Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/fZ19yiNMbBr0JYpCtCYjxpJ9F8c.roa
File: fZ19yiNMbBr0JYpCtCYjxpJ9F8c.roa (raw, json)
Hash identifier: zxzL2YW98pictQXxXp/g5u0QIssk+XfmHVxZnzZoUVE=
Subject key identifier: 7D:9D:7D:CA:23:4C:6C:1A:F4:25:8A:42:B4:26:23:C6:92:7D:17:C7
Certificate issuer: /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial: 03BE9640
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/fZ19yiNMbBr0JYpCtCYjxpJ9F8c.roa
Signing time: Sat 01 Jan 2022 14:01:02 +0000
ROA not before: Sat 01 Jan 2022 14:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206430
IP address blocks: 185.186.190.0/24 maxlen: 24
185.186.189.0/24 maxlen: 24
185.186.191.0/24 maxlen: 24
185.186.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62821952 (0x3be9640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
Validity
Not Before: Jan 1 14:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d9d7dca234c6c1af4258a42b42623c6927d17c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0f:6c:40:2f:e1:6c:db:00:85:98:7f:37:20:
1b:1c:95:26:17:e9:2d:a4:69:f7:4e:22:c5:62:d2:
3c:25:88:20:4d:9e:9a:f6:34:e1:22:28:cf:26:1d:
87:24:55:e9:d6:d0:e5:4c:62:b0:34:b1:4d:d5:f1:
3e:8a:17:3d:23:b0:7d:7b:57:60:37:6b:9b:03:41:
a3:0f:fe:fc:2c:86:84:bd:34:4a:1f:29:f6:3a:93:
02:2b:cc:b7:15:7f:ba:75:36:9e:ad:db:bc:52:48:
1f:82:90:d8:5b:a6:66:9a:01:41:88:bb:35:06:d0:
0e:f2:24:24:be:29:63:fc:aa:97:78:ef:2c:ab:c6:
60:4c:9b:fd:9e:f9:d3:2e:cb:67:16:7f:0d:4b:a9:
5a:10:4d:1f:3e:39:1f:f5:e3:13:e0:24:df:8a:f7:
9f:b2:55:69:e9:ee:e7:9c:05:16:a7:7e:9a:41:6d:
4e:98:41:25:db:bc:ec:a9:6f:30:55:85:e5:1c:cd:
72:ac:a5:a6:e2:c1:ad:59:1b:88:6a:7d:0a:e2:fe:
cb:93:7c:d5:0c:1e:55:65:02:b4:d0:72:eb:38:21:
85:d2:5a:cf:86:40:35:90:a4:28:26:e9:b4:bc:1c:
4b:a9:b8:b5:53:41:cf:99:fb:ed:e2:12:d6:92:bf:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:7D:CA:23:4C:6C:1A:F4:25:8A:42:B4:26:23:C6:92:7D:17:C7
X509v3 Authority Key Identifier:
keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/fZ19yiNMbBr0JYpCtCYjxpJ9F8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.188.0/22
Signature Algorithm: sha256WithRSAEncryption
37:74:f5:04:d9:70:66:94:2f:07:88:ce:89:47:65:32:e0:e4:
0d:85:ce:92:d2:d3:8e:24:e2:19:11:61:02:42:41:87:68:c5:
fa:05:e0:28:5b:c8:a3:b5:7d:ac:a4:d5:8b:db:e8:f1:ef:6c:
1d:d3:12:1d:6a:91:29:c0:c9:71:4e:ff:10:14:19:c8:96:18:
a6:b3:1d:5b:31:a7:70:fb:82:a9:ec:09:5b:d9:42:2e:8a:69:
55:ac:33:f3:2d:86:2d:57:03:86:e9:61:e9:cb:66:de:8c:55:
4c:b0:d3:4d:72:04:92:a6:20:4b:f9:bc:e5:d0:66:6f:db:78:
50:ab:1c:53:33:6d:0c:63:04:27:a9:ab:26:bc:58:41:11:3b:
be:92:95:77:75:9a:02:4a:e4:c0:09:e3:6f:e0:f5:db:0f:12:
73:28:c8:4a:5c:03:29:c2:1f:4e:d1:56:d1:3e:16:ee:cb:8a:
64:d2:fa:dc:02:d6:5e:bf:eb:17:ca:64:db:d9:1f:4f:a6:20:
a6:20:58:ab:5d:e4:05:f5:c1:71:48:6e:57:bc:f5:3c:25:73:
bd:0a:57:48:88:08:0f:d5:23:a3:4d:a4:e6:2d:c7:45:dc:ad:
81:24:db:85:e7:c7:39:30:f4:bd:87:2f:8d:80:a4:a5:72:48:
5c:98:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:39 2023 by rpki-client on console-fra.rpki-client.org