Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/atN42cCvXbvxvOuFQJ1xCRIF6x4.roa
File: atN42cCvXbvxvOuFQJ1xCRIF6x4.roa (raw, json)
Hash identifier: NNLMrWiBJCGBITOyc4MjhwdILXlmQ7WPmBCNhsBPbxw=
Subject key identifier: 6A:D3:78:D9:C0:AF:5D:BB:F1:BC:EB:85:40:9D:71:09:12:05:EB:1E
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 1131C35E
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/atN42cCvXbvxvOuFQJ1xCRIF6x4.roa
Signing time: Mon 04 Jul 2022 11:19:25 +0000
ROA not before: Mon 04 Jul 2022 11:19:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209180
IP address blocks: 185.117.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288473950 (0x1131c35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Jul 4 11:19:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ad378d9c0af5dbbf1bceb85409d71091205eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:89:73:ab:c6:5d:79:7a:58:18:b3:5c:b1:
48:6e:1b:5c:ba:37:b6:6d:2a:47:99:d0:36:d3:97:
4c:d9:ce:9b:9c:e9:f0:c6:8e:f2:f3:be:9f:e7:b1:
38:c5:60:7b:c3:fc:a4:56:1d:7a:97:49:71:ca:49:
4a:be:12:9b:4e:20:e7:bf:51:4d:eb:31:85:5e:74:
76:1d:fc:91:60:0e:ee:84:c7:2f:c7:cb:41:6f:15:
38:fe:41:73:97:ea:81:33:ce:09:b7:e0:c4:14:bf:
78:c8:58:a7:bc:0c:81:90:f5:18:59:12:a5:4d:9f:
89:ee:f4:01:e5:14:40:63:bf:d4:a8:b0:a9:25:5b:
a2:8a:18:ae:fc:9b:d7:58:10:98:e3:09:3a:3c:22:
33:44:db:31:5e:89:14:25:52:1c:00:05:10:fe:ad:
3f:e9:15:26:85:b2:b9:a3:4d:4d:d7:b5:50:a5:3a:
99:7d:74:f6:15:b9:fc:0f:e4:ab:ad:69:a2:cd:8b:
c3:00:66:4c:90:af:ce:ba:fa:a6:03:61:5a:b2:df:
80:38:f8:a6:2f:87:10:6f:3b:22:f9:08:e1:f1:72:
9b:b8:b4:0c:b8:05:ea:66:ad:e3:97:22:09:de:e5:
ee:b6:88:34:d5:8b:95:94:b2:b9:43:c1:60:7d:22:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D3:78:D9:C0:AF:5D:BB:F1:BC:EB:85:40:9D:71:09:12:05:EB:1E
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/atN42cCvXbvxvOuFQJ1xCRIF6x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.132.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fa:09:af:c9:eb:b0:0c:06:a4:c6:56:91:da:65:63:be:5c:
87:f0:fc:d4:53:e1:16:98:32:38:cb:5b:4e:6a:38:47:27:16:
0c:ec:d6:d5:0b:7e:8c:30:32:16:8c:e6:d1:8e:fb:1e:4c:9b:
5b:1b:8c:56:98:74:36:87:41:a1:1c:a5:c7:9e:fa:d8:1b:f2:
da:ca:4e:f4:61:76:53:e1:65:51:5a:a6:f3:04:e8:5d:b2:bb:
36:d7:df:25:a1:b0:b2:c1:0f:0d:b9:31:4b:02:c4:9b:b1:54:
48:69:45:43:f2:72:42:24:dc:6a:16:b8:73:d1:52:07:6a:75:
d7:d6:26:56:5f:52:93:cd:1d:38:e7:50:3c:90:ae:b3:09:0c:
18:96:d0:99:5c:09:21:b1:1d:95:ba:f0:58:bf:b1:6a:34:fb:
5e:e2:76:8d:7f:bb:a4:34:fc:51:db:42:62:c0:a5:84:bf:a3:
b9:ea:7d:0e:6c:cc:6c:10:c3:dc:9b:e4:bc:f5:2c:2c:e2:ab:
50:ae:eb:c5:f6:38:f0:dc:0f:9c:3d:d9:06:40:7e:ed:cd:af:
a3:9c:51:79:0e:8f:41:d9:b0:46:16:43:77:bb:2f:a3:c8:17:
b6:fd:d3:b8:a2:e3:3c:e1:48:7c:31:bb:e2:fd:d2:77:ec:68:
00:e5:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:29 2024 by rpki-client on console-ams.rpki-client.org