Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa
File: tHaRYtk6SvsWMEwxtLw7rdfdqog.roa (raw, json)
Hash identifier: rQiNlFYJyQcrELgq8arr8X1/ne/u7fEhB8doaHVLRYk=
Subject key identifier: B4:76:91:62:D9:3A:4A:FB:16:30:4C:31:B4:BC:3B:AD:D7:DD:AA:88
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 01850F9EF4281C794FDF50F51421EEED814B
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa
Signing time: Wed 14 Dec 2022 07:52:33 +0000
ROA not before: Wed 14 Dec 2022 07:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207724
IP address blocks: 185.239.0.0/24 maxlen: 24
5.159.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:9e:f4:28:1c:79:4f:df:50:f5:14:21:ee:ed:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 14 07:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4769162d93a4afb16304c31b4bc3badd7ddaa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:a6:e6:6c:0e:82:dd:10:0c:68:08:ee:93:
2c:83:04:17:ca:20:f4:79:5b:65:04:92:36:47:7a:
2c:98:26:b8:ae:15:36:8f:f5:ae:c8:45:58:a9:3d:
82:88:1a:95:70:80:50:5b:e0:8e:c0:6c:8e:8b:fd:
75:11:ab:e2:94:80:58:63:2c:ce:f9:7e:46:49:55:
d8:f8:c0:c1:d2:65:08:75:9f:a7:c9:36:9b:58:6f:
d0:7b:be:77:ec:af:4e:c1:a5:9a:8a:14:c1:de:fa:
03:1e:c4:09:a0:e0:45:1b:b7:c7:e9:03:00:8f:fe:
3d:9e:37:74:50:d0:0f:e9:28:a0:06:a6:45:b1:09:
4a:d5:68:f2:53:54:93:a9:d7:31:69:97:f7:05:e3:
12:64:26:6a:85:3b:33:c1:d6:d7:b8:4f:6c:37:fb:
a0:c0:90:ba:c4:62:82:0b:75:18:47:ea:33:e2:b1:
9f:23:fb:7b:98:34:27:ab:a7:cb:e4:f3:18:f5:14:
bd:c7:2c:3b:00:cf:71:d9:ec:a6:51:d6:12:94:39:
37:36:1b:4f:18:55:75:ad:8b:12:8d:f2:90:c6:59:
ac:8a:c8:c7:73:0b:b3:3f:20:a0:b9:f3:04:a6:81:
0b:8d:c1:85:76:28:9f:7b:54:5e:96:03:f9:e6:77:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:91:62:D9:3A:4A:FB:16:30:4C:31:B4:BC:3B:AD:D7:DD:AA:88
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/tHaRYtk6SvsWMEwxtLw7rdfdqog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:81:96:0d:fd:0d:18:c2:74:57:a6:28:95:d7:fb:8f:f5:92:
9a:49:b2:f9:5b:c1:ad:98:17:77:fc:52:45:51:69:68:42:18:
dc:44:2d:e1:ec:47:8d:b4:8c:43:5f:ef:f0:c4:de:a5:71:e3:
28:73:52:93:c0:c0:4a:4f:1d:8e:54:00:93:39:a4:53:25:be:
42:bd:e2:2e:35:ef:c0:4a:81:0a:29:db:2e:cb:9f:0a:9c:b7:
f3:07:00:97:e6:ff:2d:d1:66:62:61:04:5a:c3:ac:b5:32:c1:
b9:4d:72:89:e7:03:b7:50:df:be:5c:52:b9:a1:05:b3:ed:5f:
15:7c:8f:81:cd:dd:ec:8f:55:1f:93:fb:c4:5b:f6:03:6b:2b:
cc:76:10:6a:c6:fd:1f:84:e8:b0:c3:06:de:39:7e:5f:62:58:
ad:ba:90:ce:69:da:32:f6:f6:c6:c0:62:c0:9b:80:79:9e:b7:
e6:be:01:24:9e:c3:e9:c3:20:cc:16:48:48:17:41:b7:67:d3:
0c:08:84:69:2b:12:69:ca:67:65:7a:cd:d3:eb:ec:7a:bb:c1:
73:5c:96:8c:de:8c:9f:53:d6:a4:71:99:80:f2:ee:b4:ef:7b:
e2:3c:be:bf:4e:c7:d3:4c:bd:22:e0:3b:e3:f1:82:1a:f4:a8:
e3:b7:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org