Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/g0ajZ6c8cuTQgsvakC22TFojPH0.roa
File: g0ajZ6c8cuTQgsvakC22TFojPH0.roa (raw, json)
Hash identifier: ON1cJdwIctMFQeTEkWQaPUBuyXpTbBMaQER771zn+zM=
Subject key identifier: 83:46:A3:67:A7:3C:72:E4:D0:82:CB:DA:90:2D:B6:4C:5A:23:3C:7D
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 0182D8A6D8C90F4DB846E349A2A9A9D6AE37
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/g0ajZ6c8cuTQgsvakC22TFojPH0.roa
Signing time: Fri 26 Aug 2022 05:36:29 +0000
ROA not before: Fri 26 Aug 2022 05:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206776
IP address blocks: 185.196.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:a6:d8:c9:0f:4d:b8:46:e3:49:a2:a9:a9:d6:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Aug 26 05:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8346a367a73c72e4d082cbda902db64c5a233c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:5d:a8:8c:b9:ec:5d:0f:ae:34:f7:57:58:
cf:4e:28:e4:ed:bc:75:b5:90:21:bc:f6:70:7a:78:
37:97:cc:14:d4:45:f8:3e:0c:60:67:50:6b:72:77:
56:21:a6:73:60:c0:57:90:ce:76:d0:2c:2d:1b:0e:
4b:34:0f:4d:cb:79:00:ee:64:2b:ed:a7:7b:83:55:
32:7a:c7:55:fb:cd:39:dc:35:1e:5e:25:19:25:97:
56:e4:a5:8f:1a:b2:12:29:40:53:99:96:67:1b:fd:
ae:26:03:09:0b:a7:bd:5a:f5:57:7c:23:3f:99:97:
d3:f8:12:19:b6:c6:66:30:f1:47:fc:97:e4:06:3a:
63:70:ef:ae:6f:94:7b:1c:56:4a:2f:31:2a:d6:22:
15:41:78:00:5a:52:66:05:65:16:98:44:c7:a9:81:
ce:88:d4:ff:2f:ba:b8:8e:99:10:28:e1:9f:1c:a1:
63:51:8b:66:9c:15:9a:fb:c7:1b:02:73:a6:24:4e:
64:47:53:bc:03:ec:8e:69:15:25:65:66:12:63:d3:
a3:70:c5:3c:6f:18:89:bf:07:3a:3c:c9:3d:c1:42:
19:aa:35:6b:c0:64:d2:66:4b:77:db:03:cf:af:43:
ea:31:26:1b:e8:0a:f4:45:8d:75:4e:cf:32:17:5e:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:46:A3:67:A7:3C:72:E4:D0:82:CB:DA:90:2D:B6:4C:5A:23:3C:7D
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/g0ajZ6c8cuTQgsvakC22TFojPH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6e:bf:65:c8:4e:01:9d:0b:54:c0:94:e6:ee:a1:66:f5:5a:
da:4a:84:1e:1e:2a:fc:c7:fb:a6:10:7b:24:e8:60:51:fc:56:
bc:ab:e6:c1:02:bd:ed:92:8f:4f:2e:48:f3:1f:e9:f8:4a:81:
9b:75:c6:71:3e:bb:60:a4:25:07:77:1b:92:73:73:d9:f4:80:
59:9d:4b:78:e5:5a:11:63:d7:4e:69:84:ab:ca:19:60:23:0f:
69:49:16:7d:68:b1:27:a2:24:29:c0:4a:78:21:fd:4c:83:96:
49:2d:49:08:68:35:4d:0e:08:8e:35:75:12:b2:c6:52:99:97:
13:6c:20:80:f7:70:31:ed:18:4d:e0:f0:f4:f7:df:f4:42:dc:
64:cc:66:3e:db:c4:51:24:10:32:b1:51:50:37:23:3a:b7:f7:
51:eb:6f:8b:3f:a7:29:d5:0d:6b:ae:70:bc:a6:17:b0:44:4e:
0e:ed:73:ef:22:52:98:6c:5f:62:5a:bf:85:36:41:e9:45:9b:
4b:35:d3:01:a6:b5:e3:b7:a5:10:44:d8:46:51:bb:a7:cc:3f:
8d:89:60:d6:9f:f8:b5:90:16:5f:ba:44:8a:5f:b7:df:e8:28:
99:3c:e7:74:9e:b6:ca:91:74:11:16:c0:28:72:da:5f:b2:4c:
2e:65:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org