Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/0tGGYRm577o3PA8vGrTr1ka4m8c.roa
File: 0tGGYRm577o3PA8vGrTr1ka4m8c.roa (raw, json)
Hash identifier: yV4IAs5rvPtd/Jw+k60LV6E7xv20l3ubxq+dbWkdW98=
Subject key identifier: D2:D1:86:61:19:B9:EF:BA:37:3C:0F:2F:1A:B4:EB:D6:46:B8:9B:C7
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 0A836B
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/0tGGYRm577o3PA8vGrTr1ka4m8c.roa
Signing time: Wed 26 Jan 2022 11:42:37 +0000
ROA not before: Wed 26 Jan 2022 11:42:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200425
IP address blocks: 185.107.196.0/24 maxlen: 24
185.107.196.0/23 maxlen: 23
2a06:45c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689003 (0xa836b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 26 11:42:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2d1866119b9efba373c0f2f1ab4ebd646b89bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:fd:fe:a2:50:2b:c4:8f:16:b1:94:52:0a:
28:da:a3:ad:5b:43:b1:b6:e5:cf:85:9d:82:e8:90:
3f:1d:77:69:a5:ca:55:96:5a:9e:53:c0:0f:89:be:
ac:f5:7d:de:b5:61:14:a6:47:48:2c:55:82:0d:3b:
f4:df:0d:d6:a3:e4:94:27:fe:81:b5:3b:fc:b8:c9:
df:39:90:50:28:54:44:49:37:a1:de:5e:0b:3b:bd:
c5:40:5e:79:4f:52:4a:79:be:19:af:f6:a9:68:1b:
ec:a2:3d:45:5d:29:b5:3f:d6:1d:6e:1a:bb:0a:bc:
9b:56:7d:69:1b:cb:7f:e0:36:14:e4:84:59:d3:ad:
39:f3:6e:7f:dd:fb:61:a4:db:24:9b:59:ef:97:7e:
d7:ad:33:85:dd:e6:a3:94:0f:0b:c3:5f:72:22:b2:
bd:f0:a2:b8:f7:62:83:e2:6e:33:1d:ab:99:e6:da:
70:f6:37:3a:d7:f8:e2:da:77:96:ee:8f:45:23:49:
19:46:50:d0:45:b2:4a:05:68:65:56:7e:5c:f0:9c:
34:6c:f0:5e:23:48:31:9f:0e:b8:ed:35:cd:4e:8b:
29:a8:42:09:24:97:6e:cc:a8:c5:63:2d:eb:f9:75:
51:7e:1b:a4:ee:db:96:3d:4b:ba:d2:ac:e8:a1:bf:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:86:61:19:B9:EF:BA:37:3C:0F:2F:1A:B4:EB:D6:46:B8:9B:C7
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/0tGGYRm577o3PA8vGrTr1ka4m8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.196.0/23
IPv6:
2a06:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
44:a4:f4:23:e5:e5:2a:f3:b5:87:d1:c4:b4:a1:b7:8e:bd:7b:
2a:3d:2b:69:41:52:df:47:c4:96:3c:6a:fc:08:1e:35:bb:d3:
93:da:a2:4f:17:bd:6b:f3:8c:f5:0e:c9:8f:ce:6e:0e:7d:5f:
ef:1b:77:4a:58:9c:e3:f9:e7:d9:b5:f6:b7:2a:40:dd:ad:6e:
20:44:f2:1d:7e:2a:71:56:91:e5:58:a3:84:81:55:f9:23:05:
3e:b1:1e:f7:0d:36:28:1d:71:91:a1:5e:af:45:50:7d:fb:aa:
3d:e7:f1:3c:a7:ce:ae:ad:a2:e7:8c:7b:2e:cc:85:4a:6b:65:
97:79:61:41:ae:73:b6:93:05:de:66:00:72:90:7f:6b:b9:1b:
ab:6b:37:fb:37:2d:72:ea:30:43:ff:71:58:69:62:01:79:46:
aa:dd:3c:77:12:39:ac:68:25:e4:76:51:d2:0f:80:de:a9:23:
a5:63:92:b1:80:2b:7c:68:5c:08:ec:8b:d1:65:36:96:eb:f4:
a9:a3:2a:b6:9d:2c:2b:a2:f1:11:65:d8:03:49:8e:a3:cd:6e:
a3:8c:81:b4:91:f6:f6:0d:f9:09:3d:52:f0:7a:d7:fd:be:f5:
d5:48:5f:4d:25:46:c1:2d:35:eb:31:3c:03:4e:99:ab:96:ca:
7c:e4:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:19 2024 by rpki-client on console-ams.rpki-client.org