Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/pkAl31DO2npdqhOHOwRKBemClqo.roa
File: pkAl31DO2npdqhOHOwRKBemClqo.roa (raw, json)
Hash identifier: YgpbpWc+HddQa3quLSuuH1q6H1aZvNHHBfqqrRrpz5k=
Subject key identifier: A6:40:25:DF:50:CE:DA:7A:5D:AA:13:87:3B:04:4A:05:E9:82:96:AA
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 073D6A49
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/pkAl31DO2npdqhOHOwRKBemClqo.roa
Signing time: Mon 25 Apr 2022 05:20:49 +0000
ROA not before: Mon 25 Apr 2022 05:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 185.8.141.0/24 maxlen: 24
185.8.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121465417 (0x73d6a49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Apr 25 05:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a64025df50ceda7a5daa13873b044a05e98296aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:53:a2:6c:55:21:30:e6:f5:a2:26:67:d5:
84:fe:48:98:27:a0:62:c8:94:1f:f0:e9:c4:c6:e0:
62:08:9a:5e:a8:9b:c6:5b:2f:9c:d3:b6:75:17:a0:
d6:33:78:58:12:9a:b0:0d:e5:e8:27:59:d4:21:92:
30:51:7e:fa:e8:7c:e8:ff:6b:b9:96:b1:e6:46:78:
69:70:31:67:39:13:27:29:5e:40:34:d0:dd:34:b3:
ad:a0:c9:27:bc:81:f5:d1:42:82:82:aa:4a:8d:67:
92:b9:19:ad:bc:ff:1e:34:ed:e0:e5:51:1e:75:e9:
8c:a6:02:be:a1:0b:b5:5c:62:7f:9b:08:d2:4b:f6:
ce:e4:22:5d:17:b8:80:6f:1c:92:1e:a2:e1:0d:8f:
33:9c:ac:10:80:4a:b4:ac:2c:19:9f:78:77:b5:b5:
28:3a:41:5d:fb:b3:ba:ca:25:30:e4:c4:6e:c0:cb:
18:b8:d1:28:2d:59:c5:f9:ed:c7:6a:98:7c:1a:f7:
d7:58:03:df:a2:ba:30:75:c1:df:c0:d2:77:fe:4d:
8f:fe:c2:bf:4f:e6:e7:3d:32:69:a0:5c:7c:1b:7d:
bc:cd:44:95:1f:9a:35:8d:53:55:42:5f:d3:ca:33:
6a:27:c4:40:f7:82:b1:0a:84:e3:81:16:38:88:7b:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:40:25:DF:50:CE:DA:7A:5D:AA:13:87:3B:04:4A:05:E9:82:96:AA
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/pkAl31DO2npdqhOHOwRKBemClqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.141.0/24
185.8.143.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ee:77:2a:b0:6f:eb:d0:01:79:c4:75:26:5b:96:75:d7:79:
cd:92:b2:04:2b:d9:01:6c:20:52:6e:fa:73:e6:65:52:65:c2:
b7:76:9b:a2:98:2f:89:dc:ca:91:4f:c8:c8:de:b3:3a:e4:b7:
9f:1d:6e:60:4b:dc:4d:03:7e:9f:e4:d4:97:d5:d4:fb:04:57:
36:45:75:c1:dd:46:cd:84:28:e4:c7:ea:77:b4:9e:8a:4e:ad:
a7:bf:62:72:64:68:15:56:d9:6f:50:47:83:e1:1e:89:10:44:
b4:a8:9f:a6:a2:00:eb:38:9f:eb:a3:42:b6:c8:c2:49:0a:00:
cf:2c:f9:7f:cd:07:c1:84:0c:ea:90:88:bb:88:3e:c4:19:99:
dd:6a:ea:4c:2b:7d:01:e9:34:8d:0d:dc:c6:0c:27:f7:f2:8a:
af:24:c3:81:16:2f:49:f4:f8:4b:6e:6e:3f:27:34:d6:e7:30:
6f:20:ec:29:7e:9a:b3:5d:02:e8:d6:ad:03:0f:f8:c3:6f:5b:
29:a6:fc:31:02:54:d1:76:0b:9b:10:35:be:cc:cd:f8:7e:f9:
2b:0b:6c:db:8a:d8:63:14:3c:b2:72:23:ed:81:ec:b2:b4:d9:
9c:4a:77:5a:51:ff:28:de:de:5a:4d:0e:9e:c8:7e:ab:32:ca:
c3:f3:c8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:09 2024 by rpki-client on console-fra.rpki-client.org