Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/dyb9mOZvcq-inmZFibWU2P9ZkoI.roa
File: dyb9mOZvcq-inmZFibWU2P9ZkoI.roa (raw, json)
Hash identifier: /cjwIAONMZKUK46lpghmptpn1+bkaepceTOFb7gT7vE=
Subject key identifier: 77:26:FD:98:E6:6F:72:AF:A2:9E:66:45:89:B5:94:D8:FF:59:92:82
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 0182B7B960852237C52C63CCF345B6FD4425
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/dyb9mOZvcq-inmZFibWU2P9ZkoI.roa
Signing time: Fri 19 Aug 2022 20:09:15 +0000
ROA not before: Fri 19 Aug 2022 20:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 185.232.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:b9:60:85:22:37:c5:2c:63:cc:f3:45:b6:fd:44:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Aug 19 20:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7726fd98e66f72afa29e664589b594d8ff599282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:69:b6:79:b6:29:69:ba:cb:b2:c4:b3:90:
85:db:6e:5e:2d:93:b7:cc:ba:e1:f5:0f:29:67:df:
f2:11:6a:f8:00:fa:62:92:8e:6e:42:4f:c3:0b:f4:
79:da:20:ae:6d:09:6b:15:b3:bb:24:ca:4d:c6:e8:
93:46:42:9c:0e:39:31:89:a7:71:59:1b:6d:8b:c6:
a5:5f:b8:1e:67:20:cb:14:1b:70:63:33:1c:21:25:
0f:ae:7d:9b:9a:cc:3c:d8:26:ba:56:cb:8c:1f:ee:
72:5e:4e:78:4e:c6:d2:82:af:22:f5:ee:c6:5d:65:
64:16:79:e5:78:5c:18:bc:79:00:f5:1a:dd:b1:b8:
b3:ea:84:01:1a:7e:df:e5:e7:2b:04:26:3f:5a:c2:
8d:8d:d5:a2:b9:8b:b2:f4:de:c1:08:a8:95:51:3a:
e4:14:79:37:cd:92:4b:be:3a:54:88:5d:77:ec:94:
3d:67:2c:a3:62:db:9a:ca:60:73:92:d7:fd:63:66:
3a:e1:20:9a:84:87:23:6b:dd:85:ab:d1:d0:0b:b5:
c5:11:04:57:98:f2:7c:12:f1:5f:fe:96:e8:43:bf:
c7:db:b0:fa:7c:7c:ee:5c:86:92:e2:6b:72:4e:d7:
4b:cc:af:59:2a:7d:51:ac:2a:59:1d:e4:a7:39:96:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:FD:98:E6:6F:72:AF:A2:9E:66:45:89:B5:94:D8:FF:59:92:82
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/dyb9mOZvcq-inmZFibWU2P9ZkoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.204.0/23
Signature Algorithm: sha256WithRSAEncryption
36:8d:8a:78:a4:40:e6:32:4c:13:ae:d4:f0:c9:8a:b8:8a:4c:
bd:92:c8:8e:0a:b6:ba:fd:b8:44:43:c5:48:a8:60:2e:a3:d2:
9f:46:f2:e0:72:05:c2:01:ad:d0:1a:e9:28:3e:15:4e:1e:4a:
e4:4b:cd:26:ef:ad:65:48:2a:5d:12:47:7b:61:c0:50:c7:e6:
b2:28:f3:aa:df:da:9c:b1:44:27:3b:36:c0:d4:16:e8:41:57:
3e:4d:4d:f1:4a:4d:56:e3:80:d2:86:1c:e5:95:4b:6e:f5:5a:
28:aa:e1:b1:39:38:56:8f:63:11:52:8c:93:15:77:09:2a:f4:
8d:47:35:eb:63:0e:66:27:5d:78:00:85:f6:ff:27:ef:04:11:
33:87:80:79:bd:f0:05:cc:9c:10:b2:50:6c:ac:83:9a:a7:f6:
e5:7f:53:7c:b0:84:96:01:87:83:6e:0e:1f:e5:dc:27:57:e7:
4d:86:a8:41:06:0b:b2:2c:d0:b6:1e:0e:e5:5d:16:1d:af:cd:
38:0e:e4:ff:93:98:14:98:6c:16:4b:3d:ad:01:82:f6:e4:08:
2b:f2:fa:d9:3f:31:5a:b0:37:93:ca:72:1d:3c:1f:46:56:31:
e5:89:4a:91:f3:66:10:e0:7b:31:84:56:df:98:05:d2:a1:1a:
eb:3d:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org