Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/StZSQNNR3LIkhTw_ABe8Z5Eb_nU.roa
File: StZSQNNR3LIkhTw_ABe8Z5Eb_nU.roa (raw, json)
Hash identifier: dmN24u0tEaZXC+PMOUgvCdqkSxtQx2B3BB8Xo8rpUTA=
Subject key identifier: 4A:D6:52:40:D3:51:DC:B2:24:85:3C:3F:00:17:BC:67:91:1B:FE:75
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 02DC5BCB
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/StZSQNNR3LIkhTw_ABe8Z5Eb_nU.roa
Signing time: Sat 01 Jan 2022 04:59:12 +0000
ROA not before: Sat 01 Jan 2022 04:59:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212217
IP address blocks: 185.206.123.0/24 maxlen: 24
2a10:ca00:4::/48 maxlen: 48
2a10:ca00:2::/48 maxlen: 48
2a10:ca00:3::/48 maxlen: 48
2a10:ca00:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47995851 (0x2dc5bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 1 04:59:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ad65240d351dcb224853c3f0017bc67911bfe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:a4:e2:93:56:3d:2e:26:0b:71:f9:f0:9a:
47:30:16:4d:9d:ce:02:a6:d9:ec:63:e0:80:4f:43:
e9:a7:a9:9c:5a:e3:83:50:60:6f:88:d4:94:48:a7:
2f:ef:3a:68:17:81:16:96:f1:3f:13:55:36:a8:bb:
f7:25:41:2d:dd:f4:34:49:67:5b:52:e8:a3:01:f3:
70:08:0b:2d:59:9f:9f:95:89:e3:c0:59:5f:5f:e6:
59:51:a1:3f:41:9e:7b:12:12:b2:51:9b:30:8b:54:
88:16:75:7b:b8:e2:3d:87:cb:cc:fe:98:4e:8b:2e:
cc:14:29:ea:54:8b:85:a4:8d:14:f3:ab:31:04:96:
2f:e7:b9:05:ca:fe:63:a1:c3:aa:1c:cf:19:ff:97:
51:0b:38:98:24:41:21:c6:f2:b2:3b:76:82:c4:0a:
e9:d5:cf:96:b8:0c:9c:5e:12:1c:a4:d5:06:17:fa:
66:c4:bb:b3:df:9c:12:ce:8c:a9:55:a7:bf:c3:f2:
66:c3:60:8b:f4:62:eb:6e:f9:48:b5:d3:3e:fe:6e:
8a:82:33:d0:fa:0e:80:fe:86:43:fd:31:2b:42:07:
88:c4:df:12:79:d9:f0:61:64:eb:c5:f3:b4:a7:8b:
8e:02:f5:e2:9c:2e:09:f7:86:27:3d:28:c3:b9:85:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D6:52:40:D3:51:DC:B2:24:85:3C:3F:00:17:BC:67:91:1B:FE:75
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/StZSQNNR3LIkhTw_ABe8Z5Eb_nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:05:7c:dd:b3:68:24:5a:c2:12:d5:a1:56:ea:b4:43:8c:fc:
9a:e9:c6:d8:d4:8e:e7:3e:a3:21:49:25:6e:3e:4a:96:42:c4:
3a:58:4a:3d:67:16:1a:d4:f9:36:92:0e:d3:82:31:8c:f3:5c:
97:04:41:56:34:cb:36:01:91:39:cd:83:58:69:97:75:83:f1:
a4:9d:81:77:96:b7:61:81:ca:85:35:33:29:66:35:ef:e8:e5:
a9:0d:a9:1f:27:54:1f:7f:e0:b7:a6:11:96:16:67:fb:4c:76:
ac:f1:e8:e7:2b:31:36:4b:05:ac:7f:26:d9:e6:14:23:96:cc:
14:d6:ec:e9:b7:ee:91:cd:4b:aa:02:f6:8c:fb:c1:3e:84:b3:
09:41:4b:80:98:4c:01:d1:cb:72:66:5d:ae:83:a2:4d:c3:db:
14:4b:a6:ca:b1:6a:56:15:58:74:61:5f:82:c1:91:5a:a0:fc:
b1:87:c0:12:f7:97:65:79:52:f5:c0:c4:0b:fd:45:4f:6b:54:
6e:85:4f:42:2f:b6:57:c4:6b:21:40:66:68:c1:c0:d7:8d:70:
43:58:69:98:45:34:2f:ad:84:82:c5:0f:1e:6b:3a:a3:17:d8:
86:69:31:4c:f9:5d:70:33:99:b2:17:79:2c:d8:13:ae:ff:0b:
dc:d8:5d:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org