Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/h_6PahcuHJ8KiLjgAuMVLgvVfio.roa
File: h_6PahcuHJ8KiLjgAuMVLgvVfio.roa (raw, json)
Hash identifier: oEn4qacu9vB8W1j13SxWmExKVoW3UKKmM+hsCA4GLFI=
Subject key identifier: 87:FE:8F:6A:17:2E:1C:9F:0A:88:B8:E0:02:E3:15:2E:0B:D5:7E:2A
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0373650E
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/h_6PahcuHJ8KiLjgAuMVLgvVfio.roa
Signing time: Sun 27 Mar 2022 19:28:43 +0000
ROA not before: Sun 27 Mar 2022 19:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 188.212.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57894158 (0x373650e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Mar 27 19:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87fe8f6a172e1c9f0a88b8e002e3152e0bd57e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:9a:65:d7:40:5b:2a:23:a8:21:9f:10:d5:
f7:62:33:cf:99:8b:57:d6:33:96:cf:d6:62:4e:a9:
a1:ee:a0:85:ea:34:22:b2:16:70:c7:98:8f:2d:49:
01:58:ea:64:33:09:f1:d8:c6:4b:eb:79:42:dc:04:
35:59:85:af:b8:b2:6f:72:21:18:ad:8d:2b:52:4e:
16:f1:2f:49:6a:77:01:c5:50:70:35:e2:6e:d1:bd:
0a:1e:22:5e:48:f2:76:c9:80:50:07:25:b1:eb:ce:
31:5d:f1:8d:0d:08:f5:98:52:24:a6:6e:c4:30:9d:
95:a0:ff:d1:55:eb:28:12:ab:17:31:53:34:a9:2b:
72:f3:18:fb:4a:bc:95:e3:2b:52:ef:d8:5b:be:59:
d0:5a:4c:8e:5d:6c:27:13:25:31:82:f1:aa:75:00:
c3:58:d5:0b:f8:3f:bf:81:f1:94:f5:19:db:02:9c:
f9:fc:a4:84:ca:b2:6b:8a:62:a3:97:17:8f:e1:99:
56:36:66:53:75:a0:5e:05:f2:62:89:72:60:e3:31:
af:1c:d1:68:43:a4:76:38:9e:a3:27:1e:ec:07:c5:
eb:59:09:d9:eb:08:7c:0c:3b:59:cf:34:ea:fe:db:
c4:8c:6b:6f:c1:6b:23:05:21:b2:a3:7a:0c:78:36:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:8F:6A:17:2E:1C:9F:0A:88:B8:E0:02:E3:15:2E:0B:D5:7E:2A
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/h_6PahcuHJ8KiLjgAuMVLgvVfio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.104.0/22
Signature Algorithm: sha256WithRSAEncryption
39:32:e5:40:53:b2:a7:40:7d:73:ec:ce:a0:de:ab:53:fd:65:
97:65:b6:8a:41:4d:f5:36:10:f5:42:82:5b:88:f9:29:d3:f5:
f8:8b:ab:bb:03:a1:7c:b9:39:88:50:47:75:0f:93:e5:39:15:
75:09:59:a8:97:b7:d7:0d:d8:74:d4:3e:34:89:01:ea:6e:ac:
87:90:32:ca:40:99:54:ef:71:6b:9a:bb:78:af:0f:8d:3c:91:
b1:fd:92:59:f6:d6:be:86:59:62:fa:5a:1b:7f:18:30:f1:92:
f5:90:61:72:46:42:53:f9:24:5a:d2:22:78:d2:66:9f:30:15:
27:67:83:da:f1:08:1a:0c:01:39:48:66:b1:ed:f5:01:d7:4e:
4e:43:f0:58:65:53:30:9a:a0:1e:5d:a1:40:9f:11:00:28:95:
75:c2:f3:6d:7d:92:40:c6:06:63:d6:e9:e0:ad:98:a0:51:46:
07:d0:e8:e5:7e:6f:67:ae:b6:f7:01:e6:96:20:64:ef:3f:8e:
a4:d7:6a:51:ed:56:77:bb:16:e6:9b:36:ef:7c:d2:69:a0:92:
07:16:19:11:5d:4e:a6:6a:88:03:4f:92:9e:77:02:a5:6b:f2:
dd:63:45:12:0f:42:1c:d5:75:b6:64:c0:a5:5b:de:5a:d0:2d:
ee:4f:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org