Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8DSCM7VssLCTSjHOdFpSWKbFrFo.roa
File: 8DSCM7VssLCTSjHOdFpSWKbFrFo.roa (raw, json)
Hash identifier: FhZdn3xPPXY4ARyNiMXOrjlY4zUDxuNbllelDsCwb4U=
Subject key identifier: F0:34:82:33:B5:6C:B0:B0:93:4A:31:CE:74:5A:52:58:A6:C5:AC:5A
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 0834DD96
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8DSCM7VssLCTSjHOdFpSWKbFrFo.roa
Signing time: Sat 01 Jan 2022 10:55:54 +0000
ROA not before: Sat 01 Jan 2022 10:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57717
IP address blocks: 185.173.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137682326 (0x834dd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 1 10:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0348233b56cb0b0934a31ce745a5258a6c5ac5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:b5:8e:71:f6:4b:c5:d0:98:b6:dc:15:d5:
f5:cc:73:61:29:89:b4:d2:df:3f:b8:4f:a1:13:8b:
b9:c5:78:5b:2b:cf:b0:9a:58:2e:53:55:e0:83:8c:
72:2b:d5:2a:55:d8:81:51:c3:ce:56:d9:f5:17:b8:
69:21:2c:8e:3b:a1:c2:aa:88:ec:8e:5e:6a:44:58:
b9:b4:1f:7f:53:c3:ed:ba:a0:46:0b:f9:39:ff:e6:
4c:7b:ba:4e:05:65:92:09:29:06:10:1c:0c:1f:db:
b0:5a:d1:9d:7b:78:e5:ff:12:3e:c1:5f:cc:3d:05:
cc:cc:9e:8c:3c:db:42:7b:4e:2b:34:b2:9d:fa:80:
2e:8d:99:3f:b6:74:32:03:e8:80:a6:19:dd:ab:48:
5e:ad:3d:74:59:95:c5:e6:69:e9:81:7b:19:b4:9d:
61:38:20:e1:c5:28:a6:6b:eb:7e:e7:05:0d:dc:bd:
73:0f:6a:a8:0b:67:5e:2c:0c:9e:a6:e5:82:d5:9e:
4e:ec:1d:30:3b:47:91:4e:69:a0:63:d2:e4:f2:02:
23:35:b4:de:1f:a8:fb:3c:7a:ec:f3:3f:2e:6f:8a:
fd:a2:4d:39:b7:0d:88:c7:38:85:e9:5b:cd:3f:c9:
74:8f:2b:ea:23:22:d5:c5:26:62:0e:80:66:6a:62:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:82:33:B5:6C:B0:B0:93:4A:31:CE:74:5A:52:58:A6:C5:AC:5A
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/8DSCM7VssLCTSjHOdFpSWKbFrFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.235.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b3:67:eb:6d:1e:9e:52:f0:27:74:24:df:0d:84:57:a4:3d:
27:bc:22:ad:d2:2e:79:76:55:7d:52:11:17:00:21:bd:5e:a3:
f5:6f:1d:d3:13:4c:0c:bf:a5:f1:45:7a:fb:d9:9d:13:50:f3:
ec:54:88:05:a3:37:8b:d5:86:1b:21:8a:2c:e2:e1:9c:cb:cc:
ed:31:c7:05:8c:4e:c6:14:97:46:76:f8:89:d5:ae:5d:b3:be:
f1:06:55:bd:ab:d9:78:5f:ed:b3:9c:7e:13:10:15:e0:83:36:
c7:53:d1:ee:13:d8:c7:be:19:6d:86:df:90:8b:14:b8:ed:15:
e2:ab:c6:98:7b:66:45:27:40:fd:c8:8f:2a:70:23:66:b9:a1:
32:8f:3f:2a:e3:54:55:fd:75:6d:8e:83:be:73:bf:97:75:56:
02:3a:4a:3e:a4:81:4b:59:5d:53:4e:eb:d3:69:d4:06:7b:46:
91:78:1f:4e:6f:0a:ff:0f:6d:44:ad:6d:d7:b0:3f:17:04:06:
c3:8e:4f:4e:bc:20:3e:0e:f3:96:fa:99:89:f0:66:ca:b8:17:
67:64:ef:e6:61:19:07:76:17:4c:fb:d6:a2:75:b1:bd:a0:d6:
3c:43:da:6f:13:b5:05:91:ab:cb:1c:85:a6:cd:fc:13:82:8c:
31:bb:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-fra.rpki-client.org