Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/x9C0-Tpcs1VBm4M3E4BEYdAeZh8.roa
File: x9C0-Tpcs1VBm4M3E4BEYdAeZh8.roa (raw, json)
Hash identifier: VYEY2u5oWTvJSEb9Czlrv24NmQ5dAY1bc7DfW0Sq/x0=
Subject key identifier: C7:D0:B4:F9:3A:5C:B3:55:41:9B:83:37:13:80:44:61:D0:1E:66:1F
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0DC749D1
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/x9C0-Tpcs1VBm4M3E4BEYdAeZh8.roa
Signing time: Sat 01 Jan 2022 11:05:21 +0000
ROA not before: Sat 01 Jan 2022 11:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 185.220.149.0/24 maxlen: 24
2a0b:f841::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231164369 (0xdc749d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jan 1 11:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7d0b4f93a5cb355419b833713804461d01e661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:50:db:f4:5c:50:cf:0d:4b:1b:5d:b1:d1:
52:a3:c1:6a:15:de:b4:fc:0a:27:4b:ca:92:98:bb:
93:6e:37:a5:92:43:c2:13:6a:be:57:e0:10:b9:f4:
9e:3a:c9:3a:69:cc:43:27:b3:76:fe:13:85:cb:e7:
b5:32:50:d9:81:aa:4f:2a:91:1a:f0:a0:a1:1e:22:
8a:2c:c2:7f:58:18:32:1e:8f:2f:ce:9b:93:d5:5f:
44:a9:e6:45:70:fa:5b:69:85:a4:2b:c6:36:64:2e:
f8:72:ac:3f:62:6b:44:6b:e4:da:56:65:55:70:d9:
64:58:e6:d5:a1:c0:20:d7:f9:ee:c7:3a:1c:1c:7e:
d3:5b:1d:55:2e:26:2d:60:a8:bc:10:13:53:77:7d:
6a:3e:06:d4:98:1d:ad:9a:5a:46:56:42:b0:aa:bf:
7a:8c:c5:84:89:9f:58:ad:5d:6a:55:ec:9e:d4:ac:
e6:4b:72:b5:cf:1a:2e:b5:fb:f8:9e:5f:a1:50:46:
77:1d:ff:28:26:21:34:0c:7e:f7:42:91:69:79:f1:
e6:1e:47:c8:80:e3:c6:e6:af:9f:7e:00:4a:3f:26:
69:dd:ff:0c:18:b6:f1:71:88:c8:9b:95:cb:0e:b4:
9b:1b:64:13:de:7a:3d:ff:42:dd:49:28:7a:65:7c:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:B4:F9:3A:5C:B3:55:41:9B:83:37:13:80:44:61:D0:1E:66:1F
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/x9C0-Tpcs1VBm4M3E4BEYdAeZh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.149.0/24
IPv6:
2a0b:f841::/32
Signature Algorithm: sha256WithRSAEncryption
75:27:1e:ec:97:2c:fc:43:71:cb:6d:02:7d:d9:b1:70:b2:da:
9d:51:b6:8a:b2:7b:2e:e2:71:3d:ab:3d:5b:bc:d1:a0:32:66:
61:c7:3c:c5:04:e8:8e:b5:f4:cb:59:10:14:4f:07:4a:cc:03:
67:5b:77:9e:09:48:74:6a:a5:5f:5e:23:34:51:c7:bf:4f:99:
07:b8:f1:06:97:94:16:04:42:96:07:16:e9:cc:66:48:1a:ea:
ee:cc:1c:ca:84:c3:b5:fd:2f:31:e7:f5:84:ab:5b:eb:3c:f9:
00:9a:f5:b7:5d:1c:12:29:f5:9b:c5:5f:7c:59:2c:3b:65:06:
d7:4b:f3:6f:54:1d:e7:3a:26:70:ee:26:20:c7:c4:07:ea:31:
35:1b:04:fa:13:c0:6e:76:59:d0:07:d9:58:5f:49:b9:5b:2c:
1d:02:96:81:7e:4c:48:a3:d1:79:06:5b:a8:aa:4c:f2:ad:06:
56:dd:5c:53:c1:15:37:19:b6:91:21:cd:54:a5:50:1f:30:e2:
8f:44:62:8c:9b:a3:ac:27:fc:b8:9c:50:d9:4a:fc:7f:c8:62:
d2:0d:8a:70:cb:b3:86:b9:89:5c:bd:66:bc:b9:92:1c:41:6a:
c3:bb:e2:ad:f5:45:d3:b9:bf:d1:f1:20:e4:0a:1c:90:98:be:
d9:16:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:37 2024 by rpki-client on console-fra.rpki-client.org