Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/k9RMmxTplQOnQU9dM-HbGld0AMg.roa
File: k9RMmxTplQOnQU9dM-HbGld0AMg.roa (raw, json)
Hash identifier: OccWDzDakZuwD89l6a7rdzaY6YhuFE45gQ2pbHkcUyg=
Subject key identifier: 93:D4:4C:9B:14:E9:95:03:A7:41:4F:5D:33:E1:DB:1A:57:74:00:C8
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 01BDA1F6
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/k9RMmxTplQOnQU9dM-HbGld0AMg.roa
Signing time: Sat 01 Jan 2022 15:59:12 +0000
ROA not before: Sat 01 Jan 2022 15:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20570
IP address blocks: 185.225.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29204982 (0x1bda1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Jan 1 15:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93d44c9b14e99503a7414f5d33e1db1a577400c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:e1:a9:c4:e6:2b:a1:3f:d1:c9:3b:13:e2:
ea:95:2b:a4:70:d8:9a:79:d0:81:49:50:10:99:35:
34:26:25:8b:66:a5:ab:3c:e6:1d:7a:5b:07:fd:ec:
c9:15:a3:c3:e1:00:ba:71:38:a9:96:54:b2:80:98:
fd:08:ab:64:02:f5:c8:06:0b:f1:cf:75:37:6b:33:
35:d5:7c:ca:30:6c:ce:13:e7:9d:f1:d9:2b:90:e0:
5c:f7:80:6c:21:fd:0c:d3:da:6d:c0:e8:06:e9:5a:
aa:77:20:69:6e:11:ce:4a:71:de:bc:99:ed:e1:e8:
d6:33:f0:44:7b:ef:2a:63:8d:49:19:75:5c:f4:9f:
cd:95:4a:1d:9a:cb:1e:39:6b:6d:d9:fe:03:e2:14:
99:47:ff:61:99:56:b8:e2:73:48:49:26:5c:60:3d:
5c:9a:a9:a3:6d:0b:06:0c:80:1a:85:83:a7:24:36:
93:77:30:52:f4:12:be:2a:71:71:6c:88:66:1c:f9:
d6:83:f7:dd:81:7a:c9:00:14:37:e5:c0:33:b1:f3:
52:bd:8c:18:4e:bc:4d:7a:81:aa:11:a7:fd:2f:ec:
cd:b9:2f:e5:9b:99:76:6c:da:be:94:78:d7:df:eb:
ea:74:c3:71:82:2f:45:e2:8b:bd:2e:b2:f4:0c:e1:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:4C:9B:14:E9:95:03:A7:41:4F:5D:33:E1:DB:1A:57:74:00:C8
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/k9RMmxTplQOnQU9dM-HbGld0AMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bc:c3:17:bb:ed:48:a5:93:29:fa:f9:ec:b8:2b:2f:be:c7:
e0:4a:0e:46:2a:90:cb:f4:06:7c:b8:71:dd:fa:ac:5e:ff:d8:
87:72:0e:1a:c9:33:51:27:bf:d0:d3:d4:17:4b:59:8d:9c:55:
8b:8f:a7:80:a1:0d:03:17:cf:15:52:64:23:50:35:31:03:b4:
e7:88:6e:a5:17:19:83:d2:9d:6d:88:39:8d:23:20:14:0a:a7:
df:81:7b:0e:33:0f:d7:d0:2e:a3:e9:47:80:d4:da:17:a2:bb:
41:67:80:dd:66:40:f4:6d:03:24:e9:50:ea:8e:83:75:fd:68:
3b:cd:bb:34:f2:ab:7f:28:34:34:1c:8d:22:3c:77:ef:4a:d1:
84:31:4c:f3:4c:aa:1d:22:35:f4:4d:b1:76:a4:01:98:f1:86:
27:45:f1:4d:e5:d3:80:c8:18:75:ca:c4:81:33:4d:75:fa:9f:
4f:c3:3b:01:8e:95:15:07:0c:ee:68:4a:d9:bd:66:6d:2c:0c:
2e:11:f7:16:3c:f4:e4:b7:46:df:96:5b:85:ac:d6:5e:ab:3e:
7a:e1:99:67:9f:bb:ce:d9:06:c4:97:9b:c5:55:1b:c7:33:ed:
85:13:2d:77:15:c4:31:87:0c:20:70:95:1b:7f:f3:1e:48:8d:
45:a2:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org