Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/4GYEH8nr-BSjimZXxFTmt4ji8xU.roa
File: 4GYEH8nr-BSjimZXxFTmt4ji8xU.roa (raw, json)
Hash identifier: XC3QD02tWjvLm/27pmxBc0d+JtlHNjoOhwblEdl+PfY=
Subject key identifier: E0:66:04:1F:C9:EB:F8:14:A3:8A:66:57:C4:54:E6:B7:88:E2:F3:15
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: A09A
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/4GYEH8nr-BSjimZXxFTmt4ji8xU.roa
Signing time: Thu 30 Jun 2022 15:04:02 +0000
ROA not before: Thu 30 Jun 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.212.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41114 (0xa09a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Jun 30 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e066041fc9ebf814a38a6657c454e6b788e2f315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:d4:cc:27:5b:e8:55:a7:f0:d5:d6:60:fd:
4d:51:2e:8a:bd:39:dd:79:d8:0d:a4:2e:fb:6d:d7:
c5:4b:11:bf:6a:2a:88:7b:a1:45:59:1c:c0:3d:e9:
2b:78:3e:8f:cc:1b:7f:0b:78:16:65:75:b6:79:a9:
70:ac:21:fb:8d:54:76:ae:6c:3e:2a:d2:a0:36:be:
7a:17:11:10:84:f0:a5:a3:df:8a:e8:e0:12:d8:61:
c3:b7:4e:56:1d:8e:61:58:c9:44:f9:b1:2d:1e:4e:
ac:db:e5:bd:a3:f0:2f:4e:83:13:7a:ed:e1:7d:08:
e2:6e:c9:8a:e7:a6:e1:1c:00:5e:38:a3:f5:79:ce:
85:ec:70:01:d8:79:a5:ea:75:83:8c:41:0e:04:c2:
f5:4f:4b:63:58:02:e1:cc:72:e2:ce:c0:69:04:0a:
ef:9d:d1:01:dd:22:2d:27:2d:ba:6a:03:4b:cf:ca:
3c:30:6e:70:1c:ca:45:5a:76:c7:66:b9:fa:96:10:
04:a9:b3:a4:25:cc:e3:a6:a4:06:58:52:4a:a2:1e:
f2:26:6b:0a:b2:b8:93:cc:e3:a0:0b:3e:8b:d4:ca:
8f:8e:7f:d5:f9:36:6c:9c:4e:d8:68:79:00:20:df:
44:54:0f:5d:6f:dd:fc:e8:9c:e7:5e:44:e4:89:5a:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:04:1F:C9:EB:F8:14:A3:8A:66:57:C4:54:E6:B7:88:E2:F3:15
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/4GYEH8nr-BSjimZXxFTmt4ji8xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4e:37:84:6a:4f:9e:5a:bc:fe:ea:fd:a0:50:b4:26:f1:bb:
7a:eb:c9:b8:1a:9f:01:08:3d:53:01:f2:10:bc:4a:9f:3d:e0:
96:d1:e7:34:c6:29:3a:d2:d8:84:ff:8a:9a:11:47:92:be:e3:
43:2d:8a:23:0a:c8:8a:d8:db:65:e7:8f:29:94:a4:6c:a5:51:
b7:fc:fc:a5:2c:56:c9:be:65:29:92:35:4b:36:ee:17:8a:18:
a9:54:fa:a1:cc:a7:b9:bf:08:6d:71:98:e3:3c:9b:ed:7e:19:
b0:68:03:bc:3b:a1:a6:2e:bb:24:7c:0c:ab:ba:6e:92:ed:df:
4f:de:3c:7f:61:34:1d:79:24:e2:ab:b9:42:66:7c:f7:e1:c9:
19:2c:fd:71:1a:07:20:90:77:e0:39:bd:2b:bc:e8:2f:1e:63:
29:21:8e:f6:a8:9b:23:99:f7:ed:92:f9:d2:64:f9:ae:3e:f7:
61:9b:60:fa:b2:68:8b:1e:52:bc:18:07:96:cb:5d:e1:67:0e:
b2:39:78:63:57:70:0d:4c:ca:f2:93:c2:0f:21:86:0c:dc:fb:
4c:51:ed:00:73:f9:19:0b:b4:06:63:a1:32:ce:7b:9c:ba:02:
36:ca:14:14:9a:f7:4b:df:09:dd:d3:0e:57:8d:f0:ff:9b:08:
57:bd:f8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:19 2024 by rpki-client on console-ams.rpki-client.org