Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/0hJX3LZwvylr2D6ZqVYlvjGxXNk.roa
File: 0hJX3LZwvylr2D6ZqVYlvjGxXNk.roa (raw, json)
Hash identifier: Poq775S/T91Q+DIfcor/Gu60J6nNCU4NJvZ3Sag5lIE=
Subject key identifier: D2:12:57:DC:B6:70:BF:29:6B:D8:3E:99:A9:56:25:BE:31:B1:5C:D9
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: E872C3
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/0hJX3LZwvylr2D6ZqVYlvjGxXNk.roa
Signing time: Sat 01 Jan 2022 12:01:07 +0000
ROA not before: Sat 01 Jan 2022 12:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48854
IP address blocks: 185.149.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15233731 (0xe872c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Jan 1 12:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d21257dcb670bf296bd83e99a95625be31b15cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:1b:ed:f5:62:82:19:0f:50:ea:2b:8d:eb:
e2:f6:65:53:b5:8b:92:2d:41:e3:0f:1d:d3:b2:13:
de:d7:2e:d1:21:c8:0e:61:4f:2b:73:e7:93:3f:7c:
9f:61:3c:44:45:d2:c1:84:87:4f:41:b9:98:55:43:
ed:09:e7:09:0a:60:4a:b6:e5:75:4c:42:ce:c9:d5:
22:fe:99:24:85:4f:72:ce:c6:67:50:b8:a1:0b:af:
14:06:c1:f3:7d:ad:5c:bc:bd:94:00:74:c8:79:c6:
94:f1:de:97:32:f8:f7:d3:4e:c5:f3:a4:f9:d4:cc:
49:e1:92:3a:fe:8e:95:c2:c9:01:f9:e2:4d:5d:d2:
04:e6:c5:52:ca:59:bb:16:2a:24:e5:3a:91:fe:97:
45:c3:22:f6:48:d3:4c:fe:51:5c:d8:dc:ee:c9:9e:
4f:bd:45:54:c2:55:18:71:e8:68:53:cb:d5:cd:fd:
7d:e4:03:4f:1f:d0:cb:f7:98:5e:73:84:4a:ed:b9:
fb:c6:c7:b2:27:6f:7b:f5:ed:8f:7f:34:2f:0f:b0:
5c:6e:3f:dd:ee:d1:1b:59:8a:ca:e1:92:e5:59:67:
da:8a:5c:47:e2:66:80:03:be:49:5a:2b:05:2b:e3:
3c:a6:66:72:35:81:33:2e:10:8c:7c:82:8f:d2:98:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:57:DC:B6:70:BF:29:6B:D8:3E:99:A9:56:25:BE:31:B1:5C:D9
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/0hJX3LZwvylr2D6ZqVYlvjGxXNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:fb:91:c5:49:74:1d:96:90:aa:bc:f9:bc:d6:94:cf:53:71:
d1:16:a6:10:5c:d9:90:67:a6:00:cb:5d:b6:02:32:ab:c1:f3:
6c:d8:69:7a:7b:e2:10:15:bb:ff:4d:79:7e:66:af:04:cb:f5:
d4:d5:ce:e7:c6:a5:4f:1c:02:3e:16:2f:07:ef:93:29:db:1b:
92:ec:76:9c:72:6c:c3:07:26:52:ce:f8:b4:5a:a3:5f:46:89:
73:3e:09:5c:a3:87:a4:14:83:b1:c8:2b:6d:e2:5a:c2:8a:13:
85:38:fb:59:7a:27:48:dc:ba:82:d7:ff:34:4e:18:c8:fa:45:
a2:2e:ba:d4:3d:16:f4:f1:ef:2a:55:81:7a:bb:76:3e:b5:2e:
7c:ff:b3:8f:ec:58:65:67:e4:b4:66:a4:f6:73:3b:1f:62:47:
26:1f:d9:50:f0:90:52:50:54:1e:cc:f6:b0:13:ff:b0:ff:c3:
02:01:fb:bb:70:c0:d0:a1:45:2a:80:62:e2:ed:bc:98:da:9a:
ff:6d:43:d9:17:49:7f:00:5b:5b:84:82:ae:47:47:14:cd:fe:
ff:06:dd:03:2c:d7:b4:83:78:ef:41:f1:f0:51:94:62:f5:bc:
ab:0c:eb:dc:18:07:c2:c7:56:9f:5c:2b:9d:15:31:7a:72:ab:
a2:3b:81:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:09 2024 by rpki-client on console-fra.rpki-client.org