Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/2dEOrTZn6IYnmkOmmmzP4yF1DdE.roa
File: 2dEOrTZn6IYnmkOmmmzP4yF1DdE.roa (raw, json)
Hash identifier: /ktTDzsguWLNx4od2+ajhqynmYsird7ozuzo/s7hcpc=
Subject key identifier: D9:D1:0E:AD:36:67:E8:86:27:9A:43:A6:9A:6C:CF:E3:21:75:0D:D1
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 09E5A168
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/2dEOrTZn6IYnmkOmmmzP4yF1DdE.roa
Signing time: Sat 01 Jan 2022 15:55:51 +0000
ROA not before: Sat 01 Jan 2022 15:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34611
IP address blocks: 185.242.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166044008 (0x9e5a168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 1 15:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9d10ead3667e886279a43a69a6ccfe321750dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:34:0c:8a:39:78:b1:06:2e:ab:28:73:4c:
6d:ab:f1:37:f6:1d:04:fa:28:9f:c3:a2:d6:78:be:
21:3a:8e:9d:5a:d0:f0:03:a0:20:1a:96:97:de:30:
aa:c1:82:ba:ce:38:fd:34:dc:85:84:b8:b2:0e:08:
34:09:d9:89:f3:7d:d9:0d:56:da:e7:48:f6:e5:d6:
70:5a:1e:83:0a:69:d2:15:89:60:72:30:5f:ca:ff:
77:04:84:e6:89:1e:d5:22:ad:29:b0:44:92:a3:43:
9b:2c:d2:95:85:f6:19:23:51:cf:be:04:b8:e6:56:
ea:bb:ce:4f:c3:45:f3:81:48:b2:e9:fa:99:48:e5:
74:c0:b5:31:c5:8a:fd:ee:88:bd:04:6d:d8:0b:20:
fc:db:8a:8c:ae:d2:1a:b5:60:63:30:29:cb:e7:79:
53:6e:ef:7d:3b:fd:8b:03:fd:95:ca:5a:04:75:8e:
74:13:26:91:14:8f:89:1d:f7:a2:6e:30:6b:0c:4f:
3e:f4:8b:ec:13:8b:25:36:f1:80:9a:f0:ef:66:c1:
6c:1c:8a:f8:76:2e:f7:cd:2e:a6:19:cf:90:f2:74:
60:99:df:3d:50:7f:65:4f:99:25:bf:96:15:ca:2c:
9f:30:6f:07:de:06:eb:52:25:da:40:0a:62:c5:18:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:0E:AD:36:67:E8:86:27:9A:43:A6:9A:6C:CF:E3:21:75:0D:D1
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/2dEOrTZn6IYnmkOmmmzP4yF1DdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.44.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2e:76:24:d2:70:c6:4c:33:55:d6:04:12:81:0f:a7:d6:1e:
b7:63:f3:40:3b:78:c4:e4:de:54:96:6d:2c:71:0b:6b:01:10:
ce:80:26:04:07:25:96:8c:60:bf:61:97:76:b5:de:8f:ea:2f:
8d:d1:32:70:a5:7c:4e:26:79:b5:b0:cb:1f:82:a3:bb:71:1c:
55:a2:d8:46:50:ea:7a:e3:60:13:23:20:52:00:be:1d:da:64:
25:8f:30:1d:52:21:fc:51:32:02:06:22:ae:3f:47:80:8b:9b:
3a:56:91:64:71:db:51:65:54:c9:bc:fa:29:8e:1c:fc:6a:31:
62:06:b7:1e:88:1b:01:b4:bd:08:6d:7e:74:ef:38:43:56:2a:
20:15:9c:07:40:b2:3c:57:f3:4f:09:d8:d5:3b:30:41:81:e8:
cb:f8:d8:84:9d:55:db:7c:3b:5f:28:9e:7a:b4:50:fc:ac:93:
1e:55:89:b7:f3:0a:6e:2a:28:b9:dc:81:fa:ea:6b:56:ad:2b:
6c:88:5f:2f:3e:4a:21:b4:6c:7c:c6:f2:65:56:f7:9d:81:87:
29:2c:a7:98:c9:f5:41:a5:f8:87:56:0c:07:9b:73:4f:68:0e:
ff:dc:0f:05:21:54:42:7d:26:25:ce:d4:60:a6:5f:21:9b:b5:
7e:a5:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org