:aa:50:0f:01:12:8c:e2:80:3c:7c:7c:b3:80:46:
7f:d9:9a:61:c8:45:05:76:99:4c:45:1a:8a:aa:89:
71:03:53:06:d9:17:b8:58:2e:f3:94:9e:aa:6f:84:
54:82:20:a1:a0:35:06:f6:12:d4:a7:04:94:5c:07:
f9:da:e9:c9:06:8e:b0:96:c6:17:b1:45:90:48:0a:
15:fe:f8:4d:47:0f:29:be:f6:5c:12:04:5d:a2:52:
2f:59:c9:a2:c1:79:72:d7:7c:33:24:5d:91:55:1d:
0a:4a:01:e5:17:76:e6:70:52:00:6a:8b:9a:00:2c:
47:54:c3:0e:eb:f2:96:6a:c8:95:aa:21:3a:c7:fc:
90:e6:9b:bd:73:fa:dd:b5:f4:58:69:94:85:cd:66:
56:38:e8:5e:37:d9:20:02:a4:d5:de:37:69:fa:f2:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:03:B5:DD:63:FE:8E:C9:78:49:1F:42:DB:66:6A:4F:28:0F:D7:2B
X509v3 Authority Key Identifier:
keyid:A3:16:C7:65:9A:F1:D5:6B:C7:18:FA:F6:14:F0:92:75:8F:5E:DC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxbHZZrx1WvHGPr2FPCSdY9e3H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/tgO13WP-jsl4SR9C22ZqTygP1ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/30d4e8-e090-4bf2-8185-3687c818ede5/1/oxbHZZrx1WvHGPr2FPCSdY9e3H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.84.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d3:a3:02:62:56:f0:9a:6f:1d:0a:83:5b:1a:cc:1a:1c:7a:
df:fe:54:c3:4e:1b:1a:55:31:2a:0d:fb:b7:6a:84:a3:2d:62:
67:76:20:71:c4:69:aa:89:26:ed:7f:30:87:65:42:66:63:8e:
72:05:e0:bd:80:91:de:ea:fd:ba:d7:c6:b4:3e:09:b6:fc:b7:
27:17:6a:c4:aa:52:4b:61:24:a2:85:7c:63:3f:9c:26:07:5e:
7e:ad:b9:f4:fb:e3:a2:24:62:3b:a7:6a:51:b5:68:2c:9d:f3:
4a:07:b4:d2:0d:ce:24:ef:59:8f:b2:d3:76:93:eb:79:6f:8b:
51:61:73:8b:cb:88:b6:f1:7e:b1:fe:40:eb:1d:2b:90:ae:93:
f3:e8:ea:02:5e:73:94:9d:1c:c0:6a:1b:0b:44:80:b6:eb:98:
73:c8:5b:8a:b2:02:40:c8:fd:f7:ae:2a:6f:63:7d:37:8c:80:
4f:79:be:91:5a:66:5f:7a:e3:ed:b3:e8:a4:de:95:c2:1e:f0:
41:1d:58:94:51:18:27:a2:9d:51:9a:07:37:50:d6:ab:cd:55:
75:03:bc:c4:66:7d:8a:c4:cd:5f:e7:75:72:4d:bb:32:6d:e7:
57:98:6b:3a:9f:7c:fd:7a:0c:0b:53:8c:72:ee:db:2c:ad:b6:
12:f3:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org