Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/198-6N4GtOTip6fGWYddXWuxwtw.roa
File: 198-6N4GtOTip6fGWYddXWuxwtw.roa (raw, json)
Hash identifier: mFIrviELr5m6J1cOMxN5a8+ZdnYP7Kxtj6BnRvWU48Y=
Subject key identifier: D7:DF:3E:E8:DE:06:B4:E4:E2:A7:A7:C6:59:87:5D:5D:6B:B1:C2:DC
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 0A93D8
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/198-6N4GtOTip6fGWYddXWuxwtw.roa
Signing time: Thu 23 Jun 2022 19:56:18 +0000
ROA not before: Thu 23 Jun 2022 19:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204456
IP address blocks: 185.222.235.0/24 maxlen: 24
185.222.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693208 (0xa93d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jun 23 19:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7df3ee8de06b4e4e2a7a7c659875d5d6bb1c2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:47:9c:e5:a8:8c:0e:a3:00:9a:cc:d8:3c:
9e:07:b5:0f:a8:6f:b0:b5:ac:04:64:96:67:97:d1:
98:55:4d:2f:a4:a4:ce:e2:ed:57:ec:17:45:d3:d4:
03:20:75:b1:fc:92:3c:b4:63:e6:f9:d2:60:64:3e:
6b:b1:14:c8:63:c0:b2:5f:e5:d2:2f:f1:81:3a:63:
aa:4c:ef:ad:6b:8e:51:54:6a:54:4c:46:3e:19:21:
5b:a5:2c:65:49:f2:fa:b7:b9:fc:88:33:78:e6:a4:
b4:7e:4b:92:85:ba:97:4d:49:85:ec:44:75:9b:6a:
6a:95:3c:22:42:a2:d1:c6:c4:e8:37:ab:7a:01:6a:
1a:2e:2b:fa:65:7e:db:86:ad:1f:0f:1d:a6:cd:e5:
9f:b1:82:2c:28:9c:3b:de:c3:aa:a4:22:9b:fc:df:
41:00:94:40:e7:6c:49:d7:59:06:72:e9:70:66:7e:
63:9c:3b:98:bb:63:ac:90:50:b0:9f:03:b9:76:42:
f9:c0:93:dd:ba:72:75:9e:b1:b2:b4:12:0e:eb:29:
5b:16:6e:6a:95:51:45:b0:8c:cf:17:4a:4b:47:c8:
43:c4:bd:a5:14:a3:18:4c:64:65:c1:0d:01:36:76:
01:a2:a8:61:ca:24:cb:47:73:fb:88:7c:66:18:ec:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:3E:E8:DE:06:B4:E4:E2:A7:A7:C6:59:87:5D:5D:6B:B1:C2:DC
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/198-6N4GtOTip6fGWYddXWuxwtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.234.0/23
Signature Algorithm: sha256WithRSAEncryption
28:47:99:76:fc:dc:f8:0f:30:9a:fd:28:ce:d7:a3:cc:03:24:
24:f1:ee:5d:58:1b:63:ac:98:00:09:c6:cd:6c:86:0d:6e:fa:
14:99:89:66:f0:95:21:f7:8e:ec:22:cf:ee:3d:a2:7e:c9:64:
bf:6b:21:dd:fe:ba:d4:44:68:aa:d3:22:5d:5f:94:27:20:b4:
5f:eb:39:d4:c8:08:5a:a7:aa:29:02:f9:99:3a:42:91:ce:d7:
56:bc:d5:3f:00:ca:b5:db:04:42:a2:63:c0:60:1c:2f:0c:95:
df:4d:f0:a7:95:2a:b2:fc:7d:6f:63:16:9b:dc:91:44:2b:f6:
6b:45:4c:ea:98:6f:f0:a1:8c:27:a5:d0:c8:68:a0:92:56:bf:
bc:b5:7d:1d:73:be:66:eb:c0:02:9d:3b:c9:6d:d1:99:8a:c9:
8a:89:ac:a4:d2:9c:da:fd:a1:42:73:18:ee:61:d1:6a:b9:c0:
c5:02:e7:ce:11:53:97:12:b4:69:8f:6d:e9:86:99:ae:24:cb:
88:de:19:d5:26:b6:50:8d:db:65:99:9e:d1:02:b4:a4:08:a5:
6c:ab:a0:85:e3:17:88:c0:66:b3:66:98:17:8e:cd:b4:95:78:
4b:0d:9c:0e:43:08:bf:ad:df:de:5c:4a:a1:01:9d:72:67:7a:
8f:8b:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-ams.rpki-client.org