Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/etz7NE-adr1dH4F7Da6M6KwnFQs.roa
File: etz7NE-adr1dH4F7Da6M6KwnFQs.roa (raw, json)
Hash identifier: CAbHADYscHPJ7LxWbeleB8J0zMEEqfQhN1QWcC1VPqc=
Subject key identifier: 7A:DC:FB:34:4F:9A:76:BD:5D:1F:81:7B:0D:AE:8C:E8:AC:27:15:0B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01843857364CB7671EDFFE75514D5595E6DE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/etz7NE-adr1dH4F7Da6M6KwnFQs.roa
Signing time: Wed 02 Nov 2022 12:35:50 +0000
ROA not before: Wed 02 Nov 2022 12:35:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134098
IP address blocks: 185.207.176.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:57:36:4c:b7:67:1e:df:fe:75:51:4d:55:95:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 2 12:35:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adcfb344f9a76bd5d1f817b0dae8ce8ac27150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a2:89:d6:45:90:61:cd:84:52:ae:d0:b5:80:
fd:e9:a8:c8:2a:b2:61:8d:03:71:70:ac:3b:bf:35:
53:da:24:3f:45:44:8c:2c:db:b8:7b:f8:d8:88:4d:
fa:72:36:31:98:e9:b0:2c:ad:0c:7c:12:0c:a4:eb:
fb:1b:3e:a0:e2:4a:0e:55:8f:b9:f6:a8:78:cf:be:
2e:74:51:c1:54:da:d0:8b:95:91:07:83:39:73:aa:
6b:7f:41:e8:d3:23:34:91:19:9c:31:52:23:15:98:
1a:04:d7:e0:ec:71:e5:d0:82:ad:da:65:57:68:0b:
4a:e2:df:2c:02:75:19:15:80:2b:01:ba:a4:40:06:
c4:a5:75:14:5c:63:1f:71:0a:15:37:74:a4:22:fd:
e4:94:b2:cc:57:69:17:1e:63:a0:de:26:2f:7e:41:
8d:b1:c3:75:04:5a:bd:48:33:e2:d8:a6:d3:a5:49:
e4:85:c2:22:83:52:7d:de:b0:9f:39:99:05:06:29:
fa:4c:8b:b4:56:07:35:fd:4e:13:27:d1:71:0b:ba:
72:18:ad:12:10:94:45:e3:4d:fd:17:8c:0c:60:ca:
dd:89:00:ef:06:ae:c8:c7:e1:8b:75:6d:35:8b:97:
72:58:49:92:72:0e:7f:c8:b9:1b:ed:65:4f:af:57:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:FB:34:4F:9A:76:BD:5D:1F:81:7B:0D:AE:8C:E8:AC:27:15:0B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/etz7NE-adr1dH4F7Da6M6KwnFQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.176.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0a:27:cf:01:9d:af:82:ab:56:79:0d:1d:34:0b:fb:3c:cf:
9b:b2:a4:60:71:33:2a:db:76:50:8e:fd:9c:52:6e:9e:2d:ef:
a3:58:bd:74:1a:df:ba:eb:19:b1:52:d0:75:4a:7b:53:14:8c:
73:a0:44:4c:9a:8f:30:de:97:0c:09:2c:d7:58:85:98:1a:f0:
e7:59:66:b3:a9:7e:0b:86:8f:a9:4e:dc:48:b8:e1:b6:68:33:
f6:ab:26:8f:a2:b2:c7:77:08:5a:5f:28:d0:1c:02:ca:27:39:
c2:de:59:d4:d9:34:4d:4a:60:c6:69:3a:cd:2a:e4:b4:bf:47:
5f:e2:79:01:55:e2:a4:38:c1:a2:7a:27:62:be:92:38:40:13:
1e:aa:75:d7:05:eb:3c:ae:00:76:ae:a0:f9:65:95:93:a7:46:
53:05:80:f2:cf:2e:3f:73:91:b1:af:5b:0b:b5:c9:e8:e9:14:
c5:91:7a:39:80:91:cc:cb:58:18:44:2d:67:7b:f1:60:4f:33:
20:90:f0:f4:57:fa:b4:90:17:44:35:bc:34:4d:aa:d9:64:1b:
eb:93:a0:6d:28:70:34:35:4c:79:30:84:48:fc:83:65:eb:01:
5e:de:40:99:3b:7b:69:44:db:fe:b5:11:84:b1:a7:db:d3:6d:
2b:00:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org