Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa
File: 2Q3qed2_3-vgbn0MipArkwYh89U.roa (raw, json)
Hash identifier: RQJK2eMHbKhPE6GTsdouAnEWn/SlLxf5UdJZfyBToL8=
Subject key identifier: D9:0D:EA:79:DD:BF:DF:EB:E0:6E:7D:0C:8A:90:2B:93:06:21:F3:D5
Certificate issuer: /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial: 05A37E2E
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa
Signing time: Sat 01 Jan 2022 10:54:35 +0000
ROA not before: Sat 01 Jan 2022 10:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198288
IP address blocks: 185.208.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94600750 (0x5a37e2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Validity
Not Before: Jan 1 10:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d90dea79ddbfdfebe06e7d0c8a902b930621f3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:8f:bb:3a:be:8e:f0:64:7f:b6:16:cb:c5:
cc:af:a7:16:15:25:60:a1:aa:f3:53:ad:b6:7f:69:
72:b5:82:fc:48:0e:c1:b0:ab:85:17:f8:99:86:a5:
f9:d0:78:4a:a7:de:47:7d:21:a3:d3:35:30:2d:73:
7f:ee:aa:9d:8c:0a:6d:ed:e4:d6:1f:f7:a4:7a:f6:
b1:98:a9:a1:1a:df:6a:79:83:61:75:ff:43:79:d6:
f8:c4:61:f2:5b:bd:da:63:f0:8c:05:e0:ca:c5:c1:
dc:09:6c:40:3d:c3:47:d1:ca:e3:ab:a5:e3:de:34:
63:72:a8:a6:b1:69:fa:70:8b:ac:c9:ce:cb:f9:bf:
cd:cf:82:28:05:dd:7b:df:34:77:07:1c:15:5a:1b:
44:94:60:e7:98:0f:53:72:66:bc:8b:90:a8:76:ef:
6f:58:b5:11:5f:35:d1:e4:ca:51:62:c3:a7:89:25:
95:da:0d:d7:eb:5a:a0:a7:a9:80:f2:96:4c:a5:ee:
59:35:c4:04:1f:85:ac:c1:f0:d5:5c:05:50:00:f8:
01:70:98:6b:7c:dc:d4:01:68:70:4a:63:8c:07:ea:
a9:d5:ca:9f:db:df:8d:75:34:39:54:95:93:cb:48:
0f:1a:f2:a6:c4:35:66:df:b1:35:68:c9:5f:0e:f2:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:EA:79:DD:BF:DF:EB:E0:6E:7D:0C:8A:90:2B:93:06:21:F3:D5
X509v3 Authority Key Identifier:
keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.120.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c0:9d:f4:33:fe:e3:13:83:64:e7:71:bd:97:c3:fd:2a:c2:
75:43:9c:a6:99:58:6a:84:82:25:46:78:77:10:5d:17:90:b3:
a1:34:e4:b7:75:a9:2a:73:28:24:24:11:7a:63:18:5e:27:5b:
db:26:62:f7:ad:cb:4e:82:0e:c1:d5:ce:67:86:74:70:ff:d5:
97:46:ec:aa:a4:e5:71:8c:11:28:ed:d5:4c:16:cf:c2:4b:b8:
44:d8:49:3c:f7:82:b5:98:5d:30:75:b8:a9:d5:22:4e:b1:6f:
11:45:56:19:a2:cf:1a:ae:74:35:d9:70:3a:35:28:f1:82:d3:
12:08:da:89:58:c5:f4:d7:48:c1:c1:44:d7:10:93:01:16:ca:
56:bb:b2:d9:65:d7:0a:7d:f9:bd:94:b5:4c:3f:cb:86:f7:16:
23:70:ca:3b:0a:18:a3:f9:c9:d0:77:4a:8f:c0:c0:fe:2f:c1:
97:83:0d:d8:32:fb:05:04:0f:80:df:c1:55:d1:75:61:1a:b1:
c9:91:17:7e:12:64:9d:41:c0:69:30:e6:30:2b:f1:6c:fc:3f:
54:2b:47:33:c7:b8:1a:e9:a3:08:db:b6:0d:14:f8:c7:93:4b:
c8:4d:2f:39:59:20:bd:35:60:b6:6d:37:a1:17:7e:b9:54:22:
33:e6:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:36 2024 by rpki-client on console-ams.rpki-client.org