Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/oCyTnZj5mMzeLx9TwshOLgunlR4.roa
File: oCyTnZj5mMzeLx9TwshOLgunlR4.roa (raw, json)
Hash identifier: kbRhtsopJt+SIho9jsEx54jJbuWt5IWnH/5+XJFOzag=
Subject key identifier: A0:2C:93:9D:98:F9:98:CC:DE:2F:1F:53:C2:C8:4E:2E:0B:A7:95:1E
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 087F2B3B
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/oCyTnZj5mMzeLx9TwshOLgunlR4.roa
Signing time: Sat 01 Jan 2022 04:55:41 +0000
ROA not before: Sat 01 Jan 2022 04:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206124
IP address blocks: 185.194.48.0/24 maxlen: 24
185.194.51.0/24 maxlen: 24
185.194.49.0/24 maxlen: 24
185.194.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142551867 (0x87f2b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Jan 1 04:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a02c939d98f998ccde2f1f53c2c84e2e0ba7951e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:29:cd:46:c0:54:28:06:2c:66:9d:da:4c:98:
6b:65:d2:19:a0:35:da:92:b8:c5:5d:a7:2d:86:7f:
d5:61:f7:eb:67:5d:d5:9b:f5:5a:a0:47:33:7f:db:
1e:06:bf:f7:b8:be:78:a8:c8:14:a0:d0:f3:1e:b6:
22:77:06:fa:c6:dc:b1:6d:ec:ed:24:06:3d:14:6c:
9a:81:f2:22:14:3b:e5:9e:a7:ec:54:cd:f5:80:35:
25:4a:4c:70:66:8f:99:cb:18:30:5b:73:b0:26:b0:
3d:95:66:65:34:24:de:bf:e3:90:da:31:4c:30:07:
27:75:69:24:9b:68:88:0a:17:95:a5:75:77:3d:23:
a4:dc:05:dd:bb:88:02:d6:db:04:62:ad:54:bb:49:
fc:a8:e6:2c:68:96:56:d2:0a:ff:5f:45:ac:8d:cb:
5f:c2:d0:cc:50:1b:26:87:79:d2:22:ec:6d:67:e0:
41:bc:dc:c1:ab:fb:5d:71:2c:b3:58:f3:00:3f:29:
c7:24:a2:64:3a:6e:e8:06:b3:01:40:04:5d:7e:47:
f1:7a:5a:98:2d:35:e7:08:c2:77:6f:ca:a1:c2:4a:
27:68:3e:83:85:d7:01:08:3c:1e:63:ca:68:06:fc:
9b:18:9d:fd:92:6f:c8:bc:50:24:93:cf:61:aa:af:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:93:9D:98:F9:98:CC:DE:2F:1F:53:C2:C8:4E:2E:0B:A7:95:1E
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/oCyTnZj5mMzeLx9TwshOLgunlR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
24:23:f0:cb:d4:3d:be:46:19:32:c2:28:43:71:dd:80:84:52:
cf:13:30:d6:7d:94:a1:82:32:95:3d:c5:52:4c:c9:28:49:36:
c9:52:77:44:24:6d:e7:40:ed:f9:2c:ce:48:ef:6c:39:95:92:
bb:03:7d:cf:04:8c:86:ef:e8:3b:1d:91:fc:6d:3f:25:5d:bd:
5d:a7:a5:3d:1c:68:6c:e2:6e:4a:19:2f:af:a5:7e:fa:64:83:
19:d6:e2:2a:c5:fb:91:2c:3c:6b:2f:42:79:51:a9:4c:15:eb:
25:6c:dd:85:76:94:b8:68:b1:7a:8a:a1:ed:ee:3a:76:37:e0:
93:59:2a:e3:28:94:25:e8:f0:d1:30:d8:97:02:fe:36:f9:49:
04:a9:9a:44:8a:cc:fd:f2:eb:96:de:33:f2:4e:79:f0:56:6f:
e7:15:26:13:94:fd:1a:fc:6a:cd:52:9d:7c:e7:c3:f9:63:20:
23:41:ab:f6:b9:05:35:8c:68:0a:16:45:d1:fc:c8:8f:86:8c:
19:bf:74:3d:95:b4:2b:e7:98:29:39:fb:09:23:b3:5b:d7:30:
76:9a:5a:58:47:32:40:eb:d2:b2:2d:6d:61:0d:51:a0:b6:61:
4b:49:1b:3a:f1:b2:57:79:73:89:e9:67:74:94:32:5a:3d:49:
81:53:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:58 2023 by rpki-client on console-fra.rpki-client.org