Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/T_SdtzxIhjNvtyg3E7wyqX-8dfg.roa
File: T_SdtzxIhjNvtyg3E7wyqX-8dfg.roa (raw, json)
Hash identifier: FeKJjXRYDp230SfH4vfB24e/lUTuDF9y3e/9w6OTZyQ=
Subject key identifier: 4F:F4:9D:B7:3C:48:86:33:6F:B7:28:37:13:BC:32:A9:7F:BC:75:F8
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0191A680
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/T_SdtzxIhjNvtyg3E7wyqX-8dfg.roa
Signing time: Sat 01 Jan 2022 05:52:57 +0000
ROA not before: Sat 01 Jan 2022 05:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208196
IP address blocks: 185.231.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26322560 (0x191a680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 05:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ff49db73c4886336fb7283713bc32a97fbc75f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:82:7c:49:b8:ce:7c:12:ff:90:0a:bd:e4:57:
a4:51:bc:e8:21:94:73:5a:b0:c2:8f:3d:73:16:12:
59:d9:bb:4d:de:ac:93:1c:0b:71:9e:30:2b:2f:12:
27:7f:03:66:2e:2f:df:7d:76:a3:e2:18:a2:65:2a:
bf:a2:0c:dc:61:ef:8f:76:73:c3:ee:5e:e4:2e:f4:
f5:37:b6:30:fa:11:b1:5d:e1:31:74:1a:d7:0d:28:
ab:0b:4e:cf:69:97:52:e5:d7:75:02:21:1d:88:49:
ef:5e:ed:56:b1:14:34:10:78:89:bd:38:7d:14:e8:
9d:cc:61:4f:b9:67:33:fd:58:a9:36:3c:35:dd:4e:
80:40:29:8a:92:b2:80:9f:a9:1b:e8:a2:eb:3d:1d:
cb:7d:33:a9:8c:9e:e6:77:42:06:f4:13:10:7c:62:
f9:92:f5:88:44:c3:f5:5f:33:03:d6:69:13:a7:24:
19:90:46:f4:03:11:87:da:21:81:b2:c4:e6:be:bb:
db:89:a4:0d:d1:d7:d8:7d:63:7b:e8:6a:4a:97:b4:
d5:82:f6:15:45:48:c7:eb:63:d6:da:5b:ec:15:10:
ee:79:50:25:79:21:39:d0:6e:e7:73:26:83:ce:c6:
1c:bb:1f:ba:0d:fe:c9:5b:ad:1b:7a:3b:c0:b3:ec:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:9D:B7:3C:48:86:33:6F:B7:28:37:13:BC:32:A9:7F:BC:75:F8
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/T_SdtzxIhjNvtyg3E7wyqX-8dfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.113.0/24
Signature Algorithm: sha256WithRSAEncryption
19:88:94:29:67:fe:dd:f4:e7:bc:95:7d:12:57:8f:12:ae:e1:
3c:5c:5f:ae:50:58:b1:10:77:04:41:2a:82:c1:67:a2:30:33:
f5:e8:6f:80:b3:18:96:6b:f3:22:88:98:4a:50:87:70:53:0b:
00:7b:52:31:04:8c:d9:10:02:a8:1b:d2:9a:21:9d:1a:57:0f:
41:46:a8:67:7a:14:cd:2d:2e:57:28:5f:86:65:df:7a:f8:f3:
15:29:d0:97:9a:66:70:e2:74:a4:5d:22:80:65:e7:de:4c:ff:
f3:1f:d6:d3:da:d4:80:38:19:ed:d5:13:51:8e:8d:b8:ae:79:
24:43:c9:83:bf:b1:63:ed:e5:d7:c1:53:56:8e:a0:d1:b4:17:
cc:5f:35:e8:03:f9:f1:6e:0c:d7:51:40:52:39:a5:1d:d4:70:
2b:3c:fb:d6:44:a7:39:2b:25:d4:fe:de:ee:fd:65:e4:2f:7c:
0f:f0:f4:dc:d9:09:a1:66:ca:7f:bb:5a:af:aa:47:09:01:a2:
98:08:68:32:24:69:9a:17:5b:eb:ca:4e:90:77:0e:79:c9:3a:
92:97:60:67:8b:ea:ee:f5:9e:b4:52:4e:9d:9f:7a:aa:b3:02:
3e:d1:df:47:b0:31:da:29:2b:73:66:a6:40:7e:02:04:53:f3:
ef:fb:af:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org