Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ob1QjncSSGDmG4cXcdO-We8WSPA.roa
File: ob1QjncSSGDmG4cXcdO-We8WSPA.roa (raw, json)
Hash identifier: BBHTApW8dG6KxbVaM5t1fj37j1jhiXYehIMJRG3pQ6k=
Subject key identifier: A1:BD:50:8E:77:12:48:60:E6:1B:87:17:71:D3:BE:59:EF:16:48:F0
Certificate issuer: /CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Certificate serial: 1330FCB5
Authority key identifier: 54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ob1QjncSSGDmG4cXcdO-We8WSPA.roa
Signing time: Sat 01 Jan 2022 01:53:56 +0000
ROA not before: Sat 01 Jan 2022 01:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208426
IP address blocks: 185.42.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321977525 (0x1330fcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54584a219f6f5066d848ed2ab964da8966d40a2a
Validity
Not Before: Jan 1 01:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1bd508e77124860e61b871771d3be59ef1648f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:b2:f1:33:8c:36:59:e0:88:5c:69:0e:57:
e5:20:2c:26:5f:f0:21:3c:7f:97:ee:a8:6b:b8:01:
d5:12:0f:31:2d:67:17:2c:30:76:40:e8:eb:a9:fb:
da:f1:1d:37:65:70:bf:8f:72:7a:58:5d:41:40:25:
70:3e:ac:07:ff:69:bd:a4:f4:41:b3:bc:c8:0d:d1:
db:37:8c:08:16:da:50:45:88:33:fa:cd:1a:0a:2e:
92:d9:c7:d7:70:b4:fc:b1:a3:f2:03:31:31:27:67:
2c:07:e1:b2:af:e2:19:c8:1c:90:99:00:d8:b3:82:
fb:ad:92:82:f2:dc:f3:fc:cf:a6:e0:b1:0a:e1:02:
34:01:10:e7:c4:43:fa:26:e4:b4:41:d1:a6:a0:e3:
57:ae:b9:6e:e4:a4:bf:98:18:c4:93:24:bc:12:75:
e1:7b:fe:1c:13:6b:42:cb:09:c5:7f:47:65:c1:4f:
26:9d:a3:3e:b7:ad:1a:cc:ee:76:b2:1b:49:f0:31:
8b:cf:a7:3a:3b:8c:e7:71:6e:f7:fd:9c:44:27:73:
48:dd:20:19:bf:01:44:60:15:1a:15:5c:96:55:3f:
2a:ff:97:f6:6c:68:2b:d1:05:a0:8d:7c:74:3f:0d:
6c:7e:b8:53:41:32:46:82:f3:81:7d:b0:c5:24:89:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:50:8E:77:12:48:60:E6:1B:87:17:71:D3:BE:59:EF:16:48:F0
X509v3 Authority Key Identifier:
keyid:54:58:4A:21:9F:6F:50:66:D8:48:ED:2A:B9:64:DA:89:66:D4:0A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFhKIZ9vUGbYSO0quWTaiWbUCio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/ob1QjncSSGDmG4cXcdO-We8WSPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dd3dd1-09b5-4aa2-aec0-9fb1ce4d720b/1/VFhKIZ9vUGbYSO0quWTaiWbUCio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1b:c7:e5:6a:38:cf:74:47:4b:d9:65:17:9c:e8:4f:da:b6:
86:23:a6:58:18:bd:42:0a:e4:86:4c:53:e0:d0:13:63:77:a8:
1d:3e:1f:d6:38:3c:9a:aa:ed:2e:84:5f:b7:2d:ee:41:d7:67:
cb:48:2b:b3:77:09:95:75:de:f8:91:07:4d:7a:15:1c:3e:2c:
39:d8:ce:78:a2:af:82:69:e9:08:aa:32:36:05:cd:42:fd:c7:
4d:da:a4:da:b2:de:46:0f:db:55:4d:6a:ac:c7:c5:57:2e:a3:
bd:a0:f0:e1:65:81:93:50:9d:02:88:a8:2f:3d:6f:62:4a:b7:
89:8f:ae:35:21:6a:af:fc:3b:1b:b4:28:48:ff:e6:0d:bb:61:
24:b2:87:97:ed:59:88:a2:44:49:52:1e:41:c5:fb:56:eb:4e:
24:88:26:31:45:65:44:b4:4f:e3:7d:c4:d5:88:3c:55:fb:47:
55:cc:97:d8:e9:be:d9:f3:09:97:67:2b:09:99:b8:7b:cd:d0:
fa:3f:15:cb:55:32:94:eb:5e:a7:f5:66:31:e7:e4:b0:c2:ea:
4f:d2:f6:9e:cb:2f:30:0d:fe:28:94:af:c1:2f:bc:b0:65:4f:
74:0b:1f:d8:5a:56:c2:dc:b3:9a:1b:df:5c:f3:24:c4:1d:fe:
cb:d0:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:46 2024 by rpki-client on console-ams.rpki-client.org