Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/KEg9aKSzHyQ5sfWL_jLUnz5TyjI.roa
File: KEg9aKSzHyQ5sfWL_jLUnz5TyjI.roa (raw, json)
Hash identifier: jXJ9DLwcZhB822/w8Jx1+TzfyOJhxhCBVLgFShTlAKM=
Subject key identifier: 28:48:3D:68:A4:B3:1F:24:39:B1:F5:8B:FE:32:D4:9F:3E:53:CA:32
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01FE0327
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/KEg9aKSzHyQ5sfWL_jLUnz5TyjI.roa
Signing time: Sat 01 Jan 2022 06:03:00 +0000
ROA not before: Sat 01 Jan 2022 06:03:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202636
IP address blocks: 185.142.200.0/24 maxlen: 24
185.142.203.0/24 maxlen: 24
185.142.201.0/24 maxlen: 24
185.142.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33424167 (0x1fe0327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 1 06:03:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28483d68a4b31f2439b1f58bfe32d49f3e53ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:29:3e:e7:4c:9c:a3:c2:a4:e0:bc:d1:42:
e5:04:d4:9b:0e:dc:87:e9:40:45:1d:31:70:3c:26:
f1:8b:74:f1:9f:72:04:04:ec:22:6b:3b:f8:bc:16:
c5:7e:33:48:33:f8:77:95:c8:3e:85:81:d6:c5:6b:
ab:31:e8:aa:a0:76:2c:be:8b:7d:1d:65:f5:1b:2c:
82:1f:61:30:33:94:13:3d:fd:2d:e8:19:95:7f:a1:
9e:5d:1b:bd:08:83:37:55:1d:27:49:19:3f:af:19:
63:78:9a:0e:08:8d:18:16:ee:cd:2d:e8:80:fc:19:
2c:34:9d:be:41:ce:d0:1c:57:d9:ed:15:06:74:cb:
f1:36:f4:e5:95:76:05:94:4b:14:e1:9a:c2:fd:03:
1d:54:b5:b7:1e:d3:5f:be:66:c0:21:ed:77:e8:d9:
01:22:74:c4:3d:fe:71:c5:45:f6:49:4c:90:ad:76:
60:fd:d1:1c:e2:b4:46:bb:20:1f:47:5d:8f:d8:6b:
af:cc:a7:3f:0a:05:df:66:f3:2c:28:05:e5:72:73:
0f:a6:33:d5:56:90:10:9a:bf:b1:dd:d7:40:98:35:
4d:eb:48:4c:4c:6c:43:b4:93:ea:84:7e:84:d9:48:
17:14:ac:9c:db:80:30:21:46:9c:c7:4a:7b:3f:84:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:3D:68:A4:B3:1F:24:39:B1:F5:8B:FE:32:D4:9F:3E:53:CA:32
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/KEg9aKSzHyQ5sfWL_jLUnz5TyjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.200.0/22
Signature Algorithm: sha256WithRSAEncryption
42:5d:49:42:78:d3:83:09:b1:86:62:f6:35:fa:c1:3f:d2:a9:
25:e2:b4:2f:04:e1:0f:9e:40:71:06:db:16:cd:f3:e6:a3:2d:
63:d7:2b:5d:e7:37:e8:a4:d7:ca:87:e3:b7:d4:e1:1b:e3:86:
ad:9f:69:ff:fd:2b:b3:c3:35:69:47:67:be:21:0c:73:13:7a:
12:00:f9:95:3d:74:ce:4d:7c:c2:60:39:0f:c9:02:ba:23:a6:
7e:44:d7:f4:33:39:a3:db:df:93:a6:fe:0d:41:f3:05:f9:c9:
7f:2b:fb:d5:a4:55:1b:d7:c7:ae:23:9e:60:12:57:80:b5:ee:
38:0d:12:a0:aa:bd:9b:58:62:ba:71:dc:78:24:98:92:c9:52:
f0:40:bc:5e:6b:17:f8:bd:11:8a:be:ff:ca:6e:4b:b4:e0:86:
ce:34:99:54:6f:f9:ed:7d:3d:9c:b4:fa:49:56:8f:18:56:14:
dd:f4:52:9b:05:28:30:52:4c:47:7f:6d:fd:58:29:ea:69:d7:
ce:0e:fb:70:e1:3c:f5:e0:8c:b2:7b:c0:e0:15:73:c9:d8:be:
6b:b4:23:ae:cb:41:74:eb:51:60:d2:ab:7b:09:78:c2:ae:72:
9a:6a:55:32:b1:ba:47:74:39:68:57:02:f9:a6:b3:f1:2f:8b:
b4:ba:7f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-fra.rpki-client.org