Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/W60lVrcqPt4Y4_MnI6F2HPc_OA0.roa
File: W60lVrcqPt4Y4_MnI6F2HPc_OA0.roa (raw, json)
Hash identifier: eepXGvQVl6a/Q27cvR532yXNo/MVhCnYIbAtue3G1V8=
Subject key identifier: 5B:AD:25:56:B7:2A:3E:DE:18:E3:F3:27:23:A1:76:1C:F7:3F:38:0D
Certificate issuer: /CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Certificate serial: 02846589
Authority key identifier: E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/W60lVrcqPt4Y4_MnI6F2HPc_OA0.roa
Signing time: Sat 01 Jan 2022 11:03:30 +0000
ROA not before: Sat 01 Jan 2022 11:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60815
IP address blocks: 185.20.24.0/23 maxlen: 23
185.20.24.0/22 maxlen: 22
185.20.24.0/24 maxlen: 24
185.20.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42231177 (0x2846589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81074e32822c8bef3a7dcb31280825bd27545c9
Validity
Not Before: Jan 1 11:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bad2556b72a3ede18e3f32723a1761cf73f380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:eb:52:46:06:4a:4d:08:89:db:c3:f4:e0:
e2:ec:a0:32:75:14:27:e1:6d:2e:88:67:c6:68:7a:
e2:a0:ae:f5:03:6f:74:1b:4e:d9:0f:b2:92:56:4a:
aa:de:74:12:df:c4:ef:eb:6f:f3:4a:b6:ca:99:36:
3a:41:10:aa:45:f1:75:4a:6e:be:9f:c4:81:c3:34:
bf:8d:80:39:be:6b:37:c4:91:06:c5:4b:a4:a4:30:
ae:d3:49:3b:bb:ae:f0:31:d7:71:0b:22:e9:73:b0:
fd:e2:8c:d1:08:5c:46:6a:41:e2:15:0c:51:87:26:
8c:0c:8f:7e:f1:64:19:3b:69:e3:be:16:d7:28:16:
b9:31:32:bb:7b:3b:3c:eb:b0:9b:08:69:91:96:a6:
34:45:63:ea:4e:a3:c5:66:af:36:a7:ce:65:19:3f:
22:2b:e1:d2:50:55:d1:fc:82:54:5f:76:72:c6:9b:
66:8c:08:10:85:ba:cd:47:cc:2d:b5:82:9d:1a:dc:
bd:01:79:61:08:2d:8d:38:dd:8c:c6:06:91:8a:bc:
94:df:96:6c:2b:e2:87:c1:fe:1f:df:2c:5a:45:1a:
5b:f8:39:b7:83:e4:b5:d7:87:f2:41:76:f9:f6:d7:
d2:e2:79:99:ed:62:ab:aa:07:4f:ea:ba:95:35:98:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:25:56:B7:2A:3E:DE:18:E3:F3:27:23:A1:76:1C:F7:3F:38:0D
X509v3 Authority Key Identifier:
keyid:E8:10:74:E3:28:22:C8:BE:F3:A7:DC:B3:12:80:82:5B:D2:75:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BB04ygiyL7zp9yzEoCCW9J1Rck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/W60lVrcqPt4Y4_MnI6F2HPc_OA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/874d27-f2ac-4897-96f4-3e4e84f35cd0/1/6BB04ygiyL7zp9yzEoCCW9J1Rck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:2e:50:e1:39:80:dd:5d:6c:c6:2e:e3:04:61:cf:f2:0d:87:
ea:80:44:71:35:b6:17:ac:f9:aa:06:06:7a:b5:8e:f2:6b:4a:
60:0f:80:73:35:3a:a3:81:4e:b6:ac:f1:33:4c:7d:7e:99:19:
bb:e5:b1:03:1d:0f:55:f4:59:33:5c:e9:ee:f5:2b:4d:39:c9:
56:4a:aa:b1:81:85:42:3a:6b:62:76:82:a0:5e:c1:ca:ff:9f:
58:50:59:c8:54:cf:b2:b2:ea:4e:85:43:97:cb:37:5a:51:88:
9c:6e:5d:6f:b1:82:72:5f:b8:b6:e8:3c:c3:10:c2:24:11:de:
e3:7c:3f:25:cb:8c:5a:3c:dc:11:26:f2:74:e2:be:ab:75:8a:
4d:44:52:08:2d:a6:5f:d3:14:2e:c7:8a:07:be:7a:f0:5f:61:
15:a1:18:ca:27:3b:fd:93:c1:11:ca:8a:6e:b6:43:3d:20:c7:
57:ca:4c:92:cb:e2:6e:ec:75:55:66:66:a0:73:bc:a2:75:13:
48:50:99:20:82:5f:c2:13:9b:62:f9:fe:aa:7f:b3:5e:eb:bd:
31:99:11:9f:05:c1:87:21:eb:02:60:07:ff:38:e5:15:ec:1b:
78:3f:18:f5:8e:8c:18:4f:37:cb:6c:f2:07:9d:15:b2:50:88:
1d:5e:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org