Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/G7bR2xIjTvZU_opq3CLvq7OGJDU.roa
File: G7bR2xIjTvZU_opq3CLvq7OGJDU.roa (raw, json)
Hash identifier: j3/U3Q6eZjmgocfBKnjGVzMh++ucZ7OV0fy2EeageS0=
Subject key identifier: 1B:B6:D1:DB:12:23:4E:F6:54:FE:8A:6A:DC:22:EF:AB:B3:86:24:35
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 06513010
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/G7bR2xIjTvZU_opq3CLvq7OGJDU.roa
Signing time: Sat 01 Jan 2022 00:52:26 +0000
ROA not before: Sat 01 Jan 2022 00:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205512
IP address blocks: 185.233.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105984016 (0x6513010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 1 00:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bb6d1db12234ef654fe8a6adc22efabb3862435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:d0:58:f4:c4:7a:ac:2c:27:02:e7:54:ba:
81:7d:e0:65:79:5a:97:22:bd:48:99:b3:42:36:38:
3f:5d:06:9c:de:a5:0f:2e:bf:98:32:82:86:52:69:
fe:c9:94:bf:c2:1f:41:5d:01:55:7e:2e:8b:c2:f2:
13:69:ab:75:e0:c1:00:7b:c4:14:20:16:e0:38:24:
f5:e6:4d:58:cc:62:1a:f3:5a:7f:90:5a:2b:20:75:
aa:d3:e6:b2:f3:9c:6a:74:e9:2f:23:32:1d:b2:b6:
c0:2b:20:93:3e:fd:4c:d8:b7:96:9c:aa:4a:99:d7:
80:d9:83:dd:32:49:1a:ac:ec:cd:70:55:26:6f:b0:
6e:b0:1f:af:e8:ce:d7:05:32:b0:74:06:e2:29:ed:
76:d3:a1:5b:f4:cb:bb:a4:cd:93:7c:65:74:41:c5:
ea:c3:70:5e:7b:cd:8f:1f:3b:32:d0:52:68:8a:fa:
f3:d9:1d:1e:76:9f:6c:ca:9a:a4:28:9e:60:c8:c8:
1b:a1:b1:a7:f6:2e:4a:d5:1b:04:1f:f3:d5:5c:0e:
82:88:25:f7:53:5a:f3:50:a0:09:83:0b:cf:7c:3e:
42:9a:72:69:c5:0c:06:58:ac:10:d2:96:01:e4:e8:
bb:18:3d:8c:81:a1:8e:f6:ba:9d:0c:a7:02:47:27:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B6:D1:DB:12:23:4E:F6:54:FE:8A:6A:DC:22:EF:AB:B3:86:24:35
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/G7bR2xIjTvZU_opq3CLvq7OGJDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cd:32:14:01:f6:ec:ba:b3:64:5a:57:e2:9f:50:36:49:88:
c5:08:94:0e:2b:42:86:af:09:6a:ea:55:5a:6d:9e:d2:2c:17:
04:99:62:33:ae:cb:07:5d:d9:26:fc:54:39:ac:a0:da:6f:23:
9d:b3:bc:8d:eb:1f:53:9e:ec:3e:dc:42:06:d8:81:5b:06:b7:
96:df:e7:3a:35:f5:1a:27:12:bb:4e:cd:7f:cb:6a:c8:bc:1e:
55:74:4c:d2:1b:2f:2b:25:a7:ff:4f:5f:20:88:d9:95:94:db:
08:d9:d7:de:3f:db:da:32:c5:25:bd:a8:14:c9:89:cf:a2:36:
d5:5f:d3:08:24:9d:ed:3e:ea:18:6f:04:da:6b:3b:e8:b7:ac:
3b:83:25:60:e4:3f:04:92:f4:f4:c6:32:0e:25:95:dd:cb:f2:
77:3f:11:61:1e:2c:69:b2:79:c9:55:e2:fc:60:c8:db:2b:e3:
7b:63:34:19:71:b2:d1:f6:b0:f2:68:30:5c:f1:96:18:27:1c:
6e:5d:45:68:27:7b:c8:4c:25:d9:21:95:83:6b:34:7b:50:31:
20:60:04:c1:33:7b:91:ff:2c:20:b6:02:4c:db:c7:6e:c9:ec:
20:69:9f:15:f0:8d:ca:10:fc:d8:fb:8c:34:2f:87:64:78:5d:
84:ab:8f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org