Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G17d375z7GYE0LZAZcNTmbzhVfo.roa
File: G17d375z7GYE0LZAZcNTmbzhVfo.roa (raw, json)
Hash identifier: MNKeLPTjjdj5CpNpVKhpbrBajyURmlLgm0yW5jaDwns=
Subject key identifier: 1B:5E:DD:DF:BE:73:EC:66:04:D0:B6:40:65:C3:53:99:BC:E1:55:FA
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C7B492
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G17d375z7GYE0LZAZcNTmbzhVfo.roa
Signing time: Sat 01 Jan 2022 04:54:25 +0000
ROA not before: Sat 01 Jan 2022 04:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62468
IP address blocks: 185.223.165.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398963858 (0x17c7b492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b5edddfbe73ec6604d0b64065c35399bce155fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:e4:f2:2a:80:f6:d0:35:e8:ba:1e:85:f2:
f7:82:53:67:5e:ff:b7:fe:57:e3:9a:d4:4b:ef:42:
fe:b2:02:86:b0:b9:e0:75:73:b3:1d:31:9d:00:29:
20:6a:79:d2:b6:94:ab:71:1d:4b:81:1c:da:9f:0b:
42:fc:e3:aa:4c:96:4c:18:e9:cf:67:52:c9:77:41:
49:31:15:02:6b:e1:c6:7f:75:ff:52:15:7d:36:e3:
0c:7d:eb:45:3c:76:25:fc:a6:08:2d:96:c2:a6:a4:
6c:d3:3a:1e:3d:5c:46:c2:71:12:c0:66:44:96:16:
fc:9f:f8:3e:1c:51:8a:a4:90:09:86:19:f0:45:2b:
84:25:54:18:95:42:71:42:8f:dc:bc:76:d1:af:59:
8f:90:60:76:c7:b0:12:ff:74:cd:86:16:6e:13:bc:
ca:37:46:47:5e:79:28:59:e9:e1:3e:28:22:99:0c:
a5:68:b8:0a:65:8a:fc:49:a4:2a:d3:03:02:3d:bc:
70:e4:64:24:de:ac:92:1d:21:82:c3:85:76:6e:cc:
d2:86:bc:68:12:77:be:12:e3:f6:69:f2:e8:8a:af:
b8:d0:af:15:b4:43:3b:f1:f2:9c:f2:4c:9f:93:6f:
4d:b5:f8:6f:cb:6e:1b:eb:9c:4a:50:d7:02:28:62:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:DD:DF:BE:73:EC:66:04:D0:B6:40:65:C3:53:99:BC:E1:55:FA
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G17d375z7GYE0LZAZcNTmbzhVfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.165.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:bc:4f:bd:81:ff:0b:a6:11:64:b4:a0:12:95:98:19:b8:bc:
41:96:3e:b3:d7:89:45:0c:6a:98:68:2a:74:d4:40:8c:07:c7:
83:b8:78:ba:59:ac:9f:bc:78:fe:08:ed:a8:4d:7c:56:d2:b9:
6e:3b:f7:dc:04:08:58:03:35:6f:24:e9:3b:aa:55:76:57:7c:
19:1b:52:c0:e4:af:0e:e6:44:52:04:fc:3f:1d:b5:ce:a7:79:
09:1a:22:80:15:30:26:76:0f:6c:f9:2c:ef:c9:5c:58:52:e9:
ad:8f:60:f7:77:72:10:ed:c5:77:6e:a8:95:9c:f3:ee:32:80:
ac:93:68:2e:eb:0e:af:7b:2e:5f:1c:b3:f2:05:c6:a8:b2:ee:
65:85:30:76:3d:c0:d9:2d:4c:aa:56:1c:0c:d2:70:fb:18:3b:
5d:d5:b9:4c:c2:69:ad:84:44:3a:46:90:11:3b:9e:33:a6:9a:
d0:7a:dc:b0:ac:2c:1f:4e:22:a4:af:5b:d5:da:eb:32:77:63:
18:46:33:a5:9a:72:eb:72:ea:cf:2d:40:7d:bd:ed:dc:76:89:
96:e0:f7:0d:4b:0b:57:8f:f2:3a:4e:77:09:ab:df:59:23:f2:
6d:90:e1:75:03:1e:92:57:78:7b:9c:0f:e3:d1:13:18:16:52:
57:2f:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:45 2024 by rpki-client on console-fra.rpki-client.org