Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/nY7q4ZhJTGKV6vTdaezH7z5Thfk.roa
File: nY7q4ZhJTGKV6vTdaezH7z5Thfk.roa (raw, json)
Hash identifier: V6haZAWuRlJFPszZovlbYcnv71pNTriZ8oGfGffn8F0=
Subject key identifier: 9D:8E:EA:E1:98:49:4C:62:95:EA:F4:DD:69:EC:C7:EF:3E:53:85:F9
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 460C06
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/nY7q4ZhJTGKV6vTdaezH7z5Thfk.roa
Signing time: Sat 01 Jan 2022 02:58:36 +0000
ROA not before: Sat 01 Jan 2022 02:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25145
IP address blocks: 185.22.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4590598 (0x460c06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jan 1 02:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d8eeae198494c6295eaf4dd69ecc7ef3e5385f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:22:0b:1b:c4:65:df:d7:db:d0:aa:78:d1:
50:1c:e0:2f:ce:eb:5f:dd:fa:ff:9b:d9:fc:44:b4:
11:ec:e8:71:a1:b3:64:40:34:ee:a9:63:68:ac:64:
63:c1:85:23:19:2e:50:55:c7:7a:e8:a7:ac:48:d6:
ee:2e:ac:b3:19:e1:ed:d5:f2:75:e7:fe:bf:37:e3:
a1:32:c3:60:b0:9a:51:5b:e8:52:32:8c:6b:14:5d:
75:5f:f6:1d:44:ca:7f:98:be:a6:b6:f0:e7:8f:46:
80:53:9d:96:b7:ab:ce:cd:08:06:fa:0e:e3:a8:d4:
f2:51:a7:6f:bc:ba:69:c9:82:bc:66:34:08:fd:4c:
ef:11:fe:0b:e5:0e:4f:7d:15:3e:20:75:8a:a7:9c:
09:7c:d7:0b:d8:fc:d6:d8:92:d9:ba:85:ce:2c:a2:
ba:b4:e3:78:42:5d:a4:91:c6:7a:94:52:1b:4a:90:
3e:76:6e:d1:4d:6b:6a:c8:37:a3:01:42:e0:32:2c:
1d:e3:d6:1a:3e:01:1e:ff:82:34:1c:54:e0:6d:31:
d7:32:36:ad:11:7b:00:c1:c0:f1:22:8a:6c:ac:cc:
38:2c:37:a5:43:a1:0c:16:31:fa:19:61:fa:98:0b:
9c:2d:7d:e1:c8:b0:96:b5:a6:ff:ed:0a:5f:c0:b0:
6d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8E:EA:E1:98:49:4C:62:95:EA:F4:DD:69:EC:C7:EF:3E:53:85:F9
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/nY7q4ZhJTGKV6vTdaezH7z5Thfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:49:8a:b7:2e:02:f9:58:74:f6:3b:9e:fa:7f:1c:b0:64:b9:
f8:01:e1:0a:f8:32:73:0c:59:86:d6:d1:ef:79:8f:5c:27:60:
03:7e:a0:73:5b:26:94:f5:93:62:df:d4:4d:79:ee:fa:4e:b7:
25:02:b2:c1:b4:0f:3b:12:51:02:7f:fe:2d:48:6c:0f:1e:40:
c9:ea:06:a3:48:0c:45:0e:eb:c7:03:0c:e8:e5:f5:6a:7c:51:
97:3c:cb:cc:c5:64:6a:d7:cb:c2:5d:cc:81:23:f8:c7:f3:b1:
43:9d:30:e9:6e:aa:3c:a3:97:63:f4:66:03:c2:f1:d0:09:bf:
17:79:3a:a2:97:b9:ac:03:23:18:33:01:87:31:22:6d:bf:4e:
1d:6c:b0:ff:83:32:56:31:ec:c7:44:17:3e:fb:b4:62:e2:9c:
72:73:92:eb:72:95:37:94:15:02:a4:05:0b:d8:33:13:77:4e:
9b:1e:ad:92:8c:16:d3:77:e9:38:03:4d:2e:43:d2:5b:fd:20:
ec:d7:dc:02:e8:c3:9d:2c:c8:5b:ab:8b:00:1a:21:cf:5e:a5:
6e:69:bd:31:10:7e:66:d4:bc:0d:ce:9b:7d:5d:9c:21:69:57:
7b:09:67:6b:1f:43:a8:0f:b7:a0:9d:b1:c8:59:c1:b0:13:89:
71:dc:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:36 2023 by rpki-client on console-ams.rpki-client.org