Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/G6Rxdw6qmx4_FQVjyg5njgqwNFE.roa
File: G6Rxdw6qmx4_FQVjyg5njgqwNFE.roa (raw, json)
Hash identifier: QdM97pe6qmFkqo9QYq137ExE+QtD4Dn+iGkL2qP7r0A=
Subject key identifier: 1B:A4:71:77:0E:AA:9B:1E:3F:15:05:63:CA:0E:67:8E:0A:B0:34:51
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: EA4D
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/G6Rxdw6qmx4_FQVjyg5njgqwNFE.roa
Signing time: Thu 21 Apr 2022 16:18:55 +0000
ROA not before: Thu 21 Apr 2022 16:18:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211029
IP address blocks: 185.253.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59981 (0xea4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Apr 21 16:18:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ba471770eaa9b1e3f150563ca0e678e0ab03451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:53:e7:fb:c8:54:08:97:a5:a8:58:f0:dd:
7f:c0:9e:37:1a:8c:38:4d:ed:44:48:53:fb:ab:ff:
4c:4f:fd:6b:59:88:5c:37:0b:58:af:bf:47:0a:9b:
f6:3f:23:62:31:d6:17:a7:e4:71:05:71:77:37:7c:
59:25:31:4c:ed:ce:53:91:a7:ba:3f:e3:2a:e5:c7:
8a:35:4c:4c:eb:76:50:0f:72:74:d3:a0:15:d2:71:
e6:ac:59:bb:bc:b9:14:c9:98:38:73:ff:9f:07:6e:
a5:fd:22:ff:7a:df:b4:74:8f:a3:b8:bf:a8:97:ba:
3f:5c:16:0a:c4:7b:d2:c2:7f:aa:6c:99:cd:fb:0f:
8d:75:a6:29:e1:a7:e6:7a:05:cf:4a:50:9d:d4:ce:
7f:e7:b9:df:26:22:ce:fc:7f:30:31:99:d2:1a:6d:
98:6c:ca:fc:d3:2b:93:8f:9c:c8:ed:35:7b:45:14:
4a:3c:ca:bd:4e:c2:a5:b2:8d:5e:1a:78:af:f3:5c:
25:0e:8a:81:91:c9:22:da:bf:a0:2c:51:5a:6a:41:
90:68:a7:f9:46:2e:51:fc:c2:28:31:7a:81:55:27:
b2:56:34:5c:c0:fd:8f:19:7a:73:68:11:43:99:47:
18:e4:92:b0:bd:14:63:4a:fe:db:d0:e7:86:b1:19:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A4:71:77:0E:AA:9B:1E:3F:15:05:63:CA:0E:67:8E:0A:B0:34:51
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/G6Rxdw6qmx4_FQVjyg5njgqwNFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.245.0/24
Signature Algorithm: sha256WithRSAEncryption
90:93:38:6f:8e:a7:25:37:ab:5d:cd:f8:db:60:3d:dc:42:f1:
db:91:bb:16:09:4b:db:11:e4:49:36:cf:15:5a:1b:81:6e:e8:
30:93:05:a5:69:d7:0c:f2:79:13:e0:5b:71:7d:91:9b:4a:a1:
77:1c:0a:bb:52:5e:f7:f6:42:e4:b2:c8:ba:af:38:34:0b:6b:
75:b5:85:33:51:26:af:06:79:d5:88:0f:3c:97:5b:a0:b0:d2:
73:c2:ef:48:c6:29:c2:cd:bb:dd:f4:e7:ad:e5:3a:3b:41:f5:
4d:87:20:fc:2d:cc:99:fc:d5:27:0b:f5:47:bd:fc:cd:54:e4:
f9:e8:73:f8:fc:90:28:11:4c:c9:00:de:c7:23:ea:9a:af:5a:
49:46:23:5e:c2:f6:01:35:ce:3f:c0:38:9b:1b:bd:e7:e2:6c:
25:33:b0:cd:c0:1e:7d:65:8d:31:51:67:44:45:ce:8c:71:1f:
96:7c:7e:e8:b6:8a:f9:54:40:82:7c:44:ec:7e:ad:8c:19:88:
c2:da:88:9e:08:a3:b9:28:8f:24:f5:c3:58:99:64:8c:1c:63:
2f:01:ee:7f:0b:26:70:ba:30:fc:d8:ca:4d:48:bc:a7:0e:e6:
a8:6a:03:fd:0b:f3:c3:21:31:bf:9f:6f:ce:a9:2c:b4:d0:a6:
c9:8c:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:26 2024 by rpki-client on console-ams.rpki-client.org