Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/co1vvEXiOEDVot1O3opoJU8Ck7Q.roa
File: co1vvEXiOEDVot1O3opoJU8Ck7Q.roa (raw, json)
Hash identifier: X3bOuL2bYIfxJpyr+ROZ1AXW1B9v0pm+RUijl0xA3/4=
Subject key identifier: 72:8D:6F:BC:45:E2:38:40:D5:A2:DD:4E:DE:8A:68:25:4F:02:93:B4
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 16353D60
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/co1vvEXiOEDVot1O3opoJU8Ck7Q.roa
Signing time: Sat 01 Jan 2022 06:02:39 +0000
ROA not before: Sat 01 Jan 2022 06:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199255
IP address blocks: 185.4.249.0/24 maxlen: 24
185.4.248.0/24 maxlen: 24
185.4.251.0/24 maxlen: 24
2a02:6840::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372587872 (0x16353d60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jan 1 06:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=728d6fbc45e23840d5a2dd4ede8a68254f0293b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:91:9e:80:a4:85:41:9f:43:a5:0e:59:51:
76:aa:93:e6:ef:e9:92:d8:22:e0:a9:ad:92:75:15:
dd:26:9d:0c:3a:e7:68:c1:a8:6a:6f:b4:99:10:89:
f1:f2:80:46:c5:9c:53:e5:4d:b6:bb:64:a7:ff:26:
fd:d9:10:5d:80:8e:e0:08:8e:f0:e4:d1:4d:34:8e:
72:5d:31:1b:70:a9:f9:95:84:9b:ec:94:1b:d5:eb:
cc:91:ed:62:48:df:e4:a1:c2:99:94:db:22:13:e1:
87:73:b5:bd:b3:0e:07:93:39:99:6e:eb:e4:9b:51:
97:91:84:00:b4:ee:90:5b:a8:8b:22:d0:ad:02:8c:
a3:8b:1a:39:1a:18:b1:2a:96:90:69:a8:46:ed:72:
f5:f9:f5:9a:4c:9d:5b:b0:d3:aa:d7:2d:f8:2c:45:
c2:a6:61:ca:7d:21:e9:93:d6:cc:f2:8c:ee:df:5f:
f6:c9:17:ac:f3:e0:31:2b:81:6d:d0:a4:4c:f5:ac:
53:dd:04:50:5f:46:0b:bc:4f:41:22:c2:66:19:95:
b6:49:f8:27:82:b2:77:08:eb:1a:29:bf:09:f9:a2:
6a:7e:33:78:03:1a:6e:f1:36:73:c0:32:f6:85:eb:
21:0f:e0:75:57:80:df:4d:27:2e:1d:6e:f9:7c:f5:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:6F:BC:45:E2:38:40:D5:A2:DD:4E:DE:8A:68:25:4F:02:93:B4
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/co1vvEXiOEDVot1O3opoJU8Ck7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.248.0/23
185.4.251.0/24
IPv6:
2a02:6840::/32
Signature Algorithm: sha256WithRSAEncryption
6f:75:fc:a7:a2:22:5e:f2:a3:c1:e0:61:be:49:e0:9d:9e:56:
0a:8f:fd:69:af:8e:64:d6:56:64:c8:35:33:b4:6f:f1:e4:90:
81:a8:8b:00:69:7e:cf:fc:58:4e:db:a2:af:03:69:ec:85:de:
c1:38:9d:99:9f:ba:24:9e:51:8f:64:48:ae:8c:d7:15:35:ac:
88:cb:11:e6:c4:dd:ca:19:b1:7f:ea:f2:95:e9:46:25:62:ab:
81:dd:9c:e8:b5:50:47:f1:64:05:c8:78:1c:e6:c4:6b:9f:d4:
d6:70:34:8b:39:92:40:07:db:55:a5:37:03:9d:b4:c8:8a:00:
1d:17:29:ad:82:83:cb:43:9e:f7:7b:e2:4e:89:20:c9:b7:a9:
0a:89:06:6a:84:94:d4:16:36:11:00:83:69:92:f4:fc:e1:e2:
6a:b6:f2:ff:31:d1:b4:ca:0c:21:a0:f2:f1:69:53:ec:55:e8:
89:a6:e6:e4:ab:7d:7c:96:10:7c:36:e2:93:51:90:c2:bb:98:
43:b5:67:56:6f:98:71:7a:3d:00:3a:f8:fc:c0:04:94:e1:bd:
05:3a:72:72:92:5e:9a:2d:30:df:44:1c:60:de:5a:aa:98:b0:
e8:62:38:88:5c:74:65:9b:85:f1:d8:54:02:73:1f:71:07:92:
a5:ad:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:23 2024 by rpki-client on console-ams.rpki-client.org