Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/C4MJiKEgrA4M-0wpRCfGGXY_SfE.roa
File: C4MJiKEgrA4M-0wpRCfGGXY_SfE.roa (raw, json)
Hash identifier: PSwNX1GJWsO3h+U0blKJ6fqBWW8QHy+LYZdXI2mRV24=
Subject key identifier: 0B:83:09:88:A1:20:AC:0E:0C:FB:4C:29:44:27:C6:19:76:3F:49:F1
Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Certificate serial: 01831C9EAA557EB05AE120352AB3CD162F40
Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/C4MJiKEgrA4M-0wpRCfGGXY_SfE.roa
Signing time: Thu 08 Sep 2022 10:21:43 +0000
ROA not before: Thu 08 Sep 2022 10:21:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205787
IP address blocks: 185.206.183.0/24 maxlen: 24
185.206.180.0/24 maxlen: 24
185.206.181.0/24 maxlen: 24
185.206.182.0/24 maxlen: 24
2a0b:1640:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:9e:aa:55:7e:b0:5a:e1:20:35:2a:b3:cd:16:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1
Validity
Not Before: Sep 8 10:21:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b830988a120ac0e0cfb4c294427c619763f49f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:b6:94:b6:e9:1e:e7:23:38:c4:b9:19:be:
1a:00:6a:cb:7a:04:78:6c:ea:a7:95:7f:a7:86:3e:
c9:4e:4a:1f:01:68:a0:18:9b:1f:f4:a9:6c:bf:20:
25:3a:45:4a:7c:06:53:06:34:46:d6:c8:48:94:3d:
f0:45:2d:b0:6f:c1:1e:96:49:67:12:0e:19:d2:55:
4e:ae:b5:f9:ff:c3:1b:71:75:17:5a:1a:77:eb:d8:
d2:18:f0:be:02:0e:2a:c6:9e:eb:c9:28:3c:f2:5f:
a9:8f:f2:93:2c:06:5d:34:9a:1b:b5:ae:45:d9:c3:
6f:66:1c:7b:40:fb:17:57:e9:57:62:0d:e5:0a:15:
cc:19:24:39:fa:80:04:ec:d9:b3:70:b0:20:8b:f8:
f7:72:b8:a2:1e:38:35:8d:1b:ed:5c:fd:6c:20:2f:
c9:a8:d7:7f:86:59:cc:7e:5b:49:9f:3e:ca:9d:71:
6e:75:52:76:58:00:86:94:74:38:49:e5:4d:29:86:
cf:8f:c5:73:31:1d:9a:8d:b2:68:88:bd:dd:c5:5c:
cb:cb:a5:14:52:21:92:3d:92:ef:0f:eb:f2:76:9d:
6e:89:b4:d0:9b:b4:a6:4b:a0:14:12:97:2d:7f:41:
8e:48:27:1b:83:9d:86:e0:4e:75:9b:0f:30:cb:ab:
99:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:83:09:88:A1:20:AC:0E:0C:FB:4C:29:44:27:C6:19:76:3F:49:F1
X509v3 Authority Key Identifier:
keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/C4MJiKEgrA4M-0wpRCfGGXY_SfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.180.0/22
IPv6:
2a0b:1640:1::/48
Signature Algorithm: sha256WithRSAEncryption
40:9f:62:d6:77:e2:6f:31:1e:1d:6a:bf:be:62:35:19:22:de:
2b:d5:75:89:83:c3:40:42:74:c4:4d:7d:0e:13:68:8c:c4:1d:
db:d7:de:76:5c:9e:29:fd:47:14:fa:1f:1b:d1:ba:91:4c:17:
fb:11:aa:66:a2:5d:50:ea:2e:c5:5b:39:e4:a8:ec:95:3d:39:
e6:67:a4:24:f3:87:02:53:1d:81:a1:bf:50:ac:eb:73:8c:0a:
62:80:81:f1:ab:ef:7b:c0:3a:81:b4:f3:66:8c:78:c0:b9:ec:
49:51:fd:0a:3f:80:83:de:16:54:60:36:1b:d6:95:ba:d2:e3:
87:56:ff:b1:cc:38:31:28:98:34:e0:74:91:8d:4d:f6:a9:cb:
1f:de:39:62:d1:42:7e:54:f6:c6:48:15:b0:2a:5b:e5:bc:7f:
ca:cd:23:af:b9:ec:b1:a7:16:74:f6:66:c0:e6:9a:4d:c9:f3:
22:cc:7f:33:75:4c:b4:05:dd:4a:31:84:dd:b6:88:64:d5:94:
b9:f3:ea:93:5f:b5:d9:f6:25:ef:74:5e:6d:11:6e:4a:27:6b:
e3:0a:cd:1f:57:11:d4:88:91:53:31:30:f2:de:8a:06:30:e3:
c2:30:1c:20:a9:81:af:2b:3e:5a:52:25:67:98:43:05:d0:fb:
d4:9a:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:30 2024 by rpki-client on console-fra.rpki-client.org