Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/J8C2xb39BUrARWcV0JAePyZ_l4U.roa
File: J8C2xb39BUrARWcV0JAePyZ_l4U.roa (raw, json)
Hash identifier: 9lbqli/2z7jmTRx5YtGWjATIiSKinB20l8CJoGrkTc8=
Subject key identifier: 27:C0:B6:C5:BD:FD:05:4A:C0:45:67:15:D0:90:1E:3F:26:7F:97:85
Certificate issuer: /CN=169260a06dc844b454c60074daed54e09d58f0a7
Certificate serial: 0170E291
Authority key identifier: 16:92:60:A0:6D:C8:44:B4:54:C6:00:74:DA:ED:54:E0:9D:58:F0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/J8C2xb39BUrARWcV0JAePyZ_l4U.roa
Signing time: Sat 01 Jan 2022 15:06:55 +0000
ROA not before: Sat 01 Jan 2022 15:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211020
IP address blocks: 185.222.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24175249 (0x170e291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169260a06dc844b454c60074daed54e09d58f0a7
Validity
Not Before: Jan 1 15:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c0b6c5bdfd054ac0456715d0901e3f267f9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:64:4a:76:d1:de:3a:37:e5:57:5c:a0:71:
b8:d5:3e:af:dd:80:d4:a8:9c:a2:70:af:e9:4e:76:
ea:8f:4d:bd:39:59:51:e8:73:e1:45:94:c0:d4:b7:
e0:96:c9:2a:26:88:08:2f:99:50:1f:6b:96:e6:74:
2d:37:fe:62:74:a1:d6:34:6c:5c:35:0e:ab:f1:f9:
14:e4:63:28:b2:00:3e:b3:e9:db:d1:c3:8e:30:74:
0e:93:27:8f:01:42:e9:58:5c:e7:7b:24:23:37:c4:
c4:7c:5c:7d:f8:9d:33:3d:87:78:32:90:50:0b:dc:
75:ed:bf:d6:f1:68:1f:7f:a5:a3:87:6b:7d:ff:d8:
05:bf:57:88:56:da:3d:48:d6:50:18:2a:56:bd:84:
bc:01:2e:4f:8f:14:44:83:71:42:4a:c8:4d:fd:43:
1f:0a:d3:fc:0c:44:59:56:b6:29:8d:25:9e:9b:b7:
b2:bb:27:eb:20:c1:bd:1a:b1:e4:86:51:0f:33:17:
16:eb:42:5e:5d:7e:a0:3a:d2:7d:9d:85:84:14:3b:
b8:44:6b:a9:45:03:e3:13:9b:4a:4b:ca:80:85:28:
4d:4e:8b:c1:00:88:0a:06:99:8a:0a:0d:82:1d:7e:
bf:df:62:20:e6:71:16:21:34:a5:ed:77:61:40:fe:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:B6:C5:BD:FD:05:4A:C0:45:67:15:D0:90:1E:3F:26:7F:97:85
X509v3 Authority Key Identifier:
keyid:16:92:60:A0:6D:C8:44:B4:54:C6:00:74:DA:ED:54:E0:9D:58:F0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/J8C2xb39BUrARWcV0JAePyZ_l4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/554d3a-a5e8-43c8-9f09-4ccf0f2df588/1/FpJgoG3IRLRUxgB02u1U4J1Y8Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.212.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:51:69:73:fd:eb:73:d2:09:28:6f:60:00:28:86:e7:19:90:
b4:bb:89:25:c4:6c:f7:fa:2f:45:59:aa:a0:ba:13:49:47:7f:
34:6a:b0:8a:05:3d:a2:a1:7a:01:94:19:60:28:92:67:6d:5a:
3a:c5:88:d8:da:6e:1d:77:24:40:d2:69:93:54:6b:09:00:46:
60:65:93:a0:53:dd:06:a4:3a:95:fb:e3:6d:80:90:d8:57:09:
68:54:7e:42:f9:e3:14:61:6d:d9:c6:d0:2c:b8:b6:db:b3:7c:
c3:59:40:62:26:79:0e:97:2e:40:05:eb:a1:67:ab:33:6b:8c:
07:f0:8c:45:5a:5c:38:82:3c:cb:b7:fe:aa:c8:94:6b:83:25:
af:0a:2b:e2:6c:8f:98:4c:7d:34:fe:f3:fe:c3:a7:8c:4e:7b:
a4:e4:af:85:f8:6f:a2:eb:62:bf:36:8d:d8:3a:c9:42:5c:c7:
ba:88:a9:90:84:44:cd:7e:21:fa:38:89:f8:bd:cd:67:31:cb:
51:37:9d:d7:18:5d:b9:9a:41:92:40:98:02:64:b4:a5:8f:54:
bb:d6:84:f8:4b:8c:e2:1d:d7:a6:8f:7a:d9:f1:76:60:7e:c1:
01:3c:9e:b5:bf:e7:1b:7b:26:f6:ae:aa:28:22:13:86:b4:87:
47:7e:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-ams.rpki-client.org