Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa
File: SzFSE2qJG1L_4yzs394O9gi46pc.roa (raw, json)
Hash identifier: osXXYUK7qiCyqKOROb3qnH3wpl6Sv3W2g4IXhde4r90=
Subject key identifier: 4B:31:52:13:6A:89:1B:52:FF:E3:2C:EC:DF:DE:0E:F6:08:B8:EA:97
Certificate issuer: /CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
Certificate serial: 0181F465061484A19D59E7AD9F28C8F25EEF
Authority key identifier: FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa
Signing time: Tue 12 Jul 2022 21:51:10 +0000
ROA not before: Tue 12 Jul 2022 21:51:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 185.232.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:65:06:14:84:a1:9d:59:e7:ad:9f:28:c8:f2:5e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb483ef4cdf6606a3eda98cee8f39b8fde105e10
Validity
Not Before: Jul 12 21:51:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b3152136a891b52ffe32cecdfde0ef608b8ea97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:ea:6e:a7:4e:c1:9b:a1:f9:c2:80:87:af:
10:51:b7:fd:5d:a1:22:d2:32:d1:44:e9:cc:1d:4e:
bf:e8:76:e6:aa:b4:4a:42:75:5e:d3:4c:48:81:87:
78:18:ed:93:9c:27:55:f6:f8:5f:1a:8d:82:bd:e1:
02:90:ce:b4:69:ac:82:ad:2c:0a:d4:74:61:b0:9e:
6d:45:dc:22:6f:4e:22:6b:f4:eb:46:a0:e3:a6:4d:
a3:c8:fe:80:a0:1d:aa:20:42:fc:45:b4:41:a0:48:
70:ad:6f:f1:b8:7e:3c:cd:ad:a3:66:33:67:2a:97:
bb:67:ad:cd:3a:53:e4:11:bd:5f:49:5b:27:be:9f:
23:b1:95:c3:0d:c3:f5:e5:ea:ca:bc:d0:61:6e:95:
e2:f9:cc:d1:e0:3a:05:54:c3:14:7e:dd:1a:b8:2c:
0c:1d:4a:a4:b8:66:77:f3:92:da:79:94:14:c9:bc:
84:c6:5c:f6:dc:c4:a3:b6:72:df:33:47:5c:9e:75:
de:cc:9f:19:d1:de:46:e8:7a:18:43:7e:8b:5c:48:
fa:86:12:d0:61:2c:95:e1:3f:b4:80:36:06:de:66:
5b:65:94:bd:9f:df:71:22:60:a2:df:76:b9:42:b4:
5c:78:64:8c:00:a4:26:be:4b:c2:3d:25:43:80:b2:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:31:52:13:6A:89:1B:52:FF:E3:2C:EC:DF:DE:0E:F6:08:B8:EA:97
X509v3 Authority Key Identifier:
keyid:FB:48:3E:F4:CD:F6:60:6A:3E:DA:98:CE:E8:F3:9B:8F:DE:10:5E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0g-9M32YGo-2pjO6PObj94QXhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/SzFSE2qJG1L_4yzs394O9gi46pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1f898-91d2-46ab-8285-08904b7b5559/1/1-0g-9M32YGo-2pjO6PObj94QXhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:20:3d:31:ac:8c:b9:c9:8a:7d:17:be:29:65:61:b2:3a:c1:
77:eb:10:33:b5:53:a9:08:c6:27:b8:d0:0c:fe:fb:a8:7a:a0:
41:a3:66:2c:2a:0b:05:3e:fb:89:62:95:82:de:4a:84:5e:f4:
36:a6:ee:18:b0:4f:5d:18:40:e0:c8:62:58:fa:87:d0:f6:1e:
d0:0d:51:5a:d4:5f:36:f2:9f:be:93:a4:76:26:72:72:ec:11:
50:fd:76:27:17:5e:8d:c9:cb:7b:d9:75:72:0b:67:c9:75:22:
37:22:26:fb:f9:3d:b0:ca:bd:97:9e:47:f0:cb:c2:dd:5d:7e:
e5:9b:a3:61:ed:4e:35:25:69:b0:14:d2:1e:b7:5f:1b:c7:57:
22:08:22:1f:12:bd:46:da:ed:ca:6b:75:e3:a3:dc:fa:44:8f:
3d:9d:7b:9d:87:84:9f:b5:12:9d:4e:7e:11:a0:01:61:00:13:
03:21:51:ff:cb:04:58:a3:28:5e:ed:ab:a4:d0:0c:71:38:34:
1e:3c:97:f2:a4:b4:17:6c:c4:c2:1f:9b:4e:9c:ed:94:01:e3:
a0:40:5b:f9:44:ea:67:69:99:12:16:20:d9:40:c0:5d:03:d3:
0c:c1:c2:2a:a0:15:10:8c:0f:e5:7b:73:2c:1a:b3:72:75:14:
10:81:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:02 2023 by rpki-client on console-fra.rpki-client.org