Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/466nTxaRTRDPZmTSbE-z0HV6ik8.roa
File: 466nTxaRTRDPZmTSbE-z0HV6ik8.roa (raw, json)
Hash identifier: 9yOJlkiSlbp26l5TRY/C4Ac9Xg6u8cgZI/Lj1GRjjsk=
Subject key identifier: E3:AE:A7:4F:16:91:4D:10:CF:66:64:D2:6C:4F:B3:D0:75:7A:8A:4F
Certificate issuer: /CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Certificate serial: 0217B2A7
Authority key identifier: E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/466nTxaRTRDPZmTSbE-z0HV6ik8.roa
Signing time: Sat 01 Jan 2022 16:06:14 +0000
ROA not before: Sat 01 Jan 2022 16:06:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211510
IP address blocks: 185.251.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35107495 (0x217b2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8964e4e8ffe31f692f71318c2b7282028d0f3a4
Validity
Not Before: Jan 1 16:06:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3aea74f16914d10cf6664d26c4fb3d0757a8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:e1:33:6a:0b:9d:fc:fa:71:4f:bd:09:bf:
c1:87:49:b0:5f:f6:85:02:d5:b8:bb:cb:0c:5c:76:
77:23:11:dc:09:a5:ec:96:1a:2f:45:fb:5f:f9:17:
c4:04:79:57:9b:18:3e:4e:12:1a:c3:ac:81:82:f4:
60:24:56:75:45:4f:42:29:5d:98:1e:36:db:a3:85:
ea:2a:10:86:39:eb:64:f4:04:9a:51:b6:ae:d4:d1:
33:53:d4:17:c1:c8:c2:f1:22:42:52:47:eb:16:30:
5c:77:1d:91:88:6d:f0:ef:5c:47:a0:42:40:c2:90:
84:48:16:ee:17:95:52:c2:19:c6:f0:42:13:2f:10:
ee:2b:91:6a:c4:b9:3e:bf:38:f3:16:90:06:e7:b3:
bd:ed:90:98:6c:77:19:f3:68:78:38:69:71:31:c7:
0d:d5:6f:76:89:96:af:a1:7e:7e:b2:36:8a:16:85:
d0:4b:7f:92:b7:df:45:35:f7:77:cc:93:51:91:6c:
d9:b9:bd:0a:85:9e:f5:38:44:a8:16:8c:6f:46:50:
3a:72:e4:10:b1:79:9e:79:ea:aa:63:85:5c:f9:c1:
99:02:04:1b:41:35:80:8c:a9:fa:c4:11:9a:9b:19:
26:f1:2e:4d:75:72:75:85:cb:29:2f:e8:0e:6f:e7:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:A7:4F:16:91:4D:10:CF:66:64:D2:6C:4F:B3:D0:75:7A:8A:4F
X509v3 Authority Key Identifier:
keyid:E8:96:4E:4E:8F:FE:31:F6:92:F7:13:18:C2:B7:28:20:28:D0:F3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JZOTo_-MfaS9xMYwrcoICjQ86Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/466nTxaRTRDPZmTSbE-z0HV6ik8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/131a77-c8c8-4bb7-9aee-5a665655eb57/1/6JZOTo_-MfaS9xMYwrcoICjQ86Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.12.0/24
Signature Algorithm: sha256WithRSAEncryption
40:df:31:cf:6f:91:b5:24:9a:cc:d6:50:f9:83:03:1a:ae:8a:
e9:cc:22:d6:9a:00:23:29:14:ed:e5:07:1e:81:03:07:d5:12:
cd:1c:f0:a2:a6:98:35:a2:05:dc:58:53:2b:6f:67:78:05:af:
54:19:9b:f2:ec:07:71:e6:36:88:76:ec:98:88:0d:21:fb:94:
b7:d0:3f:ee:d6:95:9b:cb:b9:1d:e1:75:48:3f:00:8a:1e:47:
c7:a4:93:e6:d1:7a:55:c5:e8:8e:3b:6c:b8:2c:3f:f5:cc:1d:
d2:2c:1b:69:8f:5d:1a:16:c4:7f:f3:b1:bc:51:60:21:fd:c1:
24:d1:b1:6f:11:90:85:d9:22:0b:7d:e4:2b:fa:99:df:1f:eb:
a4:42:43:ef:82:ac:1f:43:d8:62:11:a4:1b:bb:83:d6:a5:b0:
97:33:4e:ec:56:a0:6a:8f:08:9a:d9:e0:e8:a1:46:6c:0b:37:
8e:fb:d0:d5:22:47:89:da:53:f6:d3:6c:c3:6a:3f:96:9e:a8:
9a:2c:97:84:9a:a4:54:08:b8:3b:64:40:4d:55:55:44:bc:fd:
43:49:9e:1b:28:8f:cf:f9:46:c9:b0:95:3f:86:9b:5e:6b:14:
09:af:16:4a:8d:71:2a:b3:00:38:d3:39:26:0f:50:13:c9:18:
09:48:b0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:14 2024 by rpki-client on console-fra.rpki-client.org