Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/PiGKVS7TZuz5olCURSFHNCZ37nw.roa
File: PiGKVS7TZuz5olCURSFHNCZ37nw.roa (raw, json)
Hash identifier: VotFjQDdHZ/P5ntGXwV+TTN5++wTYw3zf4R4t1ZzCjg=
Subject key identifier: 3E:21:8A:55:2E:D3:66:EC:F9:A2:50:94:45:21:47:34:26:77:EE:7C
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0A9203C0
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/PiGKVS7TZuz5olCURSFHNCZ37nw.roa
Signing time: Sat 01 Jan 2022 16:05:33 +0000
ROA not before: Sat 01 Jan 2022 16:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 185.196.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177341376 (0xa9203c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 1 16:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e218a552ed366ecf9a25094452147342677ee7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:5b:aa:c3:cb:01:21:d7:ca:25:5c:97:47:
b8:ec:10:25:83:c0:e0:bc:66:61:97:26:86:e1:df:
ec:c0:94:30:0b:cc:31:ec:c1:ab:d8:cf:b5:1c:a2:
a6:fc:35:8d:82:d7:af:68:92:02:20:61:8d:04:a6:
db:f6:15:bd:bc:48:df:05:ab:4e:09:fb:3b:ca:67:
14:56:f9:2b:c0:cd:fa:04:f5:19:d2:90:21:3f:7f:
ae:06:c1:49:20:4d:57:dd:e3:d9:77:f5:a5:0f:7c:
44:99:8a:3c:e7:a4:71:86:e2:f1:59:76:b1:a7:23:
9c:3b:e2:eb:02:8a:93:73:e4:2a:aa:2f:12:44:55:
bb:84:ad:35:bf:f5:24:59:a6:24:31:9e:fa:46:7f:
bb:a6:6a:97:ae:74:0b:1b:9b:b5:0f:d4:d1:80:d9:
97:57:aa:e7:95:7a:d5:5c:e8:fb:7d:c1:6d:1a:a0:
24:07:22:1f:a2:3f:2b:d9:5f:51:f4:d3:3c:7a:11:
aa:bf:90:f4:2e:1a:80:1e:c5:e9:df:ce:57:13:65:
33:76:02:d8:2d:bd:f5:77:e8:9a:13:c0:19:01:31:
d3:75:9f:38:54:58:01:c4:05:38:27:bb:45:10:a7:
ed:40:48:99:64:95:b1:15:f7:4a:e0:54:33:4b:2f:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:8A:55:2E:D3:66:EC:F9:A2:50:94:45:21:47:34:26:77:EE:7C
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/PiGKVS7TZuz5olCURSFHNCZ37nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:fe:00:37:5b:14:29:a1:ca:56:55:a2:7e:cc:ee:19:e5:25:
d4:33:f8:3e:fe:6f:c1:aa:8b:01:23:45:b5:e7:82:c1:8d:bf:
3e:57:3d:65:e0:0d:9d:62:75:44:65:18:b3:36:5a:37:94:67:
f2:b6:05:84:79:7b:17:ae:ee:e6:c8:5c:57:f1:55:c8:24:7a:
35:13:6d:10:c2:42:69:a7:b9:a8:77:87:6d:5e:91:e0:b0:43:
f4:5b:43:ee:40:b4:56:7a:34:94:aa:1e:6a:cd:99:20:1a:c2:
50:0b:a6:42:0d:d4:cd:63:98:81:7c:20:b7:39:27:7b:2b:5b:
de:50:97:c8:b8:6f:f0:8b:9b:01:f3:1f:34:be:af:14:42:1a:
39:29:d3:e0:13:dc:49:75:12:06:72:4c:d0:a8:1e:83:92:c5:
c1:b3:fe:72:7f:bb:6b:d9:8f:7f:e2:54:92:ef:f3:55:56:44:
d8:d5:2b:2b:5e:37:cc:04:8a:f9:fd:91:72:65:cd:5f:20:e8:
89:19:d4:ce:e4:a1:2c:82:b0:fa:a1:0b:de:eb:cc:ef:73:a8:
83:ab:37:7d:d5:58:b4:8b:e7:26:6b:64:7f:5e:34:2a:59:0f:
98:03:ea:57:5a:aa:bc:e9:01:57:d3:80:2d:65:60:2f:79:6c:
bf:56:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:16 2023 by rpki-client on console-ams.rpki-client.org