Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/n6a2d7EdschnnxIP05250ESlbZw.roa
File: n6a2d7EdschnnxIP05250ESlbZw.roa (raw, json)
Hash identifier: woUrig6X4/QXLtctxW4hfoQUEuFtmv2RriE6s8KBV7s=
Subject key identifier: 9F:A6:B6:77:B1:1D:B1:C8:67:9F:12:0F:D3:9D:B9:D0:44:A5:6D:9C
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 0182B741528F2FA56CF4D5A9CDBD665A353E
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/n6a2d7EdschnnxIP05250ESlbZw.roa
Signing time: Fri 19 Aug 2022 17:58:07 +0000
ROA not before: Fri 19 Aug 2022 17:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205366
IP address blocks: 185.201.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b7:41:52:8f:2f:a5:6c:f4:d5:a9:cd:bd:66:5a:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Aug 19 17:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fa6b677b11db1c8679f120fd39db9d044a56d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:e5:da:b5:14:90:b5:e7:20:fe:4d:fd:ac:
7a:ee:5c:f0:ea:84:40:75:21:56:8e:55:31:60:04:
d2:f0:f0:0b:04:00:f3:5d:d4:aa:4a:17:e1:6a:3e:
0f:f2:ff:ae:8f:a1:b3:e8:65:05:f2:70:76:27:8a:
ca:e1:0d:fb:f4:88:da:32:a1:24:49:49:11:01:3c:
e0:6c:11:36:b7:36:81:bc:bc:b9:52:a8:5e:bc:c1:
b8:a8:9a:8e:ab:e2:53:94:be:d4:81:d3:67:1c:50:
ba:e6:11:aa:49:a3:ed:cb:ae:39:71:82:2a:57:99:
91:5c:f9:3d:ca:01:21:0e:a2:8e:79:90:73:9e:34:
72:a9:e9:a0:b1:b7:a7:bf:d9:24:ce:dc:6d:60:34:
18:05:ae:c7:a1:ca:f4:c7:b7:87:04:6f:ad:bb:b9:
c7:b1:4f:f8:7f:d4:97:da:a2:9b:31:4f:95:f5:ed:
88:c2:62:8d:be:63:b5:91:61:68:df:9e:68:8e:92:
ce:2f:87:b3:cc:ac:a3:89:19:27:75:b3:42:d6:51:
08:7b:b9:b9:9f:d2:66:a4:8c:99:f7:6c:b8:bf:ab:
ed:96:e8:fd:1d:58:63:45:7f:d6:f2:84:10:80:0c:
c2:da:91:4d:25:a5:b0:64:34:49:bb:65:cd:b5:1c:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:B6:77:B1:1D:B1:C8:67:9F:12:0F:D3:9D:B9:D0:44:A5:6D:9C
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/n6a2d7EdschnnxIP05250ESlbZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.108.0/23
Signature Algorithm: sha256WithRSAEncryption
94:40:9b:93:80:b3:3b:3d:8c:1e:5a:75:d6:39:60:bf:ce:9b:
81:56:2a:91:65:e6:60:12:34:35:ad:60:2c:c9:09:e0:02:85:
24:1e:b4:cb:77:bd:21:55:19:07:b8:1e:58:c9:01:07:6c:1e:
76:f7:89:62:51:a8:4c:48:2c:fc:de:7d:11:21:9e:96:74:7f:
b8:da:9f:8a:1e:a6:c0:b9:06:6c:35:0d:b6:68:c4:98:7f:46:
7f:2c:85:1f:da:43:a4:ef:15:e7:02:ad:5c:03:e7:ef:5f:45:
88:1c:9b:86:a9:05:a9:11:79:37:c5:7a:ea:52:c0:ef:65:f0:
c8:06:e1:16:0e:d5:15:92:f7:d4:5e:ff:e4:d7:70:d4:1c:75:
7b:cf:8e:23:67:1c:23:c3:2a:a4:3e:ce:e2:d2:88:9c:aa:97:
8d:1e:a7:6a:f5:17:be:a8:50:a2:ed:42:27:82:5d:33:0d:36:
24:c8:a0:ff:db:cd:6d:f8:41:30:6a:34:b6:81:4f:88:9e:95:
65:30:34:95:f2:30:80:41:34:ea:21:df:65:60:c8:8c:2a:73:
ef:8f:36:40:bf:96:47:61:70:a1:09:dc:9a:51:93:9a:89:fb:
af:6a:1a:74:9d:43:e8:5a:4c:34:35:b0:e6:9e:e7:eb:a2:7a:
a7:dd:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:18 2024 by rpki-client on console-ams.rpki-client.org