Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/tB6YjcWbrBF1zuUqR-4WeO5YhGQ.roa
File: tB6YjcWbrBF1zuUqR-4WeO5YhGQ.roa (raw, json)
Hash identifier: XUHlNCeXl5BVSe/pbmQkrdI4hSJ5sqMduOngNzWzPpg=
Subject key identifier: B4:1E:98:8D:C5:9B:AC:11:75:CE:E5:2A:47:EE:16:78:EE:58:84:64
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 461194
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/tB6YjcWbrBF1zuUqR-4WeO5YhGQ.roa
Signing time: Sat 01 Jan 2022 00:58:47 +0000
ROA not before: Sat 01 Jan 2022 00:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62250
IP address blocks: 185.209.188.0/22 maxlen: 22
185.209.189.0/24 maxlen: 24
185.209.190.0/24 maxlen: 24
185.209.191.0/24 maxlen: 24
185.209.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4592020 (0x461194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jan 1 00:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b41e988dc59bac1175cee52a47ee1678ee588464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4b:b8:cc:4d:4a:ec:77:ad:9d:68:aa:97:6f:
33:02:50:61:40:51:28:6e:4b:cd:17:c3:98:82:3a:
da:05:30:f9:c2:51:7d:9b:2e:4a:0c:a3:41:56:c4:
1d:b5:29:18:db:c4:3e:ce:96:6c:71:43:d2:5d:1b:
43:07:23:d4:63:61:65:b6:4e:f7:54:29:28:5b:1e:
85:02:05:ac:53:17:5b:cd:b2:5d:1d:0f:82:0c:cd:
aa:1c:69:4d:68:7e:90:34:de:67:8b:16:39:dd:da:
12:8b:05:f5:46:bd:40:16:97:5f:cf:48:a3:3d:e9:
bc:e2:f3:8f:40:45:2e:00:57:e1:d1:a8:e2:22:da:
13:e1:27:8d:84:e9:6f:cc:d3:08:28:42:8d:b3:43:
d2:8c:f4:fb:ba:38:51:a4:55:e6:d0:9b:6f:d7:af:
7b:39:8a:b8:96:80:70:81:ff:8a:ed:4f:97:26:ab:
49:00:6f:ef:1c:e2:f1:64:97:ba:77:e6:c2:b3:34:
d2:e4:68:af:be:6b:5e:c5:98:78:ee:5d:08:f4:59:
ae:87:02:67:e9:e7:d6:fe:55:4a:48:eb:cc:ad:c6:
d8:34:9b:ae:84:11:4b:c5:fd:d6:03:5c:c8:20:c2:
6f:86:b1:a3:07:77:11:c0:cc:9b:dd:f9:d6:83:a5:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1E:98:8D:C5:9B:AC:11:75:CE:E5:2A:47:EE:16:78:EE:58:84:64
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/tB6YjcWbrBF1zuUqR-4WeO5YhGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.188.0/22
Signature Algorithm: sha256WithRSAEncryption
35:71:ec:56:d8:5a:c9:69:5f:e5:10:5e:6d:98:43:4e:05:83:
00:8b:23:29:35:68:e5:9b:43:8d:32:d0:59:65:3c:05:95:4f:
b7:67:03:bd:72:18:fc:4e:4e:31:9a:55:a8:59:64:34:3c:00:
89:f5:c4:bd:ba:31:4d:ef:8a:be:49:f8:02:24:d8:f3:af:80:
57:62:ff:85:99:d8:8c:b4:0e:88:00:4f:87:65:91:56:47:98:
26:14:b4:f0:89:d8:ba:ea:f5:37:41:ac:5b:7b:df:e0:a8:cc:
7b:a0:6c:78:2a:80:48:e3:62:e0:ff:3e:d3:3e:00:ac:22:39:
9f:40:54:4e:37:8d:aa:d5:94:0d:59:55:71:61:a0:28:fa:be:
a9:10:16:c9:5d:70:54:82:94:fe:f5:86:39:93:55:c3:b5:7e:
f3:ec:12:b3:af:32:9a:a8:42:3b:6c:5f:f8:3f:d8:ed:9e:41:
95:11:02:87:f1:5b:c6:16:7c:9c:7e:01:b8:01:53:a9:39:95:
f8:7c:f2:11:62:f4:5c:f1:f0:c9:ff:56:d7:4a:42:db:42:b4:
0f:4b:05:74:9b:68:90:62:03:80:a2:0c:b4:13:a1:00:c0:43:
62:57:ab:cd:51:f5:e0:c8:20:49:5e:8d:89:4d:a4:37:15:73:
32:a2:e0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:35 2024 by rpki-client on console-ams.rpki-client.org