Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/ClHV6CTPHIXxjkaD6dI6O5DcQ5c.roa
File: ClHV6CTPHIXxjkaD6dI6O5DcQ5c.roa (raw, json)
Hash identifier: LORyuNPD+ny8clANcSrxr9sCEdYEMlGTlYkQFlY21fg=
Subject key identifier: 0A:51:D5:E8:24:CF:1C:85:F1:8E:46:83:E9:D2:3A:3B:90:DC:43:97
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 09E20F1B
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/ClHV6CTPHIXxjkaD6dI6O5DcQ5c.roa
Signing time: Sat 01 Jan 2022 13:01:03 +0000
ROA not before: Sat 01 Jan 2022 13:01:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205184
IP address blocks: 185.151.204.0/24 maxlen: 24
185.230.36.0/23 maxlen: 23
185.230.38.0/24 maxlen: 24
23.19.48.0/22 maxlen: 22
185.84.200.0/23 maxlen: 23
2a0b:14c0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165809947 (0x9e20f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jan 1 13:01:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a51d5e824cf1c85f18e4683e9d23a3b90dc4397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:f6:19:cb:6d:60:c4:ee:41:a5:d8:67:25:
ee:b2:c9:d0:4c:1d:d7:3b:84:a7:de:6b:16:35:92:
f3:4d:db:1e:2a:cb:0c:03:ac:73:1f:f9:3e:39:b1:
7b:3e:c9:29:42:83:08:48:84:91:77:35:dd:85:62:
00:62:84:4d:ad:b8:43:2b:36:f4:ad:d2:2a:b5:93:
6a:a6:d4:68:49:30:58:40:68:d0:39:49:7f:0f:f6:
be:b2:2e:a9:8d:ab:41:fc:b2:a0:73:b1:52:b0:13:
15:9c:ae:be:37:ea:b8:a2:c3:8a:b9:06:b5:f4:aa:
86:a5:42:44:95:ba:82:fa:f9:90:ad:30:11:24:8d:
03:a2:32:98:bd:2d:b4:47:9c:01:b1:a8:9a:35:88:
78:64:a5:bc:bc:f1:cb:f0:11:0c:13:5d:3f:5e:b4:
fe:2b:8e:fd:90:2c:95:75:fc:33:0f:ad:09:c5:65:
17:58:e3:de:b9:a1:f8:1f:64:a5:ac:62:f0:cc:2c:
94:37:be:56:93:96:70:29:4f:08:e5:28:44:03:77:
38:d6:a9:e2:f3:77:6b:51:6a:6d:3c:5a:57:e3:f5:
9d:60:18:7a:a5:14:fc:37:0c:23:8b:68:d8:f2:40:
8a:48:21:cc:1d:41:c6:5b:a5:74:78:bc:d2:70:fd:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:D5:E8:24:CF:1C:85:F1:8E:46:83:E9:D2:3A:3B:90:DC:43:97
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/ClHV6CTPHIXxjkaD6dI6O5DcQ5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.48.0/22
185.84.200.0/23
185.151.204.0/24
185.230.36.0-185.230.38.255
IPv6:
2a0b:14c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:cd:bb:61:c0:e5:9f:7f:bb:4d:29:9e:06:20:9c:70:1d:86:
71:2c:6a:50:37:b6:35:e6:d2:ee:5d:58:3e:8d:79:ea:e7:d1:
0c:1a:dc:01:e9:d1:83:97:ee:70:f9:64:c3:bf:d7:03:6c:f4:
7a:70:5f:f0:6a:97:cd:1c:d8:c0:01:c1:2b:f3:79:0a:68:24:
65:ff:77:bc:28:69:fd:dd:8e:e5:f1:2d:73:94:cc:0b:6d:b8:
f3:09:bc:d8:2f:95:2e:55:30:58:67:7a:4c:3c:08:2f:16:46:
b3:9e:29:10:22:fb:54:d2:3b:10:fb:e8:fb:a2:0d:9d:57:ee:
50:36:05:6a:64:83:87:a4:bb:50:e4:f3:ff:80:3f:cb:79:78:
7c:8a:81:f1:e2:e1:d0:43:b2:c3:2d:5d:f0:e7:ba:74:8a:8a:
85:7a:5a:f4:7a:d8:dc:0a:ae:5a:ef:75:2c:ce:a4:49:b3:9b:
05:a2:72:ac:8a:84:6b:f4:ae:ee:61:a2:12:74:ac:bf:53:77:
0e:f9:55:e3:34:46:b5:18:76:00:69:bc:53:9c:8d:f0:6f:ed:
25:bb:3f:1a:0a:45:e6:f9:4f:57:20:5d:df:2f:e7:14:02:16:
91:95:d7:5c:75:80:d3:4c:a6:d7:9c:c4:86:b6:f3:6a:da:44:
33:9a:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:33 2024 by rpki-client on console-fra.rpki-client.org