Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/tEBv_xc9WTAoWZx2ZHY3LR_08X0.roa
File: tEBv_xc9WTAoWZx2ZHY3LR_08X0.roa (raw, json)
Hash identifier: 30gPp3aqvAhjzPXKehm+Vqvhuqra4JQDNjDsQ8z9H2k=
Subject key identifier: B4:40:6F:FF:17:3D:59:30:28:59:9C:76:64:76:37:2D:1F:F4:F1:7D
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 047F6420
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/tEBv_xc9WTAoWZx2ZHY3LR_08X0.roa
Signing time: Sat 01 Jan 2022 09:02:06 +0000
ROA not before: Sat 01 Jan 2022 09:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206495
IP address blocks: 185.186.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75457568 (0x47f6420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Jan 1 09:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4406fff173d593028599c766476372d1ff4f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:7a:df:a2:a5:ac:f0:82:43:43:de:0c:5e:
01:53:a3:48:ce:47:5b:02:79:b8:c8:d0:72:52:ca:
82:94:ac:a3:ee:73:92:a9:a6:60:58:5c:70:33:5a:
b5:ed:62:b2:9c:4f:4f:8c:2c:b6:fb:d7:36:c0:01:
1e:94:dc:ca:1e:8b:e9:a4:e0:11:a6:37:08:4a:38:
58:f3:84:02:38:a5:04:67:6d:87:8e:69:61:82:00:
4f:b2:8a:95:d9:fd:64:4b:f5:dc:1e:c9:8c:46:b4:
24:b4:7e:3c:a7:a9:6c:51:a5:a6:3f:1f:36:f9:cf:
ea:44:ef:5a:d6:27:41:0c:38:19:7f:b1:96:dd:a9:
59:53:5c:f4:84:ff:89:e4:69:f7:ef:93:23:f7:3d:
ba:0b:64:a7:ea:de:46:64:8e:f1:a8:3c:ec:3c:59:
85:e4:20:9c:14:e1:a4:b7:62:bd:f2:15:60:ff:a5:
88:15:a0:98:83:a5:2b:be:de:12:75:2b:88:96:2f:
ab:88:14:4d:6f:4d:74:d0:7d:bf:f9:2c:43:ed:31:
1f:a6:15:11:59:33:b1:f4:3b:9f:cf:b5:7b:c1:8c:
82:c4:e9:fe:32:97:e7:e6:24:d3:17:fe:20:bc:ad:
ba:ee:16:ee:d5:4b:36:ce:14:d3:8a:ad:07:68:27:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:40:6F:FF:17:3D:59:30:28:59:9C:76:64:76:37:2D:1F:F4:F1:7D
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/tEBv_xc9WTAoWZx2ZHY3LR_08X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.242.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7d:3a:c6:15:c0:bd:db:1b:64:74:78:53:f8:b7:f3:7b:38:
46:96:00:33:ea:cc:6e:be:89:0a:ef:52:b8:e9:ad:1b:1d:59:
a2:65:ab:8e:3b:9d:c7:22:23:a0:7b:ff:ac:e9:06:f2:e6:7a:
6c:bf:d2:55:09:55:e7:db:e9:38:ff:6e:7d:99:81:bf:cc:31:
a1:89:6d:25:da:57:1d:e1:5f:5d:fd:e0:96:cd:96:1a:a2:4d:
16:89:57:7f:23:1c:4b:9c:99:55:46:d1:bd:60:28:72:3b:72:
49:b5:7d:c1:f0:be:c0:0e:92:3d:e2:39:c3:a6:af:7b:19:05:
37:7c:47:77:9c:c6:bc:51:9c:43:06:32:19:f3:0f:23:57:c7:
d1:fb:42:27:4d:0e:91:14:d1:33:f7:79:76:6f:04:3c:af:bd:
a7:7e:4d:05:5a:5a:d4:6a:f6:92:2e:f3:60:fc:04:2b:e9:2a:
a1:e8:fe:57:0d:fe:64:0f:24:e4:fd:6f:ed:a1:1e:86:da:8a:
7e:0e:ba:63:c2:f6:bb:32:8f:56:b4:08:fc:8f:17:77:fe:f7:
6e:92:33:47:4a:d5:ed:81:a6:c2:98:cd:1e:4b:a4:31:22:93:
90:e9:bf:02:d9:19:fc:5c:ae:42:71:56:31:8c:49:7f:f7:2e:
ad:f3:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org