Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/Ij9OCzKN1xs1-1Je2fF8BfmQMLM.roa
File: Ij9OCzKN1xs1-1Je2fF8BfmQMLM.roa (raw, json)
Hash identifier: 6HtDq+tkvocS54xk/kNdJ07XcMtdTKXDCqCGvQITzKo=
Subject key identifier: 22:3F:4E:0B:32:8D:D7:1B:35:FB:52:5E:D9:F1:7C:05:F9:90:30:B3
Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Certificate serial: 078C5CE0
Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/Ij9OCzKN1xs1-1Je2fF8BfmQMLM.roa
Signing time: Sat 01 Jan 2022 10:57:20 +0000
ROA not before: Sat 01 Jan 2022 10:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 185.130.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126639328 (0x78c5ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7
Validity
Not Before: Jan 1 10:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=223f4e0b328dd71b35fb525ed9f17c05f99030b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:6a:ed:66:5f:b7:81:c6:a6:78:50:7f:5f:
62:c8:08:e2:fe:cd:ca:3a:25:0c:17:dc:f1:d9:90:
cd:fa:2e:ab:59:9a:82:3c:17:e6:46:7a:39:f8:6b:
85:17:28:f3:cd:44:7e:e1:b6:41:79:3b:64:28:8e:
fb:4d:f5:30:96:87:ca:70:73:11:7c:b5:04:96:54:
ac:76:cd:04:3f:6a:87:5e:22:4f:12:9a:23:6d:79:
ba:03:16:17:56:f4:fe:94:62:2a:29:1c:1f:74:25:
4d:f8:0f:b9:d8:6d:c0:0f:d1:7d:ec:81:30:92:1e:
a7:82:8e:5c:37:05:21:3e:0f:f4:7c:3d:26:88:f2:
92:a7:07:80:cb:67:f9:9a:60:b4:cb:4d:14:01:4c:
88:27:b8:ac:19:b4:29:91:d2:90:f2:c1:4f:af:25:
7f:c4:9c:32:f7:4c:19:40:82:a5:4b:5d:06:4d:cf:
fa:9e:d8:0f:20:0b:d2:25:e7:46:34:da:4d:7e:9f:
55:c6:a5:7e:d9:45:f7:7b:ca:78:d7:6a:b3:07:cd:
74:05:67:ab:c0:64:97:16:b0:a0:b7:f2:cb:7e:6e:
dd:c9:57:a7:38:a9:b8:3a:de:4b:f0:00:4f:5f:cd:
65:aa:6e:09:c6:34:e8:6c:a1:a9:ab:7a:00:c7:c1:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3F:4E:0B:32:8D:D7:1B:35:FB:52:5E:D9:F1:7C:05:F9:90:30:B3
X509v3 Authority Key Identifier:
keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/Ij9OCzKN1xs1-1Je2fF8BfmQMLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:4d:de:b0:52:21:bb:a4:08:67:d7:0f:0a:42:80:18:fb:fb:
89:a4:a0:7e:3e:78:5b:d4:a4:20:15:3d:90:a6:e6:ac:53:61:
1b:0d:50:0f:2e:4c:6f:46:72:2c:74:7e:d9:43:a0:1c:ac:57:
9c:e1:05:02:b2:8c:2e:60:58:6e:ff:77:10:63:37:ca:8e:ed:
39:01:cd:74:94:7b:5a:69:ed:0c:dc:f8:a7:a2:6c:31:1f:7b:
4d:d5:d5:13:e8:2c:82:c6:67:7c:17:60:e2:10:83:96:e2:97:
2d:9d:94:04:0a:44:6d:36:4d:2c:5e:77:5f:4c:af:83:eb:4e:
e0:e3:be:3d:27:4c:57:b6:b0:20:84:83:2f:e2:cf:e2:af:b2:
f7:9c:ce:c0:16:7c:79:78:43:5a:3e:9f:a2:cc:56:39:bf:a1:
bb:9a:d0:ad:a2:10:d0:31:2f:35:7d:6d:58:1a:b4:ba:3d:9a:
f4:b0:9f:77:13:2a:b5:5f:e3:aa:63:f0:17:95:99:74:ca:dd:
0d:92:f7:aa:9a:f5:7a:22:88:d0:35:2d:05:b1:9c:63:35:fb:
18:a8:2c:b8:52:d7:39:ad:a4:3a:e4:ee:bf:de:85:5e:73:27:
10:92:32:50:0d:61:1e:c7:f8:44:5a:18:16:55:c8:29:6c:70:
d8:91:85:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:45 2024 by rpki-client on console-fra.rpki-client.org