Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/81HIfUWK3AnKFkIsXYhTHsorfEE.roa
File: 81HIfUWK3AnKFkIsXYhTHsorfEE.roa (raw, json)
Hash identifier: 2hI6ipm1Fwe27YV0mZi3OkfObNFgoqfNVQHWZUWbJ3w=
Subject key identifier: F3:51:C8:7D:45:8A:DC:09:CA:16:42:2C:5D:88:53:1E:CA:2B:7C:41
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0184EBF2118C06BB995E1B15C7BF8C4B8B70
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/81HIfUWK3AnKFkIsXYhTHsorfEE.roa
Signing time: Wed 07 Dec 2022 09:37:00 +0000
ROA not before: Wed 07 Dec 2022 09:37:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200436
IP address blocks: 194.180.224.0/24 maxlen: 24
185.231.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:f2:11:8c:06:bb:99:5e:1b:15:c7:bf:8c:4b:8b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Dec 7 09:37:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f351c87d458adc09ca16422c5d88531eca2b7c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:61:c2:3f:c1:22:07:c5:8c:02:f3:0f:c5:
85:13:62:84:89:58:45:27:32:7f:9f:36:21:55:d2:
17:a6:11:4a:18:6f:e7:95:0c:67:54:99:8c:4e:38:
cb:96:4c:6d:1a:5d:9f:d2:5f:f2:f9:d7:c7:56:9e:
31:d1:4f:df:cc:93:7f:33:44:2e:3f:38:7b:87:d6:
da:4a:a6:ec:92:d2:51:1e:21:c1:d7:aa:4e:83:24:
62:74:6b:3e:25:80:97:f0:48:99:51:fc:40:80:0d:
55:e0:39:14:48:4b:78:43:73:f4:51:76:4e:7b:7a:
da:f4:f7:d0:4c:ef:d4:b8:32:e5:09:b4:62:2e:d2:
d7:57:d6:ef:1f:61:44:da:52:2d:ce:e1:f4:58:76:
61:36:35:b4:c7:fd:bf:2a:ca:a5:aa:2b:a0:ba:02:
b8:1e:86:cd:6d:7c:7d:c0:e2:22:dc:8c:75:5c:5d:
ee:6d:c8:e3:2c:65:a8:d0:74:b4:89:43:c4:b1:6b:
9c:c7:68:c8:87:b7:1b:8e:a1:99:60:3e:72:12:6f:
9c:b3:83:cf:72:b0:a6:8a:e4:0a:e5:c9:5b:e7:c8:
f4:a9:5a:78:07:32:76:bf:11:56:4b:13:c0:75:fc:
96:79:90:78:7d:30:52:c5:41:a9:ff:bb:ae:44:55:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:C8:7D:45:8A:DC:09:CA:16:42:2C:5D:88:53:1E:CA:2B:7C:41
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/81HIfUWK3AnKFkIsXYhTHsorfEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.113.0/24
194.180.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4f:d8:61:77:cc:3c:48:25:de:03:cf:71:52:30:11:ee:92:
ec:33:81:f6:07:d3:2d:36:21:fa:ec:8f:7a:89:37:74:b6:12:
51:c6:a1:32:99:ef:27:e4:93:05:78:7d:a3:07:16:e7:a9:8c:
90:5b:2a:57:a7:3f:eb:5f:4e:62:4e:4d:8a:61:a9:56:5e:9b:
b4:0d:ec:19:f1:2f:db:44:1c:16:ef:04:18:fc:37:63:de:a8:
6e:63:34:22:05:f1:5f:1e:2d:84:5d:00:8e:b9:38:03:be:e1:
73:8a:c8:f6:81:74:a6:b4:57:f1:81:7a:a5:f2:44:c0:e8:3e:
26:32:8d:2a:0a:47:aa:e6:7c:d3:49:63:c4:4f:f0:d2:34:8d:
48:60:0b:d0:13:b3:fd:4e:4a:2a:d1:42:75:c8:be:bb:5c:f6:
d4:d6:1e:df:ad:fb:29:49:78:ff:94:1c:86:5d:42:ff:c7:3e:
0a:d4:1a:6f:f9:67:43:db:27:f8:9d:0e:21:8e:de:60:98:8b:
34:ab:b1:ee:c8:4b:db:4c:6a:a3:b7:40:06:3f:7f:4d:fd:5f:
cf:21:30:48:93:6c:ba:5c:f4:b0:af:5c:e7:47:20:02:c2:19:
df:1b:1a:b5:ec:a8:72:7c:a3:e6:a6:fd:c5:93:d7:ac:66:92:
25:39:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org