Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/kOOHpeRMB2Rb_SvBKJjZjH1s6NA.roa
File: kOOHpeRMB2Rb_SvBKJjZjH1s6NA.roa (raw, json)
Hash identifier: 7RNvxERhokdnzZbb9tQaTERMXnUO9UZap+0oAp56Oa0=
Subject key identifier: 90:E3:87:A5:E4:4C:07:64:5B:FD:2B:C1:28:98:D9:8C:7D:6C:E8:D0
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: CD41BF
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/kOOHpeRMB2Rb_SvBKJjZjH1s6NA.roa
Signing time: Thu 24 Mar 2022 09:36:16 +0000
ROA not before: Thu 24 Mar 2022 09:36:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 185.84.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13451711 (0xcd41bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Mar 24 09:36:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90e387a5e44c07645bfd2bc12898d98c7d6ce8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:f8:de:4e:fd:0b:b8:66:4c:7f:29:70:bd:
12:d6:fe:01:17:03:4c:65:c9:00:33:3c:d2:5f:73:
56:59:5b:d3:81:fb:bd:03:d7:da:3d:8e:0b:4f:7b:
f3:4f:b3:81:d0:87:3e:dd:ed:c8:e6:04:98:d0:9c:
8e:28:3e:bb:3c:03:19:ae:c9:03:02:b0:6a:35:ce:
a6:83:c7:ed:7f:29:3a:97:77:09:57:7c:e8:37:f4:
aa:35:b8:16:d3:f0:dc:bb:66:ae:93:ae:d6:46:91:
42:9c:da:71:d4:a5:3f:78:f7:ae:72:2f:1b:4f:61:
b7:99:2f:78:96:3b:66:5a:0b:fa:2b:63:7c:3d:d3:
d6:5b:bc:53:2c:f5:9d:89:8a:a6:18:8e:25:a0:42:
8f:cf:72:69:1d:6a:56:37:cd:9a:d8:52:77:92:f9:
72:cb:7c:c6:17:59:6b:0e:c7:8f:ea:95:81:73:4c:
fb:37:68:97:3b:5f:df:ca:40:24:f8:26:2d:63:9a:
90:83:80:b2:e1:ec:c8:73:fc:32:94:62:f1:46:db:
92:a3:71:a9:11:6c:34:29:89:61:0d:c5:c6:87:bd:
1c:80:06:86:ca:dc:30:db:b7:4f:cd:fc:04:a3:20:
5b:2d:fa:a4:92:12:43:1e:d1:7d:ac:b7:e6:96:de:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E3:87:A5:E4:4C:07:64:5B:FD:2B:C1:28:98:D9:8C:7D:6C:E8:D0
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/kOOHpeRMB2Rb_SvBKJjZjH1s6NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.124.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:1a:3e:67:f4:67:1d:86:fc:7f:81:99:00:67:07:aa:0d:
b2:30:34:05:1c:cb:5f:94:d2:3d:cd:fb:5c:ce:e0:dd:fe:83:
e5:96:e4:dc:eb:a4:ee:f3:27:66:6c:47:b2:ab:39:75:e1:3f:
21:09:ad:06:bc:57:12:d9:1c:1d:dc:65:f8:1c:da:ae:75:3a:
7f:b9:47:ae:fc:08:d4:32:b2:59:6c:f5:53:2f:ca:e0:ea:96:
15:c6:20:58:48:60:49:c7:cb:02:33:c8:06:da:37:10:6b:04:
37:d8:9f:ca:0b:63:4b:4b:5f:08:ec:9e:42:e7:ac:54:5d:b7:
7f:cc:0a:36:2f:7f:01:50:6b:49:ce:a3:97:65:3d:f9:56:ff:
8d:2c:16:64:42:ed:4a:64:3f:d1:9c:9e:9d:68:94:b8:e2:32:
26:2f:c2:aa:c8:66:c8:61:b9:02:37:ed:d9:cb:cd:12:63:84:
b6:aa:fb:70:99:5a:6f:8e:32:c6:bb:e0:d0:a0:96:2d:79:33:
78:87:4b:50:a1:2d:99:2a:76:81:c0:9a:f6:e8:78:4b:66:fa:
80:70:1c:04:2a:ab:de:cb:cf:19:33:68:8a:a4:9f:cb:14:70:
a7:69:59:3b:78:c0:40:3a:e8:4c:d2:c0:0b:7d:4b:ff:31:7c:
fa:c5:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:43 2024 by rpki-client on console-fra.rpki-client.org