Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/9ICp09hiP5WEu4B6P3AhWMGzpSg.roa
File: 9ICp09hiP5WEu4B6P3AhWMGzpSg.roa (raw, json)
Hash identifier: EWzuwqMhKIN/DkzBTQjRqcdPv7W0s3ex+grl2pMR9N8=
Subject key identifier: F4:80:A9:D3:D8:62:3F:95:84:BB:80:7A:3F:70:21:58:C1:B3:A5:28
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018239DE417883C245AED6DB8B733BFDAA2E
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/9ICp09hiP5WEu4B6P3AhWMGzpSg.roa
Signing time: Tue 26 Jul 2022 09:37:23 +0000
ROA not before: Tue 26 Jul 2022 09:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.232.206.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:de:41:78:83:c2:45:ae:d6:db:8b:73:3b:fd:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jul 26 09:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f480a9d3d8623f9584bb807a3f702158c1b3a528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:b0:82:fa:08:52:fd:79:4c:c7:e5:71:bc:
3f:20:bd:44:37:68:07:7f:a4:ff:27:cf:6e:a6:ed:
6f:51:7b:6c:e5:4b:dd:9b:1a:cd:50:6e:a6:d5:da:
31:5d:e8:07:66:07:3e:81:ef:02:de:1c:db:93:df:
a2:63:7c:6d:18:7d:8e:d4:b7:61:ed:fe:14:4e:69:
45:18:d3:bf:17:dd:7c:a0:41:93:64:39:79:cf:ca:
2f:a6:63:b7:c9:f2:eb:b9:4a:eb:ce:da:2d:84:63:
dc:77:1c:0b:22:f7:00:d4:32:7b:ae:d5:e0:0b:57:
83:73:bf:a4:ca:a8:bf:24:2a:68:ae:33:3b:f4:e2:
d2:3e:73:06:42:fd:25:ac:ba:cc:1e:19:42:84:b1:
68:af:fc:0e:ae:1c:d8:09:5a:79:b2:51:7a:55:43:
0c:2d:7a:d4:63:98:22:3b:4b:54:d9:ac:b0:87:6f:
9a:7f:28:b5:d0:4c:4c:75:97:2e:de:a6:fe:6a:d7:
a2:3e:89:6d:f0:9f:e6:f5:0e:fe:10:88:89:9a:01:
4e:f3:18:f2:97:d0:c6:55:0b:6c:1a:67:e1:ee:fe:
0a:32:c2:f8:d7:52:54:44:68:b5:60:98:2f:98:8b:
a1:72:f9:bd:eb:bc:86:bc:89:68:de:6f:c0:a4:ec:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:80:A9:D3:D8:62:3F:95:84:BB:80:7A:3F:70:21:58:C1:B3:A5:28
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/9ICp09hiP5WEu4B6P3AhWMGzpSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
99:02:82:96:9e:bb:24:98:25:29:2d:58:78:c6:6b:e5:ca:ce:
28:52:82:29:28:c1:24:cc:90:a9:4f:2b:ed:9b:c7:63:0f:38:
df:a6:c1:7d:a8:df:5a:fe:3b:43:6f:10:18:36:24:4d:18:37:
5d:85:fd:6e:df:91:21:6d:01:31:e0:22:c7:9f:f9:cf:71:d2:
20:b1:a4:87:ed:f3:20:d9:59:94:a1:c5:a0:a5:56:fe:e7:02:
78:dc:60:87:bc:d7:19:c7:eb:53:31:bd:de:24:20:d5:8d:e8:
a3:0c:9c:3d:1c:e9:ca:8a:0f:3f:d6:b7:8a:1b:12:b5:62:ba:
43:2d:03:18:90:43:15:e6:27:70:53:0e:c8:e5:b7:cf:db:d9:
76:9e:ed:c2:06:2a:8d:c0:20:c7:ab:a1:00:cc:63:28:c3:36:
fe:98:3a:87:50:ce:eb:17:6c:d8:ef:1d:1c:5c:09:d3:33:31:
49:3d:09:c2:b7:b4:41:cd:58:3d:c7:3f:9c:4d:5b:e8:07:ee:
f7:0e:95:fb:85:30:54:20:3b:4a:a4:e8:99:80:98:d2:eb:e0:
2c:37:2f:b6:ff:79:0b:f6:67:fe:ae:92:56:8b:29:54:5e:ce:
6d:60:d6:f3:30:56:eb:5f:c5:f6:3f:8c:8b:9a:c8:db:c4:04:
3f:1b:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org