Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/N6XeLw1IDgsFjWCGDEoIKdRYmGQ.roa
File: N6XeLw1IDgsFjWCGDEoIKdRYmGQ.roa (raw, json)
Hash identifier: wpRNYE2iETu3l55cIkEzzKkTMURvCIdDoxqS5jSlZho=
Subject key identifier: 37:A5:DE:2F:0D:48:0E:0B:05:8D:60:86:0C:4A:08:29:D4:58:98:64
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 01FD70C4
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/N6XeLw1IDgsFjWCGDEoIKdRYmGQ.roa
Signing time: Sat 01 Jan 2022 13:55:05 +0000
ROA not before: Sat 01 Jan 2022 13:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57834
IP address blocks: 185.197.124.0/24 maxlen: 24
185.197.125.0/24 maxlen: 24
185.197.126.0/24 maxlen: 24
185.197.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33386692 (0x1fd70c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Jan 1 13:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37a5de2f0d480e0b058d60860c4a0829d4589864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:9c:84:11:5c:38:43:4a:e0:4d:1f:fa:57:
af:cb:a3:5d:da:20:4f:76:62:92:1c:b1:c4:12:d4:
77:e5:0b:79:88:29:6a:88:b0:85:0f:6e:87:c5:a6:
c8:ad:15:99:d5:0f:21:7f:d7:c0:71:59:8d:6a:e6:
2e:7b:8b:c1:e5:3a:58:f5:c6:10:a5:33:7f:e9:c7:
d0:e6:00:9b:63:0b:90:d7:c5:26:96:0d:7b:22:69:
5d:c1:5d:0c:6c:c9:40:da:13:d7:e6:c7:df:d8:a7:
c4:0a:a2:a8:26:3c:41:2f:05:34:5a:e2:c4:3e:80:
4e:28:1f:8c:7f:43:fe:28:d8:33:90:cd:7e:ba:64:
7c:71:4c:8e:53:d4:c6:8a:1e:16:b2:93:b6:04:ba:
0d:b6:46:93:ef:4a:92:ea:ba:97:89:3b:08:11:03:
5b:ac:83:3f:e6:34:c5:ab:07:4a:e4:63:25:cd:c1:
d9:56:0f:ec:c1:bc:3e:ef:7f:43:ca:4d:d3:4f:b9:
c7:81:b6:dc:63:ff:b4:82:73:b9:76:b5:c9:76:32:
d4:8e:56:a1:1e:7f:23:97:07:19:24:38:5f:d8:fc:
d3:36:45:a9:c5:58:31:15:6d:4f:87:19:87:53:69:
f6:ec:c6:ff:46:41:e0:5d:55:61:c4:f0:01:1a:a2:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A5:DE:2F:0D:48:0E:0B:05:8D:60:86:0C:4A:08:29:D4:58:98:64
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/N6XeLw1IDgsFjWCGDEoIKdRYmGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.124.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c5:1d:44:08:89:be:03:6e:50:3f:8c:17:01:1b:c5:75:2f:
8a:60:b8:86:c1:61:c5:32:c3:98:76:96:2c:16:11:7f:a5:91:
5d:a5:d9:35:14:56:63:61:f0:28:39:35:ab:68:6f:61:13:42:
90:83:14:a7:75:e7:e0:5c:34:6b:45:b6:1e:f8:6a:63:90:1e:
54:cf:c0:28:87:3d:88:0c:5f:af:58:3c:8d:1e:ab:a1:bb:5f:
84:93:67:ec:75:e7:15:b7:7d:bd:2f:ef:c2:c1:3a:f0:6d:ce:
3a:f1:35:97:7d:83:4d:f5:c9:27:e0:14:a5:14:b6:33:da:6a:
6c:89:70:5e:53:e3:a1:7c:67:4e:8f:64:f5:99:1f:b7:a4:6d:
6a:70:eb:2d:a9:2e:88:68:45:3d:a8:03:4e:ea:05:25:25:f6:
53:b8:de:4b:c4:cf:6b:dd:28:80:90:fc:57:74:3c:f3:d0:e2:
de:19:d6:e8:0b:6d:32:86:de:63:10:4e:16:b6:3d:70:e2:8d:
f3:2a:a4:6d:07:b4:d9:6e:64:b4:fe:16:7f:30:d1:34:37:d1:
ef:06:3f:30:81:54:a5:4d:45:f9:88:6f:79:a8:01:b6:0f:a0:
d8:82:dd:01:79:c8:fd:3d:8d:c8:c6:e1:ac:2d:62:af:0c:75:
13:04:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org