Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/1_0QOSwYynrPBtwTvrZe3gDMlG0.roa
File: 1_0QOSwYynrPBtwTvrZe3gDMlG0.roa (raw, json)
Hash identifier: 8Wb4+3oc63Ax/twCGv731jqpYYAiRvnTy66/+592SJ4=
Subject key identifier: D7:FD:10:39:2C:18:CA:7A:CF:06:DC:13:BE:B6:5E:DE:00:CC:94:6D
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 102D8BBB
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/1_0QOSwYynrPBtwTvrZe3gDMlG0.roa
Signing time: Thu 12 May 2022 15:02:02 +0000
ROA not before: Thu 12 May 2022 15:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16633
IP address blocks: 185.201.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271420347 (0x102d8bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: May 12 15:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7fd10392c18ca7acf06dc13beb65ede00cc946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:7f:c7:6d:99:ab:a6:1d:ae:f7:7e:a5:62:
3f:aa:3d:7c:b4:2f:a6:8a:fc:08:8b:f8:48:af:47:
a2:de:38:61:8a:1b:10:eb:2c:11:7f:fb:7b:70:7c:
95:c1:10:1c:4f:ed:09:d1:31:08:e0:7f:fb:e1:df:
d0:93:ea:7b:37:5d:3d:1f:8d:07:34:5e:dd:5d:66:
ad:5e:ed:ce:4e:da:c7:19:dc:4f:38:49:7f:55:2f:
46:34:43:61:a3:33:df:d7:f4:14:ad:2b:4d:17:b8:
b7:1f:53:ad:c8:69:40:27:bb:99:42:96:3b:34:32:
f2:42:ad:45:e8:02:b2:be:6e:26:cf:ce:27:e4:87:
33:60:a9:d5:c0:a7:91:6b:fa:10:a5:ac:f9:c5:ce:
a6:6d:d9:42:a9:69:b0:a6:50:09:ed:ec:df:7d:1e:
15:fe:d2:90:c1:66:67:a2:6b:93:ca:bd:82:4d:ac:
b1:77:62:40:96:ed:07:ea:99:b7:74:5e:ea:94:af:
78:1d:62:45:f2:f2:46:de:c8:46:1a:9e:5e:18:f3:
8e:c4:3d:a5:53:ac:a0:c2:53:d5:fe:7e:f2:25:86:
71:2c:b6:2d:40:4e:3c:fc:21:43:ec:62:46:e6:07:
0e:72:a0:56:36:be:20:cb:c0:dd:5e:f3:b4:40:59:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FD:10:39:2C:18:CA:7A:CF:06:DC:13:BE:B6:5E:DE:00:CC:94:6D
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/1_0QOSwYynrPBtwTvrZe3gDMlG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:52:fb:23:a9:c5:dd:d5:db:71:aa:a8:77:fb:51:5d:e2:98:
02:07:b7:85:f6:70:4b:fa:b1:e4:23:49:15:8d:60:ba:1c:1f:
fc:3d:3f:98:fd:1b:4a:20:52:a1:f5:14:a6:76:3f:33:89:7d:
d3:58:f3:04:36:97:b4:de:c5:c1:e2:90:13:c7:c3:fc:5b:ac:
17:d5:1d:80:d4:30:19:c7:96:fd:f3:c6:a9:d2:ce:23:d5:cf:
fd:ba:da:a7:d0:b6:6f:cb:13:7d:37:e6:e4:3b:02:b6:b9:9e:
49:e1:2c:bc:d2:3e:5f:66:7f:dd:0d:0e:bf:aa:1a:8a:cc:42:
d1:d6:4e:6d:38:63:1b:3c:24:c5:55:4b:cd:ac:98:25:c2:78:
57:85:13:bf:33:ba:cb:ea:ee:2a:7c:5a:e0:97:92:c7:c0:ad:
1a:c5:56:1d:79:b6:f4:c5:75:7f:55:98:ba:b2:12:e7:ab:c6:
ad:e3:0a:e6:82:b3:a1:75:5d:b3:fb:9e:ff:4c:5c:25:87:d8:
92:84:cd:d2:bf:6d:21:9b:03:24:d1:c3:b3:0f:18:fe:3a:da:
f0:0e:c6:b6:e8:56:68:c2:43:c4:06:1d:23:33:5b:26:cc:e8:
cc:c2:4e:c1:93:f9:ba:78:b0:59:2d:00:23:c9:d5:05:f3:07:
2c:18:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org