Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/4ebnBf2fnhntloyAGUQ1fnCei1Q.roa
File: 4ebnBf2fnhntloyAGUQ1fnCei1Q.roa (raw, json)
Hash identifier: rHAoSRar1PG5U830A36Acjo3UGf1bmGtXVjk9mE34H8=
Subject key identifier: E1:E6:E7:05:FD:9F:9E:19:ED:96:8C:80:19:44:35:7E:70:9E:8B:54
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 02C0C92C
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/4ebnBf2fnhntloyAGUQ1fnCei1Q.roa
Signing time: Sat 01 Jan 2022 11:01:11 +0000
ROA not before: Sat 01 Jan 2022 11:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202984
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
185.231.245.0/24 maxlen: 24
194.147.114.0/24 maxlen: 24
2a0c:9300::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46188844 (0x2c0c92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Jan 1 11:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1e6e705fd9f9e19ed968c801944357e709e8b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:7f:67:98:56:e7:a5:32:30:a1:7f:80:09:
47:be:8c:00:f5:12:a1:4c:3d:c4:ce:b1:83:a3:10:
2d:46:10:23:13:d0:eb:20:49:9f:94:4f:63:47:5b:
b3:51:93:f5:af:5d:fe:d5:77:cf:c5:ff:73:cb:e4:
74:f4:7d:52:c3:14:43:40:1b:d9:ce:1d:2e:30:60:
da:0c:82:e6:52:ba:eb:ee:b3:74:c5:59:8f:b6:f8:
e6:41:a0:f1:fa:bb:80:9d:1e:6d:0a:41:0b:53:e5:
09:49:3e:ea:e9:3d:77:a1:1d:54:50:7b:02:51:4a:
f3:52:6a:51:74:3d:e3:6a:5e:a9:23:29:2d:61:b9:
08:0a:16:f8:66:65:10:3d:83:d5:96:a7:d6:64:7b:
0d:fb:9d:a8:14:32:8c:ae:fb:28:46:36:6f:e6:de:
93:e9:90:e8:0e:7f:95:7d:99:5c:48:a0:29:6e:a8:
0d:2b:28:a4:0c:f2:d6:a9:82:3e:51:d1:da:12:d4:
fc:3d:b4:cd:ac:7a:97:5e:c8:28:45:1c:aa:4e:84:
2c:7b:04:79:4f:36:20:d1:f6:f8:e5:06:9d:58:3e:
24:fa:25:8c:82:73:5b:84:72:20:33:97:6d:14:01:
3b:c8:6a:f0:f0:15:d5:0e:a9:65:33:bd:a4:2e:a0:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:E7:05:FD:9F:9E:19:ED:96:8C:80:19:44:35:7E:70:9E:8B:54
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/4ebnBf2fnhntloyAGUQ1fnCei1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/29
Signature Algorithm: sha256WithRSAEncryption
4c:65:d0:60:12:90:71:7b:52:1f:c2:16:48:41:11:25:86:fe:
9e:55:50:1c:2d:8a:da:b6:54:45:ae:a4:d9:05:98:66:1c:66:
28:42:e0:c0:12:3f:91:99:cf:94:e5:d2:9a:5b:97:1b:87:44:
85:74:a5:ab:6d:df:25:39:ff:91:50:da:16:0e:89:4e:15:b5:
b4:57:9d:34:bd:23:02:39:22:2d:2d:74:ec:20:d1:da:11:40:
0a:72:03:a2:61:c5:d6:76:82:84:4f:c8:a0:3c:43:6a:ae:59:
c9:b5:7b:fb:11:9d:d7:5e:b8:2d:e8:ba:03:a8:97:7e:0e:1f:
88:59:0f:e3:57:8d:42:06:5f:df:32:87:2c:cc:d3:6c:18:c2:
2b:44:cb:a3:6d:70:b8:03:b2:4c:09:b4:01:90:32:41:9a:2c:
6a:b1:55:48:6f:c1:5d:08:a8:eb:7f:b1:1f:40:75:7c:ad:9a:
29:3f:09:18:4c:54:24:9a:5c:c2:9a:a8:e5:f8:3e:be:41:07:
25:5d:8b:d8:0a:ce:18:17:cf:cc:5b:3f:75:66:ef:6b:4f:d6:
f8:84:09:91:28:40:82:66:57:5d:ab:10:23:85:50:cf:10:ee:
f0:75:92:34:af:87:a0:48:5a:55:2a:a3:5a:f6:30:68:35:06:
b4:fe:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:56 2024 by rpki-client on console-ams.rpki-client.org