Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/7DYLdtGLkLDX1jBfopu5d4LoJpY.roa
File: 7DYLdtGLkLDX1jBfopu5d4LoJpY.roa (raw, json)
Hash identifier: iZB1KlB07cgTvMsIeU0lkDKq+1424MS8q+Yo3KuxgHY=
Subject key identifier: EC:36:0B:76:D1:8B:90:B0:D7:D6:30:5F:A2:9B:B9:77:82:E8:26:96
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 04D5F220
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/7DYLdtGLkLDX1jBfopu5d4LoJpY.roa
Signing time: Sat 01 Jan 2022 05:57:09 +0000
ROA not before: Sat 01 Jan 2022 05:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39405
IP address blocks: 185.247.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81130016 (0x4d5f220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jan 1 05:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec360b76d18b90b0d7d6305fa29bb97782e82696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:f4:db:e5:4c:a7:78:d3:8a:9d:4b:ee:b4:
f3:b2:30:98:82:e2:9b:5e:3d:0f:cf:93:4d:98:0d:
ce:9a:9d:d4:c6:d8:cf:fe:0b:b0:7c:6b:d4:34:c7:
6a:2e:aa:10:f8:e5:ad:d8:eb:40:3c:3a:98:f8:2a:
db:e2:d5:45:66:73:8b:a6:d0:36:0c:48:c1:09:a8:
db:88:68:6c:d4:08:fd:7d:21:5f:ac:fb:02:04:2d:
79:bc:b3:5e:ca:b6:74:b8:1f:a2:1c:52:6c:2c:ac:
80:e6:52:b9:c4:8b:39:d2:b0:59:af:10:e0:08:71:
13:63:04:3f:c7:7b:07:6e:83:42:cd:a9:f5:ec:dd:
f5:f1:98:56:20:33:ba:aa:98:24:88:a0:2f:13:6f:
2c:ac:97:83:26:89:ce:16:90:63:9c:48:2e:1b:78:
d9:de:b3:32:4d:de:85:d7:5a:4b:d3:54:3f:63:6d:
e1:4b:4b:8d:ff:65:1d:fa:20:59:61:23:74:4a:59:
ee:bc:0c:d1:3d:49:37:29:47:f3:84:a1:d7:c6:6c:
30:01:1f:03:a2:62:df:0d:df:a3:85:7a:9e:84:96:
c6:7f:17:0a:26:03:99:35:4d:5a:06:6b:74:ee:01:
19:e0:55:c5:c6:ad:a5:d7:bd:1b:9f:9c:a1:6b:1e:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:0B:76:D1:8B:90:B0:D7:D6:30:5F:A2:9B:B9:77:82:E8:26:96
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/7DYLdtGLkLDX1jBfopu5d4LoJpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.84.0/23
Signature Algorithm: sha256WithRSAEncryption
02:be:44:e0:dc:f3:ab:72:07:b6:59:0a:f8:25:36:25:5f:62:
bb:48:2d:2a:f2:01:a3:00:8e:d7:22:0e:bb:4a:7b:d1:f8:31:
ba:5a:38:d8:31:4a:80:d3:ba:e4:a4:e5:47:56:1b:8a:85:25:
cf:28:05:ac:3e:a2:98:b0:a2:f1:e9:59:8c:b7:61:89:f2:19:
4a:66:9c:38:f9:f4:8d:6c:b9:58:e2:fc:c0:20:20:85:5f:d6:
bf:0b:eb:2a:0b:d3:df:64:3d:0b:99:73:c1:c3:22:72:5e:3f:
ab:e3:18:7c:b6:1c:e0:48:55:4a:5d:04:31:a5:ea:29:ad:47:
1e:8e:e5:6d:ac:66:44:64:da:ea:ee:6e:69:df:2f:70:93:85:
32:74:1a:75:99:ce:d8:ed:09:d2:ed:0f:22:d7:85:a6:bb:ee:
3c:d6:cc:ab:43:b3:04:83:dc:78:99:9e:cb:64:4a:71:14:65:
8d:65:58:51:e9:bc:5b:d9:8e:cd:2b:e4:d9:af:20:2e:13:e7:
bf:a2:b2:cb:d8:30:b4:24:c8:2f:9a:5d:f1:cb:6f:b2:68:8a:
80:a3:a2:82:33:21:cd:0f:97:16:14:58:4e:a0:2e:14:4d:a4:
84:16:c5:c2:9e:51:37:5d:c2:c7:6a:27:40:7a:9a:00:75:88:
6e:11:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:40 2024 by rpki-client on console-fra.rpki-client.org