Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/1O0uXkfoAmsg1yhoRMTbfRwMf-I.roa
File: 1O0uXkfoAmsg1yhoRMTbfRwMf-I.roa (raw, json)
Hash identifier: GLhDMcUm5T+SQ9Qjfz39kRBhFGWk/Hg9UH21iPFaccI=
Subject key identifier: D4:ED:2E:5E:47:E8:02:6B:20:D7:28:68:44:C4:DB:7D:1C:0C:7F:E2
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 014B54AD
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/1O0uXkfoAmsg1yhoRMTbfRwMf-I.roa
Signing time: Sat 01 Jan 2022 03:52:21 +0000
ROA not before: Sat 01 Jan 2022 03:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 185.234.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21714093 (0x14b54ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jan 1 03:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4ed2e5e47e8026b20d7286844c4db7d1c0c7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:97:58:85:ee:73:89:12:86:c0:83:a4:04:
d8:da:8c:64:62:f4:68:a9:7f:5d:87:56:af:bd:b8:
00:29:18:03:eb:10:c7:75:55:dd:6e:d8:55:39:95:
2b:fe:d2:df:24:81:e5:8f:42:5b:a1:1b:a8:2d:07:
36:9a:65:09:90:64:4b:61:64:e8:bb:0a:6f:98:10:
b5:96:f8:ae:97:e1:a1:8b:f5:6f:73:90:25:78:e2:
e8:db:94:09:92:3b:36:f4:fc:99:93:22:1b:b2:08:
ce:62:37:4a:6a:a2:70:91:5b:63:96:aa:44:93:f3:
27:c2:dd:65:6c:f0:88:25:95:d4:36:f8:b1:ef:ff:
e1:90:6b:01:c8:70:47:13:fa:09:18:04:76:2b:3d:
5f:2f:c8:c8:89:82:e7:23:c4:03:97:31:97:02:66:
29:88:4b:ab:c6:f0:52:9f:bf:13:6c:4b:7b:6e:04:
9f:a6:bf:cd:bc:f6:11:f9:5c:02:5a:5b:7e:67:79:
dd:c2:7b:9a:c7:81:68:f8:a6:31:ff:58:8a:92:3b:
55:8b:ec:9f:ad:d0:79:d4:19:0e:e8:88:29:42:62:
63:56:d0:52:f5:9f:bd:47:13:ea:c2:98:4a:1f:3b:
34:95:4d:64:76:2d:28:e5:bb:e3:cb:36:60:c4:c2:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:ED:2E:5E:47:E8:02:6B:20:D7:28:68:44:C4:DB:7D:1C:0C:7F:E2
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/1O0uXkfoAmsg1yhoRMTbfRwMf-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.110.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ee:0b:aa:b2:71:21:da:c5:54:42:cf:fc:70:bb:04:3e:ea:
0d:58:5c:17:12:53:d1:74:eb:ed:da:3f:4c:8d:f9:0e:f0:bc:
86:c8:63:fb:3b:2b:e7:7f:ad:21:40:3a:ef:d6:94:bb:ff:4f:
52:b1:cd:03:38:2d:d4:c4:b9:e2:fd:d7:9d:4c:49:9b:69:f2:
ea:fd:88:39:cb:e6:92:20:80:14:cb:03:b5:47:67:33:10:77:
68:6f:c8:8e:94:02:e2:30:20:ba:fe:c9:99:2e:37:00:1d:4e:
e8:e4:87:f1:bb:43:9d:34:2e:cc:b8:95:84:9e:bd:e3:06:9c:
b2:40:2e:1b:47:f1:0d:57:d2:f1:2c:5d:0c:9c:23:82:6e:49:
a7:45:47:5a:2d:f3:c3:00:76:f1:02:68:78:83:c2:0b:26:3e:
7f:70:f9:2f:2f:b0:ad:1b:1f:e2:b1:e0:ea:dd:f8:b0:e1:57:
e6:c4:be:29:14:9a:b7:70:fc:e5:7d:66:29:9e:0f:60:f8:57:
2e:87:7b:02:e8:84:8b:77:f7:65:03:fc:80:8d:eb:f0:f6:38:
97:c1:31:4c:71:a7:fa:2b:37:cf:eb:ef:c5:19:bf:63:71:9a:
90:ad:ca:e3:f5:d3:60:b0:99:90:ae:3d:e7:7e:a0:bd:e6:6d:
07:12:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:22 2024 by rpki-client on console-fra.rpki-client.org