Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/cOAWMf8LUOnNI5TKMlTbjJuEGFw.roa
File: cOAWMf8LUOnNI5TKMlTbjJuEGFw.roa (raw, json)
Hash identifier: /UkNOE+QFhBlrQdt8ij2ML5MnbiIeGED//FqwYvEvqg=
Subject key identifier: 70:E0:16:31:FF:0B:50:E9:CD:23:94:CA:32:54:DB:8C:9B:84:18:5C
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 10D32E3F
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/cOAWMf8LUOnNI5TKMlTbjJuEGFw.roa
Signing time: Sat 01 Jan 2022 12:57:00 +0000
ROA not before: Sat 01 Jan 2022 12:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60526
IP address blocks: 185.152.212.0/24 maxlen: 24
185.152.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282275391 (0x10d32e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 12:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70e01631ff0b50e9cd2394ca3254db8c9b84185c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:06:34:3f:4c:5e:d8:d3:a4:68:e7:71:e5:
b6:12:70:df:b9:7a:65:2b:16:cd:37:71:94:81:1e:
03:ea:8c:ad:22:5d:9c:cb:ad:f7:05:02:f0:b3:e0:
ce:94:ef:32:e7:e1:df:a2:8b:30:71:e1:ed:ae:c9:
29:be:e3:d3:69:cf:8c:aa:cb:c0:d9:c4:2e:c5:43:
af:b7:85:82:34:1b:bf:8c:3a:23:d0:fc:54:d7:df:
8e:b7:08:46:8e:1d:e2:a4:5a:ff:ba:98:c6:60:62:
e2:de:ee:ad:49:c4:c7:ec:33:6d:98:08:95:76:e0:
ee:0a:c7:4e:39:b6:63:2e:82:88:53:67:44:dc:73:
f8:1b:ec:9d:81:de:bd:cc:02:72:be:c4:e1:50:82:
af:4f:6c:42:cc:df:23:c4:32:ef:c8:6c:dc:a6:5e:
0b:79:81:55:94:df:87:8a:57:81:81:76:aa:9b:cb:
c8:cd:36:5c:32:4a:ce:03:7a:67:84:ae:79:fc:3b:
40:ef:56:07:4e:b6:35:d5:b5:10:b9:75:ac:b5:2c:
ee:34:81:a2:6e:d6:c2:36:86:b0:7c:39:b6:74:28:
16:ab:d0:77:9a:92:4c:37:cd:54:24:a3:ba:43:cf:
aa:73:b8:ba:04:f6:6c:6c:50:41:6a:9c:27:f3:6f:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:16:31:FF:0B:50:E9:CD:23:94:CA:32:54:DB:8C:9B:84:18:5C
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/cOAWMf8LUOnNI5TKMlTbjJuEGFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.212.0/24
185.152.214.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ca:63:2e:91:e2:c5:6a:41:bb:5b:4f:41:71:71:04:74:c1:
98:75:3f:bb:e1:db:93:c5:2d:e7:88:ef:3c:15:b6:88:dd:e8:
24:95:73:eb:d4:f4:0b:89:a5:a2:a8:d3:e2:70:36:86:82:e1:
2d:55:84:90:04:ce:cb:1f:8b:92:75:fe:6b:b6:ce:03:d7:32:
c9:3d:a0:0f:70:81:c6:0b:07:51:ef:2d:54:2c:1d:16:0b:a5:
b2:d2:c2:e0:31:3a:21:18:52:6f:5c:46:5a:fe:bf:86:7b:37:
f9:6a:e0:88:db:2b:87:aa:39:e8:5b:2f:4f:1e:a5:2d:64:70:
90:cd:c5:92:ea:ff:55:ad:93:96:e0:17:02:a3:6f:42:f4:1a:
88:9c:cd:13:d8:ae:7e:14:f1:c9:f8:be:2a:80:d3:5c:c4:9e:
ea:e8:0f:ab:d1:5f:88:8b:34:ea:64:c1:b9:37:dd:0f:62:78:
66:d6:42:88:45:11:da:d2:ba:60:f3:a7:0e:a4:cb:39:b8:bb:
56:15:49:20:76:d7:ad:d6:d2:62:aa:d3:65:cb:c7:4a:7b:6f:
a9:95:31:aa:6e:7d:77:d7:91:92:37:91:95:03:34:26:3a:8a:
82:34:8b:21:71:58:f3:2f:29:6a:1b:47:d8:c4:64:33:a3:3d:
c6:8b:e0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:36 2024 by rpki-client on console-fra.rpki-client.org