Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/piToTZvKFSLBvGHZqobsU3Bq0sc.roa
File: piToTZvKFSLBvGHZqobsU3Bq0sc.roa (raw, json)
Hash identifier: mNA5WeHqb41gR0uUeOOxTakbxNKc0/meiVInSbf0dpQ=
Subject key identifier: A6:24:E8:4D:9B:CA:15:22:C1:BC:61:D9:AA:86:EC:53:70:6A:D2:C7
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 031CAB07
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/piToTZvKFSLBvGHZqobsU3Bq0sc.roa
Signing time: Sat 01 Jan 2022 08:56:32 +0000
ROA not before: Sat 01 Jan 2022 08:56:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44531
IP address blocks: 185.150.111.0/24 maxlen: 24
185.150.108.0/24 maxlen: 24
185.150.109.0/24 maxlen: 24
185.150.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52210439 (0x31cab07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jan 1 08:56:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a624e84d9bca1522c1bc61d9aa86ec53706ad2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:bb:02:fe:f6:37:da:0a:3b:35:59:34:22:
7d:3f:54:63:15:ae:5c:93:03:06:31:2e:cc:74:b7:
8d:9c:26:ab:38:ed:ad:82:96:4a:cf:cb:27:ce:a5:
72:ef:3f:2f:5a:c4:3e:cb:45:48:0f:41:c9:62:21:
98:61:7a:99:ed:36:16:78:db:0e:f4:a9:6c:74:a6:
e5:42:a0:02:b4:d8:2f:19:05:74:e2:f7:fe:7f:78:
ed:cd:59:48:a6:a0:7d:40:48:ac:73:34:58:8d:11:
65:1e:e9:19:21:ca:cd:85:c5:17:0c:ea:34:f7:5d:
38:36:32:92:77:91:09:82:04:5e:84:de:bf:73:a6:
60:dd:81:09:b4:f5:a4:79:f5:76:08:60:38:09:63:
ac:44:26:aa:cb:4a:95:bd:f1:d2:83:9c:96:a3:7e:
db:69:c2:58:5e:1e:01:97:24:99:40:32:58:bf:66:
bc:08:12:1f:5d:2b:75:03:ed:92:6e:73:52:c8:b3:
80:d6:9c:29:da:10:02:7c:6e:f7:03:de:c2:f3:cf:
1a:05:45:69:96:07:db:ce:1c:12:6b:2b:63:94:33:
ed:f8:69:e1:cb:dd:6b:e9:1d:71:7c:df:19:89:bc:
3e:16:dc:5e:50:1e:a5:3e:23:c1:ad:1c:b7:ee:a6:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:24:E8:4D:9B:CA:15:22:C1:BC:61:D9:AA:86:EC:53:70:6A:D2:C7
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/piToTZvKFSLBvGHZqobsU3Bq0sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.108.0/22
Signature Algorithm: sha256WithRSAEncryption
af:02:dc:92:88:09:5e:e4:64:a7:e5:c1:12:fe:0d:5a:94:e8:
14:95:5b:a8:f9:b8:d8:f4:e2:21:47:01:64:9c:00:2e:8a:4a:
83:9f:d8:9f:d4:5f:f8:02:a0:3b:f0:53:ee:0b:22:df:e2:ce:
9a:29:ce:fb:c5:4b:bb:26:84:f3:69:b8:90:f8:81:4b:ff:e2:
29:ef:dd:a8:21:72:68:34:1d:d2:b9:7d:d3:89:5b:d3:b6:4d:
3b:f6:f1:21:a2:97:7a:5c:54:de:80:e6:d6:2c:1d:f7:d4:dc:
b0:6e:e4:ea:31:10:46:8b:81:ef:12:bf:a8:ac:e6:3a:98:b0:
fe:8f:e8:2c:8a:57:8f:42:b8:f9:34:39:06:32:61:8e:42:90:
f4:f0:1c:f4:67:d8:df:70:07:64:14:f0:89:0e:ac:dd:03:e7:
9b:31:1f:08:80:f8:54:44:90:82:0d:a5:7a:50:ed:01:e3:b1:
f2:64:4d:8f:a4:fe:2f:03:e9:cf:ce:97:64:03:2d:d7:c1:2f:
3b:11:62:25:ea:e9:55:9a:70:21:ee:5a:db:1c:b7:21:f0:78:
52:99:e2:e5:db:71:59:94:c4:9f:fc:3b:df:53:45:f4:43:3e:
f2:ab:ed:99:46:ba:ea:54:67:de:7d:41:cc:f0:90:5d:36:d3:
ab:e1:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:01 2024 by rpki-client on console-fra.rpki-client.org