Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/Iaq_n-7iVjBN0CqHFeOsdVVlc2E.roa
File: Iaq_n-7iVjBN0CqHFeOsdVVlc2E.roa (raw, json)
Hash identifier: N9c3H41EaMCluqUzy1czUfr1DAxE7vWCmiyNRsxClBI=
Subject key identifier: 21:AA:BF:9F:EE:E2:56:30:4D:D0:2A:87:15:E3:AC:75:55:65:73:61
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 020E2C7F
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/Iaq_n-7iVjBN0CqHFeOsdVVlc2E.roa
Signing time: Sat 01 Jan 2022 06:02:34 +0000
ROA not before: Sat 01 Jan 2022 06:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204798
IP address blocks: 185.206.124.0/24 maxlen: 24
185.206.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34483327 (0x20e2c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jan 1 06:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21aabf9feee256304dd02a8715e3ac7555657361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:3f:3a:e9:e3:7b:c9:07:6d:06:18:72:d5:
3d:e8:d0:b9:56:fc:96:86:14:2f:82:f7:7e:69:8b:
8c:1a:6b:dd:5a:b2:c0:d4:ce:52:7c:68:55:f9:11:
7d:ac:97:ed:36:86:47:3b:6d:c1:e8:bf:a0:ee:09:
f2:23:90:69:d7:24:29:fc:99:94:d5:ac:a5:20:37:
89:53:a5:a4:39:78:a0:e2:55:e2:a8:59:49:aa:a7:
9e:58:1f:5b:b8:f1:ac:9d:94:57:90:5a:ed:1d:77:
47:20:de:df:5d:9d:b3:a8:df:d9:13:30:b4:b9:9e:
f0:bf:56:db:81:19:ab:26:5d:db:d8:7d:13:da:25:
d2:68:65:9a:d0:45:a2:f4:3d:98:29:f2:89:d5:94:
c5:67:cb:7f:32:a2:4e:31:ce:3c:f7:87:e9:50:2d:
2b:35:46:e1:34:82:cf:eb:84:3e:ba:dd:37:00:c2:
02:34:69:bc:f9:6f:31:84:0d:17:57:cd:8d:d3:e0:
af:15:50:1a:3d:38:04:5c:7a:da:03:26:46:a7:73:
cb:9a:a9:10:5f:b4:42:b9:9f:c4:24:aa:e5:51:7e:
7e:26:33:33:d9:fc:56:3e:2a:d8:6e:80:71:bf:2f:
a3:4d:d1:08:bd:29:2f:0d:67:64:c6:48:98:62:80:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AA:BF:9F:EE:E2:56:30:4D:D0:2A:87:15:E3:AC:75:55:65:73:61
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/Iaq_n-7iVjBN0CqHFeOsdVVlc2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.124.0/24
185.206.126.0/24
Signature Algorithm: sha256WithRSAEncryption
69:93:6a:55:c4:6a:37:58:b4:6b:c3:77:21:df:bd:47:35:85:
62:25:ae:35:4c:0c:a5:d9:76:27:b6:6c:34:d9:ba:c5:0d:a4:
3a:55:de:60:df:86:a1:fa:da:79:ed:db:f7:dc:85:f7:cf:4b:
49:bb:f8:9b:6f:6f:39:c4:ae:27:ab:3b:ba:29:f9:45:66:2e:
6b:2b:80:1b:de:28:c8:3d:ce:7f:78:d8:3d:f8:46:37:d5:bf:
92:52:30:5f:26:88:1f:5b:2d:48:ff:4a:d4:56:8e:24:43:ed:
09:26:13:fd:fd:e8:eb:71:84:73:7d:82:c8:6a:38:a4:da:49:
50:c6:6e:de:af:28:3d:60:98:83:fd:34:79:20:1d:2e:a1:52:
78:f8:f7:19:23:62:00:f7:22:04:b3:3a:9e:4a:19:35:3e:88:
df:9a:e1:c0:5c:be:72:4a:15:59:45:27:a2:89:8a:d0:bf:4d:
9a:a8:ce:b2:fb:98:ff:cf:ff:e6:d0:a6:bd:ef:d6:41:de:4d:
58:c6:d8:d4:17:ec:85:6d:73:b1:77:5d:f4:c6:f7:23:52:76:
c3:42:de:49:9c:9e:93:f0:d8:55:c7:d0:2f:a2:fb:54:a1:ae:
1b:07:9a:20:a5:70:bb:5c:e4:9e:d1:d2:c0:a6:69:a0:9f:c1:
5d:51:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:16 2024 by rpki-client on console-fra.rpki-client.org