Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/o_keFaBMIWgjX3GbIq2VnPZrHW4.roa
File: o_keFaBMIWgjX3GbIq2VnPZrHW4.roa (raw, json)
Hash identifier: h/gEj56OaH1TKrE1u6IkYT748eEZCqyOHFQkOFpE7gs=
Subject key identifier: A3:F9:1E:15:A0:4C:21:68:23:5F:71:9B:22:AD:95:9C:F6:6B:1D:6E
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0F7F3D81
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/o_keFaBMIWgjX3GbIq2VnPZrHW4.roa
Signing time: Sat 01 Jan 2022 06:04:40 +0000
ROA not before: Sat 01 Jan 2022 06:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 185.200.244.0/24 maxlen: 24
185.200.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259997057 (0xf7f3d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 1 06:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3f91e15a04c2168235f719b22ad959cf66b1d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:1f:be:2a:14:9e:8f:95:5d:b1:0b:15:9a:
b4:a3:f3:af:25:70:a3:f1:02:f4:cf:b2:8d:75:6c:
20:3b:bd:a8:74:8c:db:59:6f:8a:6c:15:a4:17:13:
73:3c:1b:7a:a0:c1:90:40:00:1e:1b:2d:cc:14:5b:
cd:83:1c:e5:52:91:6d:0b:b5:f1:92:fe:22:d3:03:
ad:88:9b:ee:75:f9:fa:eb:64:b6:6b:99:5a:f8:0e:
e4:7d:c5:c5:47:4b:21:b8:72:82:18:8b:78:54:84:
4f:c8:ec:aa:c9:ea:55:f5:4c:27:d0:7a:6f:52:09:
1e:3c:8a:17:34:95:5c:d3:5a:f6:9f:ac:c4:a7:1b:
3a:90:de:dd:b1:b3:96:3d:f2:9b:ff:76:6f:e7:28:
13:ae:58:86:42:c3:bb:80:c0:d4:ae:71:be:ba:70:
64:e6:cd:03:ce:ce:c4:d3:ae:7c:23:82:4f:a6:40:
e7:c5:73:1a:3a:f0:3c:13:52:f0:81:37:78:d6:26:
67:ce:36:99:ef:06:ce:79:0d:69:04:4d:f6:54:58:
5d:f8:81:a5:d8:b8:73:b5:c5:d9:7e:46:94:bc:af:
5f:29:af:38:d4:d9:68:17:6f:22:c2:f4:54:b8:f4:
f1:d3:6a:6d:25:13:6d:bd:0c:c6:dc:c0:c2:50:67:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:1E:15:A0:4C:21:68:23:5F:71:9B:22:AD:95:9C:F6:6B:1D:6E
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/o_keFaBMIWgjX3GbIq2VnPZrHW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
185.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
99:05:3f:3b:19:1f:ff:7a:f6:51:be:2d:63:b7:b8:e4:f6:ec:
4c:cf:fa:2f:11:40:2c:18:b4:c7:a2:4b:29:d1:b4:21:db:10:
dc:a6:14:93:f3:5a:64:92:98:84:3e:cb:94:05:b6:f0:5f:ed:
f7:0d:46:0a:c5:1a:fa:3a:0d:ab:41:9a:f2:72:2c:5b:91:84:
fd:11:3f:0c:12:68:8a:52:80:57:fb:3d:88:ee:45:c3:4c:ca:
91:3b:cb:f3:eb:e0:88:10:a4:fa:94:fd:c4:99:e6:02:3c:a0:
a6:1a:23:b2:5a:60:46:89:95:e5:38:87:26:41:16:37:40:5a:
d6:7c:f1:7b:01:bd:a7:0e:f1:18:2a:f0:2a:07:1f:c5:2b:3d:
b0:17:af:da:77:b3:be:b8:ff:b8:b3:cf:11:9f:86:33:a9:76:
ba:9d:d1:59:ca:b1:7b:bc:3b:e5:fc:0d:37:f4:8c:a6:c1:fd:
9d:df:41:7a:a8:3e:f0:4d:02:33:b1:25:42:11:2e:9b:e7:d3:
61:18:de:5c:bb:00:2f:8a:be:68:2d:06:63:67:1d:a9:e6:15:
d9:05:6e:eb:45:a8:74:6b:42:65:5d:87:31:6d:c8:3d:6c:2f:
81:d4:7e:e2:d5:6e:dd:d1:a0:fa:6b:f1:2a:7d:0a:80:f0:17:
fb:65:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org