Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-GIKBmb3oSGW6v4E1I7IY0xookE.roa
File: 1-GIKBmb3oSGW6v4E1I7IY0xookE.roa (raw, json)
Hash identifier: JCdVBQqjrwpqD8wYvyTmvulKrF3bYEy7lHf5n8YPb0c=
Subject key identifier: F8:62:0A:06:66:F7:A1:21:96:EA:FE:04:D4:8E:C8:63:4C:68:A2:41
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 09098E69
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-GIKBmb3oSGW6v4E1I7IY0xookE.roa
Signing time: Sat 01 Jan 2022 08:54:18 +0000
ROA not before: Sat 01 Jan 2022 08:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201341
IP address blocks: 185.122.143.0/24 maxlen: 24
185.122.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151621225 (0x9098e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 1 08:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8620a0666f7a12196eafe04d48ec8634c68a241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:3d:c6:6f:8e:ac:2a:f5:38:6b:2f:0a:6d:
53:57:4a:ad:54:a7:d7:e0:4e:ad:7c:91:18:36:6d:
ba:76:bf:d1:53:9e:40:b0:62:98:c0:bd:b0:7a:02:
74:21:bf:64:a5:bc:93:51:45:8d:d0:32:23:ad:dc:
0b:5f:08:e8:cd:49:0d:53:3b:fd:b6:3d:60:3f:6d:
54:92:38:68:df:7e:36:bb:a7:27:84:8e:dd:dd:08:
d0:4e:c4:bd:24:79:ed:78:06:d4:b6:78:93:b1:5a:
aa:16:3b:a6:05:15:76:f4:83:b2:d0:62:92:4f:c2:
36:4e:eb:11:d6:1d:bc:31:70:ce:ec:4f:99:dc:36:
36:d4:d4:43:0c:2f:51:7b:e4:b6:5b:cf:a6:58:cd:
89:13:0b:0d:cb:87:57:67:af:d1:ef:7f:87:6b:2e:
1c:f9:55:b3:55:0a:00:37:3e:cb:40:e0:45:4f:d4:
d4:5e:d4:39:eb:35:d9:cc:17:ab:ad:d1:bd:91:dc:
6a:bf:39:6c:c9:16:e8:0d:22:86:0b:82:cb:fb:dc:
7d:5d:85:32:cc:1f:d5:7e:70:b0:9b:7f:25:e5:9f:
5f:59:5a:9f:9e:33:5a:84:55:32:bd:dc:34:73:5d:
ba:a4:fd:98:94:36:ec:85:22:91:1a:4b:44:1f:b1:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:0A:06:66:F7:A1:21:96:EA:FE:04:D4:8E:C8:63:4C:68:A2:41
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/1-GIKBmb3oSGW6v4E1I7IY0xookE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.141.0/24
185.122.143.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3f:87:b8:46:52:d6:f8:bf:8c:50:36:bf:dd:46:34:26:d1:
ba:e5:bb:7f:3c:47:79:f6:76:b1:b7:fd:01:44:1f:ff:10:fb:
e2:f7:ab:5a:90:9f:aa:8e:5c:82:4d:e4:45:44:06:98:05:77:
e6:6f:d8:2f:00:c4:d4:7c:3a:c1:45:2a:70:17:0b:b9:8d:68:
bb:31:dd:62:f4:f7:71:6f:bc:5b:77:10:3b:54:19:bf:a7:4e:
a0:82:e9:3a:c2:cd:71:21:35:bc:b7:49:fc:01:5c:79:bf:f2:
6b:b2:bd:5b:33:db:21:98:8b:fd:74:0d:e2:c0:4b:42:8d:44:
40:c0:99:89:1f:3e:b8:16:40:26:46:88:63:bd:9d:0a:19:f4:
b3:91:fa:fe:9a:74:4b:1c:c2:10:09:37:85:d4:14:c6:3c:f0:
06:0a:f3:9d:a4:12:8e:c2:71:42:b8:b6:e5:2f:0a:8c:ca:d0:
76:b2:11:ec:b2:7f:e5:5e:f1:fe:09:ed:99:6e:1e:16:00:2f:
9a:3d:e6:ec:02:85:29:ee:cd:b9:ab:23:04:36:e0:63:7c:f4:
01:39:ae:34:b5:20:16:c7:4c:33:a5:07:aa:23:58:f4:10:b0:
4a:89:43:07:c6:7b:d4:60:70:46:a2:fc:41:bf:88:72:5a:79:
62:23:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:30 2024 by rpki-client on console-ams.rpki-client.org