Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/cue3Z-NB2KtqU0KYjoOt1gW5kKk.roa
File: cue3Z-NB2KtqU0KYjoOt1gW5kKk.roa (raw, json)
Hash identifier: brioRAcsdM34jE5m2NbGZdSx5bvL9fmwyngfiYz+ekM=
Subject key identifier: 72:E7:B7:67:E3:41:D8:AB:6A:53:42:98:8E:83:AD:D6:05:B9:90:A9
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0922F28C
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/cue3Z-NB2KtqU0KYjoOt1gW5kKk.roa
Signing time: Sat 01 Jan 2022 11:54:31 +0000
ROA not before: Sat 01 Jan 2022 11:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203978
IP address blocks: 185.176.104.0/22 maxlen: 24
185.106.44.0/22 maxlen: 24
185.106.44.0/24 maxlen: 24
185.106.46.0/24 maxlen: 24
185.106.47.0/24 maxlen: 24
185.106.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153285260 (0x922f28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 11:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72e7b767e341d8ab6a5342988e83add605b990a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:54:c7:17:11:3f:d3:ec:f5:46:93:99:56:
a8:50:a5:b5:7d:e0:e5:88:e9:06:9d:ed:06:70:f5:
5c:e8:32:03:7f:b3:ba:03:cb:a1:68:bb:fa:49:9e:
90:e7:cc:ba:7f:ba:ce:4f:05:2d:13:8e:22:ed:09:
18:14:ec:f8:86:1a:8d:74:56:eb:b9:6b:10:e6:96:
6c:5c:b3:53:82:c5:96:a7:00:a3:44:c7:d5:cd:72:
3d:72:f5:29:b8:ac:8a:c4:9b:76:6a:79:39:49:10:
da:34:a2:9f:c5:27:38:11:9b:71:1f:48:50:05:cd:
6c:a9:eb:1d:e7:dd:a8:5e:17:e1:7d:45:6f:5f:b0:
fe:15:d6:fd:9f:e7:9c:62:42:da:4c:b9:65:2b:dc:
97:7b:b6:e2:47:3f:c9:4a:c9:2f:ea:06:7c:23:41:
02:7e:70:ae:fb:6b:3d:c0:fd:12:3e:24:28:e1:e1:
2b:cd:a8:ce:17:f1:8b:16:dd:ad:be:93:ae:4d:92:
6f:54:3d:7f:f0:a2:6b:a7:56:cf:25:4e:c8:2f:39:
8a:a5:f4:f7:33:e4:b8:f4:71:7c:a0:31:bc:2b:9d:
65:40:6e:88:6f:4e:d2:19:e4:71:24:07:ca:13:91:
54:53:48:20:ab:e1:13:df:d7:22:12:08:21:f3:eb:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E7:B7:67:E3:41:D8:AB:6A:53:42:98:8E:83:AD:D6:05:B9:90:A9
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/cue3Z-NB2KtqU0KYjoOt1gW5kKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.44.0/22
185.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:6f:fa:cd:9c:b5:7e:bd:a9:f7:b4:db:43:75:ad:7d:1e:43:
a8:bf:f4:ea:64:62:02:f9:f4:0b:c7:74:bb:46:08:43:c3:86:
2d:bb:d9:5f:02:d1:0e:44:22:7d:2e:e6:71:7a:0d:06:f6:9f:
39:9c:2a:08:b5:79:91:5b:fe:ee:9d:81:38:92:7e:dd:6e:92:
32:eb:79:a1:fb:43:ab:d4:e0:f3:57:9c:cc:2d:18:c0:8c:ad:
9b:39:b5:17:40:b0:4b:79:00:8d:e8:c3:f4:7a:79:f8:6c:e4:
39:8a:1d:a5:d5:17:89:2c:d8:25:7f:a0:98:6b:55:6c:1d:2c:
a7:cb:c6:2d:81:b9:8c:f4:da:81:db:23:b6:05:a3:de:54:51:
ef:e7:1f:02:41:7d:9e:2e:80:97:2f:71:bd:0a:2d:5a:f9:8c:
2b:3d:fd:49:90:ba:b4:03:71:bb:03:bf:0d:29:2d:02:55:6c:
ef:62:16:8e:d5:f4:64:53:7f:31:74:17:44:56:40:ba:e2:4c:
54:55:e5:df:5a:d5:93:d5:db:72:65:22:5b:a7:52:d8:d2:34:
a7:b0:69:f7:89:00:fa:90:a4:aa:95:76:f3:e7:d6:62:05:38:
b9:62:3b:df:63:9e:15:cb:a6:2a:d5:64:49:c2:71:48:b6:7f:
0a:0d:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org