Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/iv-lhTW_FqacdbNENJtii-tVH0A.roa
File: iv-lhTW_FqacdbNENJtii-tVH0A.roa (raw, json)
Hash identifier: 9IP+dQfuT6YRza48USAtLDbbuP0uuMKRBVDLJPVcKtw=
Subject key identifier: 8A:FF:A5:85:35:BF:16:A6:9C:75:B3:44:34:9B:62:8B:EB:55:1F:40
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0ABD9B3B
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/iv-lhTW_FqacdbNENJtii-tVH0A.roa
Signing time: Sat 05 Mar 2022 10:24:29 +0000
ROA not before: Sat 05 Mar 2022 10:24:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201713
IP address blocks: 185.233.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180198203 (0xabd9b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Mar 5 10:24:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8affa58535bf16a69c75b344349b628beb551f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:da:c2:67:46:7c:03:60:87:b6:3c:5d:f7:
f3:de:0d:0b:dd:f1:42:ca:0a:12:66:8a:56:b7:99:
45:7b:51:0f:49:89:86:80:a4:19:66:05:f6:ab:1d:
24:7a:02:34:ab:1b:4b:98:b7:43:a0:57:52:d8:53:
51:0e:09:4e:77:88:3c:1f:db:85:12:71:72:18:b6:
67:e7:ef:c5:b0:42:32:95:90:ca:10:f4:cf:84:dd:
f8:bf:5d:79:dc:75:fc:ed:d8:14:48:96:d0:59:36:
73:49:63:a2:58:86:70:a9:5f:28:64:a0:9a:fd:ae:
bd:ce:07:28:3f:6b:d3:84:ce:22:0c:42:92:9c:c6:
63:fe:fa:ce:94:94:eb:21:8a:45:ff:97:e4:56:c7:
31:2e:0e:f1:03:28:bc:97:f9:22:70:c7:8c:eb:03:
6f:06:d6:ce:75:f1:c1:bc:3e:69:ee:0a:ab:90:2d:
61:1d:38:26:74:be:26:c9:57:d8:3c:24:a9:50:77:
24:86:4d:90:93:ed:79:5e:2b:23:51:e2:bd:ee:2a:
be:fb:21:c4:d8:6a:e1:ee:df:69:36:99:cc:7b:14:
9b:53:df:e5:e5:d5:84:42:63:6c:8c:f9:98:ec:ae:
47:d8:d9:64:5f:bc:ed:f8:49:87:ee:e2:1d:80:ca:
74:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:A5:85:35:BF:16:A6:9C:75:B3:44:34:9B:62:8B:EB:55:1F:40
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/iv-lhTW_FqacdbNENJtii-tVH0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.244.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:db:b0:56:38:fb:ed:ab:d6:1d:d2:aa:e1:46:5f:3a:ea:04:
ed:df:5b:ca:bf:eb:32:a6:c0:54:e8:fb:ef:3b:a1:c2:e2:42:
eb:b4:a5:42:59:f9:e5:e5:55:2b:16:6b:c5:5e:07:d6:30:7f:
62:ba:90:73:4b:44:bd:da:84:69:c4:1e:33:c1:3c:d2:89:1e:
06:ef:82:18:cd:75:63:52:1c:99:9d:d2:f8:f5:95:86:3d:1b:
7f:77:71:ea:10:29:c5:b8:ef:a2:bc:6c:fa:09:14:aa:5e:51:
f4:f7:9d:57:d4:c9:22:da:65:c4:ba:7a:17:34:8c:77:67:ce:
1f:08:27:f7:6d:bb:01:6e:e5:bc:da:44:be:ad:41:39:af:d7:
a2:f2:7a:78:a3:26:2d:b7:a1:2e:c1:16:01:e0:26:5f:74:71:
d8:30:f0:91:41:11:21:50:4b:1d:3c:aa:df:ea:c6:b9:7c:c4:
b0:ad:be:e8:e9:5d:d6:21:40:ae:15:0c:68:66:61:bb:7f:de:
42:f1:d3:61:cc:a2:13:18:9e:8f:71:26:f0:60:b8:1c:8e:8b:
94:2d:89:2e:ec:9e:6a:35:72:2f:ae:bf:c4:3b:78:fc:47:80:
b3:9d:47:ff:d9:e8:66:d7:02:51:c3:82:17:37:38:17:20:37:
60:22:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org