Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/CglmkQPraMgIU-jiqYWZBJrNbuY.roa
File: CglmkQPraMgIU-jiqYWZBJrNbuY.roa (raw, json)
Hash identifier: 8Df9IvbOPhvu5Y/98s2qGVS5oqzNwqEFBjx1+eocNE0=
Subject key identifier: 0A:09:66:91:03:EB:68:C8:08:53:E8:E2:A9:85:99:04:9A:CD:6E:E6
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 09F8DAE0
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/CglmkQPraMgIU-jiqYWZBJrNbuY.roa
Signing time: Sat 01 Jan 2022 15:57:22 +0000
ROA not before: Sat 01 Jan 2022 15:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.54.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167303904 (0x9f8dae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 15:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a09669103eb68c80853e8e2a98599049acd6ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:f4:5a:cb:ff:21:87:9c:ce:cb:3e:d7:df:
30:dd:d8:c5:57:c9:f7:7b:91:35:98:63:0b:52:15:
c9:2c:76:50:eb:d6:ff:ff:02:ac:84:26:17:c9:5d:
1f:ae:36:8c:d6:20:83:a0:73:5f:e5:c3:ea:96:76:
71:dd:88:2a:14:15:30:96:4f:6c:40:30:1b:77:88:
1a:2d:76:7d:c8:a8:7a:be:a6:f7:65:ea:15:d3:2f:
74:ef:d2:24:21:03:ee:9f:e8:6e:b1:8d:28:f4:10:
2b:10:69:09:13:06:7c:f1:dc:fb:03:52:29:39:ba:
3a:fa:64:be:1a:4a:dc:88:cc:48:af:7c:d3:a8:89:
c7:77:ed:80:81:65:fb:f9:41:ff:e0:14:3a:03:00:
63:4e:cf:2d:78:1f:61:d1:3c:0f:fd:9a:b8:9f:5a:
95:96:56:a5:d1:35:76:c0:45:0f:20:02:ea:22:4a:
c4:32:46:bd:ab:b8:22:46:f5:fd:7b:45:ed:a0:26:
6c:fb:a4:4f:d2:27:e7:f0:85:f2:ba:49:27:fb:33:
ff:fe:68:fe:f2:7b:a0:c1:2f:46:f9:54:06:e6:04:
57:9a:54:37:b2:21:58:00:62:94:1a:2e:71:bf:b9:
e0:93:b5:02:e1:41:58:c0:70:43:f4:59:5a:fa:b5:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:09:66:91:03:EB:68:C8:08:53:E8:E2:A9:85:99:04:9A:CD:6E:E6
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/CglmkQPraMgIU-jiqYWZBJrNbuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.229.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b5:bc:44:31:44:41:44:01:e2:c4:e4:5c:40:be:70:86:e1:
07:f3:66:07:c8:9b:a8:cd:0d:09:c6:62:2c:87:37:d2:b1:84:
6b:46:48:98:38:c1:f0:92:58:e7:d1:a9:b4:95:de:b7:eb:f3:
51:47:bb:57:d2:1b:32:8b:a6:16:49:30:ca:36:f3:dc:e1:d0:
c1:b0:6c:de:b0:83:4a:a2:cb:e9:33:f7:f4:57:f9:e4:11:e6:
ef:76:88:80:47:07:1e:3d:b8:f5:5e:04:82:b9:68:79:27:8b:
c4:83:a2:6a:23:be:fc:0c:ec:89:35:cf:2a:e4:4f:1e:32:da:
53:31:9d:fa:0a:55:a9:01:ec:1a:2a:f5:1d:75:15:c4:9a:31:
83:33:72:18:40:4e:48:74:c9:44:a6:ce:5c:99:1a:6c:a5:5c:
fd:66:13:b6:bf:3a:26:5a:57:e4:be:da:cd:8a:4d:ae:d5:16:
5a:2a:cb:7c:91:70:bc:90:75:9f:bb:3b:09:3d:69:90:91:c5:
21:7a:ed:aa:67:d1:93:4d:e6:bc:5b:69:66:4e:ce:bb:cc:2a:
91:b5:8f:e7:6e:a5:86:5b:54:d2:09:33:c5:b2:63:ef:3f:3d:
30:a1:20:6d:4c:79:98:93:b2:c7:41:9d:0a:ae:37:5c:12:de:
67:de:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org