Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-BRwET1J2bWhi50qvwYlpY2gUpE.roa
File: 1-BRwET1J2bWhi50qvwYlpY2gUpE.roa (raw, json)
Hash identifier: 5OQyvlefsl/qiSq4PbksuNFV95QUMQ+HzVGozRHWjyQ=
Subject key identifier: F8:14:70:11:3D:49:D9:B5:A1:8B:9D:2A:BF:06:25:A5:8D:A0:52:91
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0184E207BC3FAE437D6547846BC8C3D5160E
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-BRwET1J2bWhi50qvwYlpY2gUpE.roa
Signing time: Mon 05 Dec 2022 11:24:28 +0000
ROA not before: Mon 05 Dec 2022 11:24:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207724
IP address blocks: 185.239.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:07:bc:3f:ae:43:7d:65:47:84:6b:c8:c3:d5:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 5 11:24:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f81470113d49d9b5a18b9d2abf0625a58da05291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:e2:a3:34:58:76:6a:a2:8c:90:b0:6e:cf:
78:42:71:33:7a:41:28:5f:f3:c2:00:cf:7a:01:63:
29:2b:97:27:b2:45:e5:ca:69:2d:17:d9:d3:35:8e:
ba:36:9c:48:3c:5c:37:c7:3d:87:fb:7e:b4:fd:32:
14:5d:cc:34:86:61:48:86:e0:f5:af:27:f8:6e:14:
90:a2:f7:93:43:db:38:1d:17:af:0b:4e:6a:66:54:
86:86:54:7b:cc:6c:4f:45:6e:1f:08:07:64:0e:18:
17:1d:e8:58:65:23:ae:65:3a:95:f3:aa:4f:dd:09:
52:82:30:f3:c5:70:9b:ed:5e:01:7f:9e:fa:96:21:
d6:a8:39:8a:3d:69:c6:54:a1:55:56:05:ef:71:89:
5f:b6:57:c9:94:14:2e:c4:6a:8d:08:28:14:37:90:
d3:83:c9:57:fa:f4:02:78:d3:66:8c:ed:6f:c5:2e:
8e:da:6e:3f:d9:aa:17:af:27:7e:00:3d:5c:3d:bf:
67:ce:5a:84:8f:e0:9f:88:f0:e0:0c:73:dd:0a:35:
41:02:ba:f8:2b:9c:82:c2:6b:1c:75:ec:a9:41:18:
73:e3:52:e8:a4:0e:b6:1a:67:9a:95:0c:69:9a:9f:
1e:4b:a7:4b:47:15:5d:2e:68:25:b8:d4:f1:2d:a6:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:70:11:3D:49:D9:B5:A1:8B:9D:2A:BF:06:25:A5:8D:A0:52:91
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-BRwET1J2bWhi50qvwYlpY2gUpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6e:54:3b:e0:8a:62:43:ef:1f:f8:b9:71:0b:36:a1:59:4c:
39:d5:58:c1:e8:71:79:e8:34:1e:67:51:4b:16:72:bb:e3:d3:
f2:1c:1b:b5:c0:03:4a:a5:f6:91:07:e3:3e:3b:26:ba:98:c0:
0a:02:e2:3b:48:21:6d:62:2a:3a:27:23:4b:06:88:c3:02:27:
9c:eb:97:0b:f1:85:8a:4d:f2:df:dd:30:4b:3d:98:0f:f7:0d:
9e:e5:b2:ad:cb:68:84:15:f5:3b:65:0d:06:2b:22:d0:16:76:
ec:52:c9:eb:ba:38:fb:19:de:f4:b2:33:ef:7e:07:ca:6c:30:
d8:c5:77:ad:21:7b:7f:65:fb:65:76:85:c6:86:9b:4a:57:24:
d7:ec:f4:a3:9f:97:b9:3d:e9:a2:c8:9f:4b:17:74:11:80:72:
1b:4c:ce:b1:58:cb:ee:c6:74:61:f1:39:43:7a:e2:f9:3e:89:
d9:3f:1f:58:11:2d:c5:a4:ba:87:46:cd:5d:90:5b:a6:9d:bc:
ee:a9:a3:ff:c4:17:01:18:73:b8:af:d6:06:7b:40:62:a1:84:
2a:d9:52:3f:51:6e:c8:0c:cb:1b:18:e1:c1:b2:40:17:9f:a6:
33:2e:86:61:72:a0:63:ea:e8:ea:54:de:67:4e:de:83:55:31:
8e:c6:5f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org