Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/4FfNOlCxhD6U7Q68enb4XJec88o.roa
File: 4FfNOlCxhD6U7Q68enb4XJec88o.roa (raw, json)
Hash identifier: Fl9+yvxLHq/n3fkbn23hbnFNYFQ2n+iT/RDmS1lQaRk=
Subject key identifier: E0:57:CD:3A:50:B1:84:3E:94:ED:0E:BC:7A:76:F8:5C:97:9C:F3:CA
Certificate issuer: /CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Certificate serial: FBE21B
Authority key identifier: 3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/4FfNOlCxhD6U7Q68enb4XJec88o.roa
Signing time: Sat 01 Jan 2022 12:06:14 +0000
ROA not before: Sat 01 Jan 2022 12:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61006
IP address blocks: 185.146.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16507419 (0xfbe21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1d8225b27122794bc82e91b967bb25dbe4508e
Validity
Not Before: Jan 1 12:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e057cd3a50b1843e94ed0ebc7a76f85c979cf3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:7b:f9:a4:c5:c0:46:de:35:ca:2e:9d:3c:
39:27:b9:8a:aa:d4:08:b1:aa:f7:7a:a9:f2:76:b6:
00:b5:b2:e2:28:90:f5:8e:ac:dc:66:e1:47:75:54:
f4:af:40:8c:cb:22:b7:86:53:66:9b:13:e4:a5:f7:
95:21:4a:6f:66:a9:20:8a:bb:62:fa:85:2b:08:68:
52:a7:93:fd:5f:f6:e4:ec:95:40:0b:a5:3c:01:81:
71:f8:e6:46:0e:33:52:78:78:58:d1:ea:3f:65:48:
76:86:a5:9e:6c:ff:22:88:58:e2:93:e7:b4:bd:92:
8e:6c:7c:e4:7a:64:8b:83:01:91:55:95:1c:3a:7e:
90:b3:ce:04:0f:96:c5:2d:72:d5:06:25:c3:41:44:
2a:e0:11:c2:b4:c9:9e:e3:20:11:b7:ca:36:6b:20:
41:e4:e9:dc:d2:8c:58:52:41:f3:e2:f4:5a:d9:a8:
a2:0b:f3:3a:1e:21:cd:52:fb:d1:d3:41:c3:c7:a9:
49:93:22:12:88:a9:57:52:9b:e5:2c:d5:95:89:fa:
d8:d5:63:71:b7:25:5e:7e:fa:b3:ab:80:06:f9:10:
8c:cb:55:f6:a8:e0:7c:7e:59:3c:6d:7b:23:cb:b3:
a5:b2:0f:47:91:e2:40:86:1a:b6:23:4d:15:8b:ba:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:CD:3A:50:B1:84:3E:94:ED:0E:BC:7A:76:F8:5C:97:9C:F3:CA
X509v3 Authority Key Identifier:
keyid:3A:1D:82:25:B2:71:22:79:4B:C8:2E:91:B9:67:BB:25:DB:E4:50:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oh2CJbJxInlLyC6RuWe7JdvkUI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/4FfNOlCxhD6U7Q68enb4XJec88o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/59d4ee-4613-4649-ad2c-749e2bca73ce/1/Oh2CJbJxInlLyC6RuWe7JdvkUI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.100.0/22
Signature Algorithm: sha256WithRSAEncryption
43:59:88:37:38:3b:48:e8:a9:b3:3b:30:12:df:7f:d5:28:15:
17:09:71:35:36:30:8e:11:02:3c:16:d4:f0:94:9c:44:c6:aa:
0c:36:0d:a5:93:94:e2:7e:b4:a6:dc:d1:cd:c6:25:ac:fc:eb:
5c:47:c8:75:5c:a7:d6:23:e2:71:39:f4:91:39:f1:b7:71:a8:
b2:34:21:50:28:3e:ff:be:cb:ab:41:ca:67:ce:71:23:f1:9e:
fb:f1:91:35:dc:1a:f7:fe:ee:42:69:a1:ac:18:81:8a:0b:66:
b0:29:81:01:e2:e1:02:de:fe:fd:d0:58:92:c0:d4:71:b2:6d:
8c:f8:b2:63:10:91:e2:8b:8d:67:47:2e:27:c0:a4:a3:d5:1b:
b3:79:38:fd:21:ed:03:f5:9e:67:15:95:3d:34:b3:c6:00:25:
ad:80:b7:3f:c0:79:34:cd:04:0d:b6:52:76:7b:b4:99:cb:3c:
c5:c2:47:37:3e:8f:e2:b7:d1:1a:93:14:a5:60:88:94:d1:b7:
aa:fd:d6:c9:51:72:23:46:16:17:38:51:55:65:0d:01:e3:ac:
8a:83:50:b4:db:74:1d:54:e4:8e:d1:50:47:11:65:1c:87:0c:
d4:25:2c:08:0a:a6:2d:fa:dc:bb:c9:59:bc:e5:d8:cb:14:d8:
30:d7:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:16 2024 by rpki-client on console-ams.rpki-client.org