Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/Tap6HuZVng-gW2z6yQ5YDnLRXGA.roa
File: Tap6HuZVng-gW2z6yQ5YDnLRXGA.roa (raw, json)
Hash identifier: IaeCPWvdC6ORy7m+uTxfNZUxtJh59mMmkkO/gxnYtIA=
Subject key identifier: 4D:AA:7A:1E:E6:55:9E:0F:A0:5B:6C:FA:C9:0E:58:0E:72:D1:5C:60
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0A246412
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/Tap6HuZVng-gW2z6yQ5YDnLRXGA.roa
Signing time: Sat 01 Jan 2022 11:56:14 +0000
ROA not before: Sat 01 Jan 2022 11:56:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201713
IP address blocks: 185.233.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170157074 (0xa246412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 11:56:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4daa7a1ee6559e0fa05b6cfac90e580e72d15c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:89:ba:fe:ea:d3:94:0a:0f:57:ad:a3:73:
83:f6:80:c4:95:2c:66:3a:ac:bd:f9:06:0b:ca:cf:
f2:bb:4e:99:4e:4f:2a:d5:3f:c5:76:b6:61:7d:b1:
0d:fc:8f:f4:77:20:94:41:c1:3e:1e:ba:ad:ad:96:
1a:b6:13:b5:c3:46:77:ea:3c:e3:c3:c9:2c:1e:25:
79:fe:0f:4f:43:5c:c6:4a:0b:ac:98:35:68:57:93:
01:46:4e:97:69:00:86:a5:53:11:e4:e7:a4:20:b2:
78:17:a3:35:15:5d:a4:ec:f6:61:ee:24:d2:15:13:
b2:00:9c:58:9f:52:b2:55:53:53:81:89:b7:47:08:
94:a6:60:7a:98:6b:1b:6d:c9:de:03:a5:ca:52:08:
96:1f:8d:46:aa:d3:b4:cc:38:2a:09:12:d6:3e:ce:
ba:be:29:83:80:47:14:f5:dd:d8:16:05:e9:7e:7b:
1b:af:32:c5:bb:a9:69:c9:0b:41:59:85:4d:42:4a:
18:f8:03:9a:6c:4f:2e:19:57:97:69:80:a1:06:32:
db:38:85:5e:b2:45:ae:be:5d:df:0e:a7:86:bc:ff:
87:d8:57:7f:f3:c8:47:ae:4c:b0:6a:0f:c0:2d:42:
20:20:d0:23:ae:be:68:90:ed:c1:36:b8:2b:4d:94:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:7A:1E:E6:55:9E:0F:A0:5B:6C:FA:C9:0E:58:0E:72:D1:5C:60
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/Tap6HuZVng-gW2z6yQ5YDnLRXGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a4:a9:58:ef:dc:01:ed:77:9c:1c:2b:9a:0f:aa:47:6c:92:
19:63:92:6d:5e:ad:30:d6:40:fc:66:4f:8d:d4:52:8b:6b:14:
77:33:d0:31:2b:38:ea:00:e9:ff:72:6d:e0:39:eb:7a:a4:f3:
c4:e7:d1:49:9f:28:63:6a:fd:36:27:a7:4c:1b:14:50:ce:09:
ec:45:c4:9c:51:28:ba:d5:80:24:7a:a8:b4:2f:59:0a:1b:c8:
fe:5b:dc:09:94:34:d6:b1:23:52:ab:a6:6c:00:3f:fb:96:95:
62:9d:f9:8c:2c:e7:d6:f9:34:25:c5:1c:5b:b2:a9:76:83:96:
45:c0:00:93:8d:e4:cd:ce:1c:b1:59:4a:64:c6:a2:73:a2:db:
c1:4a:3c:c5:e1:c0:00:59:6a:05:68:2a:a3:1e:5f:80:4e:21:
00:8e:41:16:2c:82:43:f3:f7:fb:57:b5:20:6c:62:6c:94:94:
4b:3d:a5:a2:ba:8a:b4:a3:f8:f4:70:06:87:e6:0f:da:9c:16:
0d:0c:9d:e6:7b:2a:26:cc:a5:19:57:55:2f:55:6f:e2:0e:43:
14:58:d8:34:73:d0:97:96:be:1d:24:63:0a:d4:71:0a:b2:72:
ac:c0:a0:05:32:a7:b1:02:5b:c8:26:f9:fd:b7:a7:7b:3c:dd:
09:1c:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:51 2024 by rpki-client on console-fra.rpki-client.org