Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/G6b_Frhy4h6aStdHzlGDQmqNTS0.roa
File: G6b_Frhy4h6aStdHzlGDQmqNTS0.roa (raw, json)
Hash identifier: 04KjxyjxJTXNfXMqtdRLFJibWm7w/2FMLclONcEFT+k=
Subject key identifier: 1B:A6:FF:16:B8:72:E2:1E:9A:4A:D7:47:CE:51:83:42:6A:8D:4D:2D
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0AB84F28
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/G6b_Frhy4h6aStdHzlGDQmqNTS0.roa
Signing time: Sat 01 Jan 2022 08:05:49 +0000
ROA not before: Sat 01 Jan 2022 08:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212322
IP address blocks: 185.148.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179851048 (0xab84f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 08:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ba6ff16b872e21e9a4ad747ce5183426a8d4d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:57:3e:02:29:ef:a4:a8:64:f9:dc:32:37:
b9:74:3b:96:70:14:84:1f:ba:b0:39:20:c6:d8:f6:
90:dd:b6:53:ed:2f:f8:30:65:75:18:af:dd:5d:c1:
bf:a6:dc:97:ff:af:7b:3e:da:4e:9f:22:ce:f1:f8:
23:63:66:9f:42:ab:9f:4d:43:af:31:5b:86:e7:3e:
d3:57:3b:1a:54:6f:61:5a:8e:83:de:bf:de:e4:ad:
fc:09:e5:b8:f2:13:b7:f3:ee:36:eb:ab:35:d6:8b:
6f:b8:61:92:32:6c:35:d0:c3:fd:23:d5:37:29:a0:
c5:d1:36:fa:fa:a2:f9:47:bc:e2:dd:e7:c0:3a:8f:
f5:72:51:9a:17:ee:b5:8f:a1:a8:e3:39:93:df:df:
de:6f:a7:46:54:1a:70:af:a2:4b:74:22:6c:b7:f2:
74:a3:86:7b:81:b9:97:ad:93:c6:83:75:fd:c8:97:
af:03:f4:0b:a3:eb:d5:62:9c:c7:8f:c5:18:9a:4d:
f6:36:35:d6:01:d9:ba:14:8c:cd:2a:aa:be:1d:2f:
bb:3d:2f:88:e6:e7:62:91:f5:7c:75:9b:39:fb:d4:
a1:17:89:dd:27:a9:3b:59:1c:0f:fd:c7:40:e3:78:
c9:5f:78:4a:e0:6a:a1:75:a8:0f:0c:52:b5:ca:77:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A6:FF:16:B8:72:E2:1E:9A:4A:D7:47:CE:51:83:42:6A:8D:4D:2D
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/G6b_Frhy4h6aStdHzlGDQmqNTS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:74:56:05:ad:5b:5d:8d:77:95:70:83:88:47:43:7e:f6:a1:
5b:01:32:7b:c1:92:50:2e:c2:1e:07:a0:05:57:f6:c3:ed:ba:
a2:71:2d:75:7a:d6:b5:ab:22:6f:b2:88:4c:fc:b6:ca:88:c6:
21:ed:59:a3:91:93:a2:82:df:05:e3:98:ad:55:02:e5:b9:34:
0b:0e:ca:54:a9:18:77:4f:c2:a4:cb:df:89:e5:3b:45:50:7b:
57:12:e3:09:d1:a1:a9:a4:fa:09:14:9c:6f:6b:e6:16:28:69:
41:fc:ef:8a:35:fd:7f:ca:7b:53:76:a7:13:fb:bc:44:0a:42:
d7:13:24:80:e8:2e:d0:60:4c:82:ad:fa:68:a0:6b:61:0e:45:
eb:0b:99:3d:22:c7:33:bb:b4:3f:9a:1b:e3:db:0c:82:f8:75:
df:49:f7:f1:4b:8b:a8:d7:a7:f3:d0:c5:58:45:fa:6d:35:15:
50:8a:f8:81:b7:eb:1a:c4:e3:1e:15:6f:5f:2c:ba:ae:f6:db:
89:77:ed:39:61:1d:cb:dc:58:5b:0c:3d:ab:d7:6d:8a:38:ac:
46:7c:b8:dd:67:c1:1a:6c:c8:70:a7:88:64:e4:3b:89:96:3c:
7f:13:f6:f8:12:c4:0f:f8:a5:63:fe:52:d6:2b:7b:7e:fc:0f:
5e:b8:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org