Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/u45nsUktPlzqjj9s_6dTYQBE-Bo.roa
File: u45nsUktPlzqjj9s_6dTYQBE-Bo.roa (raw, json)
Hash identifier: BKjv90/LAsawKbIpKg9RuK+veol4ctbGkTydqbdJhbk=
Subject key identifier: BB:8E:67:B1:49:2D:3E:5C:EA:8E:3F:6C:FF:A7:53:61:00:44:F8:1A
Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial: 0CBE877C
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/u45nsUktPlzqjj9s_6dTYQBE-Bo.roa
Signing time: Sat 01 Jan 2022 08:55:33 +0000
ROA not before: Sat 01 Jan 2022 08:55:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204642
IP address blocks: 185.244.124.0/24 maxlen: 24
185.244.124.0/22 maxlen: 22
185.244.125.0/24 maxlen: 24
185.244.126.0/24 maxlen: 24
185.244.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213813116 (0xcbe877c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Validity
Not Before: Jan 1 08:55:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb8e67b1492d3e5cea8e3f6cffa753610044f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:d9:8e:0a:c4:7f:a3:b9:fc:0c:69:18:91:
5d:d3:0c:86:9a:6b:c5:f7:80:5e:58:a5:3a:cb:70:
72:5c:96:63:e2:75:77:0f:e6:09:2b:22:02:c9:69:
aa:56:19:32:be:b3:cb:d5:ed:04:a6:1c:ce:d0:85:
f8:d2:ce:7d:de:cb:46:b5:cb:76:af:b0:6d:e2:0d:
52:f9:2c:08:1b:e9:73:ae:2f:97:dc:0e:57:ee:46:
45:71:bc:a2:33:44:45:0d:fc:de:41:1e:1a:df:68:
42:ec:a7:d4:12:e3:fb:ae:5d:37:44:a8:1f:11:5a:
ba:39:2c:5a:87:02:18:62:e6:b9:60:1b:6e:c1:7d:
3b:dd:1c:37:51:d9:02:c8:ac:c7:04:b5:34:3e:c8:
95:9e:18:7b:c7:40:4b:9a:4e:e8:4a:c6:04:6f:74:
c3:44:c2:ed:64:27:66:2e:48:41:21:c2:68:66:38:
7c:55:ea:1c:71:52:9d:90:6f:e5:b2:63:4b:47:a5:
10:3b:79:71:20:d7:a0:b8:3c:ad:0b:63:25:2a:31:
20:6f:5c:4d:a4:9f:c3:b2:97:4c:a2:2d:a0:b4:f0:
06:cf:4e:46:72:b4:64:e2:3e:0a:d1:76:66:e7:2f:
2b:69:02:fe:53:d5:82:fe:d8:ab:c8:43:30:8c:b7:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:67:B1:49:2D:3E:5C:EA:8E:3F:6C:FF:A7:53:61:00:44:F8:1A
X509v3 Authority Key Identifier:
keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/u45nsUktPlzqjj9s_6dTYQBE-Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.124.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a4:f1:d4:67:76:6b:b5:45:e8:7a:44:a5:cf:8b:60:22:8e:
6d:c2:f1:8b:7b:fd:e4:c7:b7:bb:7b:01:0a:a9:60:cf:0e:8a:
12:1d:d7:b3:a5:a0:10:6b:2e:34:a1:b6:89:bb:4c:9c:9f:85:
6c:4d:02:cb:78:a2:75:14:ad:f6:08:92:54:39:a6:c4:41:99:
b4:b2:8a:60:76:3d:8c:79:c3:aa:33:de:71:b1:37:8d:60:89:
82:20:41:c8:ac:e7:d3:d6:6d:2e:8e:76:06:9b:6e:89:eb:ba:
63:fa:75:c6:b7:83:3c:07:a5:dc:98:07:30:6b:a3:51:0b:59:
3b:7c:72:26:a0:4b:9b:04:6d:fe:e5:09:f6:62:10:17:02:e6:
99:3b:8c:4b:5c:5b:60:9d:7f:05:39:77:ca:3f:50:ba:82:9e:
99:2b:1f:f6:98:2a:85:e3:d0:24:e1:b0:67:42:46:72:33:83:
b9:4e:9d:fc:1f:1b:2d:7d:38:38:5a:c9:24:11:0b:8f:d0:b3:
32:1d:d5:dd:46:79:b6:17:29:14:3f:9d:83:2d:d2:20:19:ac:
13:91:50:fb:3a:7a:28:90:0e:b9:17:f4:a4:64:9f:b9:4c:ea:
24:b6:38:28:fa:08:e3:ee:fb:5b:49:71:b6:29:c2:e7:b3:0b:
35:86:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org