Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/v6u6tKXa-B8o2eWYE0pO-wI7NSM.roa
File: v6u6tKXa-B8o2eWYE0pO-wI7NSM.roa (raw, json)
Hash identifier: 48KueRA93UCcjtyMfjkb2I7sRhMb3UR9+nEktlLF4HY=
Subject key identifier: BF:AB:BA:B4:A5:DA:F8:1F:28:D9:E5:98:13:4A:4E:FB:02:3B:35:23
Certificate issuer: /CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Certificate serial: 03C71A88
Authority key identifier: 81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/v6u6tKXa-B8o2eWYE0pO-wI7NSM.roa
Signing time: Sat 01 Jan 2022 05:00:54 +0000
ROA not before: Sat 01 Jan 2022 05:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.236.246.0/24 maxlen: 24
185.236.245.0/24 maxlen: 24
185.236.244.0/24 maxlen: 24
185.236.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63380104 (0x3c71a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Validity
Not Before: Jan 1 05:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfabbab4a5daf81f28d9e598134a4efb023b3523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:6e:c9:2e:5b:01:6e:f6:db:72:54:8c:7f:
f2:aa:14:1c:8a:9b:a3:cc:62:18:ec:0d:7d:35:71:
fb:7a:43:ed:5e:89:0b:3d:6d:99:d6:28:2b:1f:eb:
9c:a9:2d:24:d8:e1:bc:3b:52:d1:97:74:5a:87:ef:
1f:78:cd:ef:56:98:57:0e:2a:37:ab:48:05:bd:7e:
e7:e0:b0:c6:18:f4:d1:d7:43:6c:56:b3:29:19:3c:
b0:65:e5:68:b0:8e:54:f5:08:44:f4:7a:73:c2:89:
9a:4a:5b:75:84:3a:2b:83:3d:92:5c:15:22:62:0a:
a5:8a:c9:8b:d4:51:af:64:13:55:01:38:41:88:29:
eb:3d:c4:f6:3d:0a:d7:08:93:17:2b:84:6d:d3:3e:
b9:12:8b:de:a7:8b:f6:9e:65:fe:00:62:d3:b1:3c:
2a:f5:11:a6:e4:73:ee:5d:d6:4b:1c:e8:e4:35:1b:
95:28:1f:c0:41:2c:9e:92:7d:36:ef:53:49:94:a5:
e4:9f:ce:c1:6e:4d:16:09:95:58:4a:f4:76:f7:9f:
c0:b4:b8:a5:47:e5:e8:bc:c8:63:1f:ab:e5:72:6e:
ff:74:92:9d:4d:c9:1c:c0:0d:b0:70:51:e2:90:a0:
e7:c6:96:48:93:4c:9c:47:a5:6c:ee:97:fd:36:91:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:BA:B4:A5:DA:F8:1F:28:D9:E5:98:13:4A:4E:FB:02:3B:35:23
X509v3 Authority Key Identifier:
keyid:81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/v6u6tKXa-B8o2eWYE0pO-wI7NSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:77:82:09:7c:6a:a9:e5:95:d6:66:77:60:75:23:ee:f6:9f:
a8:99:af:c4:2a:37:1a:f6:e7:fb:3c:e4:d7:a6:9d:94:b5:3b:
af:a2:dc:e1:a0:ad:13:90:fa:6b:a7:56:46:3b:06:14:89:ee:
06:b4:0c:72:b4:47:ec:27:43:56:6e:df:dd:3e:d1:8b:8d:85:
e7:8e:77:26:39:d0:71:9f:58:66:70:ff:88:a8:63:88:98:2e:
ff:52:a4:4b:21:9a:25:8c:04:61:c9:52:48:f0:d9:8e:31:36:
0c:00:5f:34:69:65:56:48:7a:6b:25:4b:19:57:37:12:00:9e:
04:98:73:1b:c8:70:ad:c7:04:11:9a:e2:15:f8:71:33:38:82:
18:4c:c3:4b:e1:09:7f:77:3c:77:3d:98:df:5b:b5:4f:48:02:
21:30:23:54:db:b5:99:47:5f:38:ff:48:0f:25:55:eb:66:c0:
46:9c:80:ae:ed:2a:64:96:63:44:5b:ee:40:e8:b7:83:53:84:
a5:0c:b7:25:94:63:60:85:0f:a2:a2:c2:1e:9b:32:21:77:ee:
77:85:09:1b:21:fb:a1:b4:38:53:dc:d3:c9:f8:79:62:42:15:
c6:c6:24:6f:4d:e5:4f:b1:ec:54:cd:b2:f9:e5:d3:45:9e:c1:
38:ee:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:16 2024 by rpki-client on console-fra.rpki-client.org