Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/oaHdBhyKRxe1BcyTVrEw6CFXoZE.roa
File: oaHdBhyKRxe1BcyTVrEw6CFXoZE.roa (raw, json)
Hash identifier: GcbZumFxEWDInyuO6EFE4ALkbhzwhmSk+AVNV7pbjqs=
Subject key identifier: A1:A1:DD:06:1C:8A:47:17:B5:05:CC:93:56:B1:30:E8:21:57:A1:91
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 02C5CD
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/oaHdBhyKRxe1BcyTVrEw6CFXoZE.roa
Signing time: Mon 28 Feb 2022 17:21:53 +0000
ROA not before: Mon 28 Feb 2022 17:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.121.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181709 (0x2c5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Feb 28 17:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a1dd061c8a4717b505cc9356b130e82157a191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:bc:e2:e3:6b:fc:7e:3b:87:25:5d:c0:df:
0f:2a:68:9e:fa:0d:7b:e6:c5:a3:1d:f5:8d:6f:ea:
4f:d8:4b:e6:3a:35:f3:51:0c:8d:98:e6:cd:c2:35:
9f:83:df:f3:65:5f:15:b6:a3:32:fc:eb:a1:71:5a:
3c:aa:45:26:c2:3a:fb:a0:cd:27:69:c8:a4:f0:bc:
14:0f:dd:56:03:3b:42:1e:89:4f:03:d8:14:3c:d5:
ef:6f:12:f5:17:42:21:18:20:24:6c:ba:9b:5e:62:
85:bd:34:f6:13:90:06:f8:0a:77:ed:21:a6:0c:f8:
2e:b4:0a:be:a0:71:38:9a:b7:1b:54:99:cc:c6:d1:
36:72:0d:24:f8:49:ff:1b:96:58:f4:35:a4:e8:91:
86:03:14:ae:65:d0:22:e2:2a:df:d4:29:85:4b:05:
17:9c:26:a8:8b:bd:53:a0:c2:c3:e6:8f:28:66:f6:
2b:2c:0e:8f:38:64:77:67:72:ad:0c:83:4f:a1:76:
b0:21:fe:8f:d3:49:e5:bf:6a:76:91:09:7c:5b:ce:
0f:03:83:d9:e2:a5:c5:0b:5b:97:b8:5c:ff:3c:72:
2c:0f:d5:d0:9f:6a:5a:48:bc:a7:69:80:fd:b0:7f:
58:a3:57:87:48:7c:6a:c4:93:7e:2a:69:ae:00:89:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:DD:06:1C:8A:47:17:B5:05:CC:93:56:B1:30:E8:21:57:A1:91
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/oaHdBhyKRxe1BcyTVrEw6CFXoZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.121.0/24
185.221.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b9:3b:4f:db:65:d9:52:82:b1:15:dd:9c:f3:8e:33:27:16:
c3:05:ba:73:99:7f:6e:b8:47:bc:6b:3f:09:2a:3b:d1:75:21:
28:58:ae:f8:02:8c:73:60:5c:b3:0f:6d:30:11:a4:c4:1c:59:
b7:a7:ad:cf:70:51:86:a0:a2:c4:13:69:cf:d0:ba:83:43:d6:
38:c9:70:dc:3d:0d:5c:db:eb:0c:18:f2:e2:3f:86:5a:18:2a:
0b:82:08:9d:65:ef:36:b6:71:32:ae:f7:73:75:b4:f9:83:05:
e1:e7:88:8b:3c:d8:aa:bb:8c:77:0a:b9:86:ac:5e:f9:c9:94:
0c:91:78:41:06:89:4c:89:bc:56:bd:ad:a7:13:6d:74:40:60:
62:2c:c6:f9:bf:2e:2d:e8:bb:99:a2:76:2b:72:ba:af:37:11:
4b:c2:b1:6c:e8:d9:8a:78:15:b0:a3:85:26:b2:25:94:54:a5:
8e:e2:4e:b1:26:08:64:9d:d3:df:5f:6b:23:49:f2:2f:e5:11:
0a:fa:5c:8f:7f:3c:00:12:20:d4:53:a6:c8:24:70:d6:21:4e:
d5:30:62:dc:9c:ba:6a:25:78:07:6b:e9:e8:93:a8:57:48:f7:
5a:88:5d:04:d3:3b:88:59:42:d9:c3:14:d6:53:98:16:1f:5d:
f7:0c:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org