Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ip2tzlDbTdxlWEK7bb_lV02d0As.roa
File: ip2tzlDbTdxlWEK7bb_lV02d0As.roa (raw, json)
Hash identifier: 7XkOdDM3dneguDCzciuildu1992EY34zkEAph+v9QE0=
Subject key identifier: 8A:9D:AD:CE:50:DB:4D:DC:65:58:42:BB:6D:BF:E5:57:4D:9D:D0:0B
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 01836AED202EDF95035D20F543186F56AA8E
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ip2tzlDbTdxlWEK7bb_lV02d0As.roa
Signing time: Fri 23 Sep 2022 15:17:48 +0000
ROA not before: Fri 23 Sep 2022 15:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.174.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:ed:20:2e:df:95:03:5d:20:f5:43:18:6f:56:aa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Sep 23 15:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9dadce50db4ddc655842bb6dbfe5574d9dd00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:d7:af:63:09:57:b9:86:67:15:1d:d2:73:
0c:01:f0:0a:0f:33:2c:6a:9f:85:1c:98:98:74:06:
39:35:ed:b8:b9:8b:c8:6d:0a:78:1a:48:48:07:fc:
8d:c1:2a:ca:5b:55:8a:27:24:77:e5:50:3f:cf:f9:
8c:67:d7:32:5c:2f:e2:42:03:9e:90:4d:50:b4:b8:
6a:00:6a:cc:63:59:91:25:58:5c:da:09:7b:11:6c:
b1:6e:f1:4f:44:c8:c9:78:2b:82:93:f4:40:84:68:
3d:44:f4:42:4d:22:c1:4b:48:0a:37:8e:01:09:55:
af:29:0e:3d:9c:fd:8c:54:8e:6c:d4:5d:b3:d2:12:
15:11:a3:0f:0f:db:4f:dd:01:ba:1e:6e:33:5f:f9:
63:6b:b0:6d:1c:39:45:cf:34:0b:72:8f:03:fc:39:
5c:99:6f:22:1e:31:50:2b:68:b0:29:62:cb:5f:81:
a7:28:85:2c:ed:c9:cc:1d:3f:be:1d:06:6c:a7:95:
7e:a1:e5:15:e0:2a:b9:da:6e:3e:bf:20:be:aa:b3:
bf:b5:1f:7d:ce:34:c7:24:0a:87:43:e9:3a:d1:38:
1b:b9:0d:82:68:3a:4d:06:2b:1d:43:82:cb:69:4f:
c0:80:c9:53:8d:86:09:ad:ea:28:28:25:e5:34:5e:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:AD:CE:50:DB:4D:DC:65:58:42:BB:6D:BF:E5:57:4D:9D:D0:0B
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/ip2tzlDbTdxlWEK7bb_lV02d0As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.41.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e4:f7:1d:11:ed:02:b7:2b:35:10:ac:91:5d:a2:54:1b:6b:
c8:40:35:9d:6f:c0:62:64:9c:0c:e5:dd:33:34:bb:12:f9:41:
33:ec:ff:bb:d8:e0:82:c6:d1:33:0c:f7:29:4f:cf:65:ba:bc:
7f:66:cc:f3:31:23:4f:04:0d:1f:2c:c9:b7:4b:cb:a6:98:ae:
06:97:23:74:d5:db:cb:bd:12:21:e8:36:9e:07:88:82:4b:55:
47:7b:57:30:16:e5:71:8c:6a:c1:50:b3:e2:c8:29:3a:6d:8c:
72:7c:21:11:f9:2f:4d:24:bd:af:b5:b9:27:e0:c5:44:67:88:
e0:70:d5:05:80:db:94:7c:0f:2c:23:6b:33:17:1f:4c:d9:93:
40:a2:dd:d9:22:ba:78:75:96:fb:92:4d:27:6d:0d:4d:e3:c9:
6f:f4:78:7d:a7:33:9a:b7:06:f9:20:f0:f0:73:f0:8e:9d:76:
a1:c5:a4:9e:2c:77:cd:a7:ee:0a:fc:b5:82:14:48:f8:28:aa:
1c:0c:fe:21:9c:93:a4:9a:f3:d9:b8:7f:29:e0:83:63:a7:9c:
57:cd:92:de:87:e5:42:d7:06:50:2f:c7:43:09:d8:b0:bb:f1:
5f:51:a8:6c:4e:19:67:f8:85:40:d4:38:f4:00:41:fb:53:3e:
dc:c9:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org