Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/8aZ6jozgzo7X0UN2R70DkvJzjUA.roa
File: 8aZ6jozgzo7X0UN2R70DkvJzjUA.roa (raw, json)
Hash identifier: GJWRPPXb01SQFaMBXfUB7SKdkG3+SV2gdt9nF2yeQSE=
Subject key identifier: F1:A6:7A:8E:8C:E0:CE:8E:D7:D1:43:76:47:BD:03:92:F2:73:8D:40
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 0183EEE24E2FD8D1A92B5B44D07E00BDB2E0
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/8aZ6jozgzo7X0UN2R70DkvJzjUA.roa
Signing time: Wed 19 Oct 2022 06:15:51 +0000
ROA not before: Wed 19 Oct 2022 06:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150173
IP address blocks: 185.232.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ee:e2:4e:2f:d8:d1:a9:2b:5b:44:d0:7e:00:bd:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Oct 19 06:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1a67a8e8ce0ce8ed7d1437647bd0392f2738d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:cd:50:4c:c7:a4:5f:ae:d0:b2:f1:76:cc:
37:46:a5:42:18:a7:09:7e:df:62:93:3b:b8:06:25:
68:78:a9:c2:7d:c7:05:1c:ea:a5:f3:69:47:f7:c6:
75:97:e2:0e:57:bf:74:fe:f1:f1:fb:92:84:a6:f4:
ac:14:41:90:e2:89:20:22:9d:00:85:92:8e:d5:cd:
f4:33:28:35:bc:56:76:96:95:a6:dc:91:bc:55:4c:
ba:51:d9:4e:4d:a6:b9:e1:2b:08:50:be:8f:44:f0:
a4:5f:40:c1:2a:23:bd:be:20:d0:cf:0e:1b:a6:e5:
3b:ad:2f:d8:fc:46:42:b2:13:96:aa:d2:5b:8d:10:
a0:99:74:10:4d:8c:82:5c:09:82:87:c7:9f:87:99:
7a:03:46:73:9c:9e:45:db:3f:49:bb:52:0d:b7:25:
b5:fa:1c:12:1c:88:84:f0:08:4b:ea:f2:99:1b:57:
00:b8:ac:a2:bf:fb:74:ac:09:98:28:c3:fb:99:6f:
5d:28:16:fd:57:27:7d:db:ca:3a:58:aa:53:8c:77:
88:c6:41:4d:fc:bb:6b:50:09:a4:c6:98:84:01:f3:
ae:47:d0:ae:eb:d6:e0:a6:78:63:04:61:0e:7e:f3:
2d:4d:e6:61:f5:46:1e:dd:14:58:a0:04:22:14:bc:
2f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:7A:8E:8C:E0:CE:8E:D7:D1:43:76:47:BD:03:92:F2:73:8D:40
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/8aZ6jozgzo7X0UN2R70DkvJzjUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0d:da:43:02:e4:3c:ae:ad:01:6b:f2:73:70:ba:b3:e8:63:
3d:36:65:cb:c0:2d:7f:c8:46:a0:57:d7:aa:2b:92:6d:8d:1b:
c0:c4:0a:a8:1d:8e:1b:e2:bc:33:46:74:46:1a:81:4a:67:17:
8e:2c:c2:c3:e7:33:4b:45:a9:1a:fc:bb:1b:31:75:80:a6:5a:
03:d8:26:b0:b0:0c:c8:02:62:7c:2f:9e:7d:99:4f:11:3e:56:
58:7f:62:ea:db:28:f2:5f:d7:b5:4c:58:69:89:57:96:cb:f0:
68:b6:63:7f:12:66:12:13:9e:48:91:10:2c:69:8f:67:46:15:
6a:a9:f8:1f:92:9d:65:09:7e:d2:74:0c:28:b9:8d:63:ae:ef:
0a:80:8c:f9:a3:ae:f8:c0:3d:74:c8:5d:aa:11:10:6c:e3:d6:
8e:fc:9a:2a:5c:38:ff:b3:b1:32:29:5c:fa:55:24:b9:0e:b0:
6a:a6:24:f8:bb:4d:cc:1e:6e:a4:a6:7d:27:42:2a:43:c1:2a:
f4:f8:b5:4f:76:b9:b1:ce:07:2b:40:9e:92:c3:a6:8a:4d:cc:
63:9a:8b:d8:1b:1f:bf:4d:82:4a:bb:d3:f1:97:b7:89:4c:f2:
81:17:b5:b2:1c:2a:08:d8:47:1e:2d:08:f4:95:75:7f:9b:56:
53:36:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:34 2023 by rpki-client on console-fra.rpki-client.org