Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9Ro0q0h8eA26mLhg2jhgGx5McTg.roa
File: 9Ro0q0h8eA26mLhg2jhgGx5McTg.roa (raw, json)
Hash identifier: jRgK7E1DmWc45147ZVQK9atFejGC7EJ38pXANFFpAP8=
Subject key identifier: F5:1A:34:AB:48:7C:78:0D:BA:98:B8:60:DA:38:60:1B:1E:4C:71:38
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A84F275
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9Ro0q0h8eA26mLhg2jhgGx5McTg.roa
Signing time: Sat 01 Jan 2022 16:07:14 +0000
ROA not before: Sat 01 Jan 2022 16:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60916
IP address blocks: 185.72.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176484981 (0xa84f275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f51a34ab487c780dba98b860da38601b1e4c7138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:9f:8e:b6:67:2e:52:7a:bc:39:1e:99:6d:56:
7b:d4:a2:24:72:e5:4c:63:74:35:69:ab:5e:bc:8b:
d8:51:ce:c3:52:c4:80:38:d6:8f:ce:7d:af:43:7f:
a0:f3:41:de:27:bb:42:18:84:38:6c:3e:e6:e5:23:
f0:5d:d1:8c:2b:9c:9c:57:86:1d:08:94:76:f2:94:
3c:eb:67:96:68:a8:6e:73:21:84:24:87:77:22:5c:
b5:23:06:99:6e:2f:0c:0b:b6:30:45:3f:b9:9f:cc:
dc:31:a1:31:ee:f0:a9:bd:93:b0:50:91:0d:e7:2e:
ff:79:44:dc:a1:a1:9b:36:aa:0d:68:ce:4c:be:76:
9b:19:60:72:af:85:d4:e6:36:3b:67:4d:1e:5c:b6:
a5:a8:0d:b5:ff:ff:32:50:fe:d8:9b:19:99:f0:23:
56:33:e1:b9:55:f5:5f:a3:53:61:83:d8:a6:f8:01:
29:1a:1d:26:82:d3:bb:df:88:4c:db:67:71:74:3d:
39:7b:9a:ef:d6:a0:c1:f3:3d:b4:93:b9:59:87:92:
89:64:ff:b2:40:7c:a6:b2:52:97:ed:57:7f:94:8f:
74:a2:02:62:c5:e8:c9:ba:1d:3b:e5:18:9b:91:0c:
3b:8c:b2:6e:85:69:17:51:cc:0a:38:5e:90:4c:b8:
39:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:34:AB:48:7C:78:0D:BA:98:B8:60:DA:38:60:1B:1E:4C:71:38
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9Ro0q0h8eA26mLhg2jhgGx5McTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:85:34:3d:7c:13:c6:5b:d9:18:f1:42:66:bb:a0:c1:56:2f:
b4:d3:b7:84:5d:96:4b:f4:08:03:66:17:0c:28:cd:34:9d:77:
2d:eb:3d:76:0c:54:16:31:7d:15:94:62:06:b8:d2:7b:cd:24:
1b:53:25:8a:47:88:43:78:ad:94:0a:4b:94:4f:84:8f:44:22:
09:59:80:6c:70:83:30:b7:10:49:5e:fc:7a:d1:0b:33:43:80:
ab:fe:f6:ee:27:20:9d:49:ec:a1:c1:1d:b7:77:0b:ea:34:4e:
26:54:75:29:61:51:ff:1d:df:4c:d4:73:83:68:6a:a4:bb:83:
b1:98:50:75:b3:86:fe:f6:bc:5b:10:e0:5d:0e:d2:72:19:3d:
77:80:00:85:bc:db:8c:d4:26:9b:94:ef:5c:43:70:b0:1a:3e:
ec:a3:e4:a3:ff:f3:56:4f:91:a1:de:1d:6a:35:f8:fc:7b:2f:
ff:cd:85:bd:d9:c2:d7:47:53:b8:6a:51:3d:e9:67:88:38:ba:
65:9e:3e:63:d1:67:f4:50:7a:64:b6:43:53:bc:6b:09:1b:6a:
eb:2b:a3:00:86:a5:6d:7e:ba:87:c0:f7:bf:31:e6:ef:ff:d6:
a5:18:7e:1e:68:36:3e:74:5c:fc:54:5d:3d:bf:ec:d2:56:66:
32:ff:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org