Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/1-rO0biLiiTCgOrfidqSVtHNcQOE.roa
File: 1-rO0biLiiTCgOrfidqSVtHNcQOE.roa (raw, json)
Hash identifier: /DvCOk3Lk1dlLlp3oQ+8JMW+PxGGrqdN1agm+DezrN4=
Subject key identifier: FA:B3:B4:6E:22:E2:89:30:A0:3A:B7:E2:76:A4:95:B4:73:5C:40:E1
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 09E6069A
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/1-rO0biLiiTCgOrfidqSVtHNcQOE.roa
Signing time: Sat 01 Jan 2022 15:55:52 +0000
ROA not before: Sat 01 Jan 2022 15:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34979
IP address blocks: 185.242.46.0/24 maxlen: 24
185.242.47.0/24 maxlen: 24
185.242.45.0/24 maxlen: 24
2a0c:bc80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166069914 (0x9e6069a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 1 15:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fab3b46e22e28930a03ab7e276a495b4735c40e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:f5:b2:af:6a:6c:06:88:c5:5b:5b:08:56:
75:ae:29:50:b9:5d:c0:2b:08:10:66:52:d8:33:d8:
2c:2c:cf:7a:58:41:c8:eb:63:a4:ec:97:07:51:c2:
3d:03:eb:2d:1b:ab:60:24:55:43:48:df:07:20:2b:
e3:03:99:d1:74:d0:79:b5:88:2c:9d:a3:19:b0:64:
c5:d8:13:b4:44:7e:90:16:bb:db:8d:56:31:ea:75:
85:64:7b:db:8d:60:ed:47:dc:f8:df:f4:16:c4:e4:
6d:b4:13:1c:14:ff:57:5f:6d:e6:9b:0d:28:af:5f:
97:2a:3a:d6:bb:25:17:cf:22:ff:42:bb:da:d4:30:
47:51:a7:cc:61:b6:8b:0e:d4:27:0e:6c:ef:22:5a:
0d:14:9e:3f:20:e5:fb:9a:c8:d5:5d:31:a9:2d:47:
b8:ab:cd:c3:0b:48:a1:6b:55:02:3f:86:39:50:5b:
a3:44:b4:3d:c7:2c:f2:eb:db:b3:7f:1d:f2:07:b4:
4d:f1:db:b1:08:a9:8f:94:b4:f8:eb:7f:02:47:f4:
6a:47:0e:cb:32:2f:68:36:80:c8:d1:4b:70:0e:81:
15:6f:09:54:d9:2e:f7:eb:ae:07:63:6e:d1:8b:51:
b0:f5:d5:8b:eb:4a:c4:64:af:17:84:2b:fa:67:b0:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:B4:6E:22:E2:89:30:A0:3A:B7:E2:76:A4:95:B4:73:5C:40:E1
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/1-rO0biLiiTCgOrfidqSVtHNcQOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.45.0-185.242.47.255
IPv6:
2a0c:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
1f:9e:4c:d4:4e:69:4f:d6:26:44:b5:3c:66:62:bd:8f:77:41:
a4:a4:44:35:d3:1a:ae:74:21:36:5a:9a:ba:e7:c0:30:e9:bf:
65:62:60:43:7c:29:81:d3:31:18:f1:de:ee:34:34:2c:1e:3a:
a9:e9:30:22:19:5c:32:65:91:ff:ec:3e:18:86:a5:0f:e4:0e:
4f:da:51:3a:02:77:e9:26:ac:1e:87:b9:a5:db:e2:37:65:5f:
07:81:2c:76:a8:41:21:96:74:fe:27:7e:ca:5a:ae:9f:06:d8:
4b:24:1c:68:a5:f3:42:f0:a8:f9:98:db:23:d4:8b:5a:fd:8f:
c3:db:15:a0:03:2d:87:c9:97:9f:cc:ad:4b:e3:0d:df:59:f0:
3c:9e:a7:e9:a7:5d:7f:62:38:fa:12:2b:f2:8f:bf:23:25:a5:
5d:cc:16:bd:5f:15:72:dc:b7:3f:d0:44:3f:99:a7:9d:d7:fc:
ca:85:c2:ab:d2:f7:ff:75:86:27:e5:16:c0:cd:db:e0:d6:be:
a4:e7:97:50:55:9a:a8:6e:27:6a:48:d8:48:cd:4a:d5:e4:2a:
e3:11:c9:17:25:a5:ce:71:4a:4f:3d:86:56:ed:04:52:91:ec:
93:4e:9d:54:5f:76:92:3e:a5:af:e2:a7:c2:d8:5a:b6:19:52:
ed:86:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org