Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa
File: biNOH4-9qOMB_3NXjfi1EU_vrdY.roa (raw, json)
Hash identifier: 08D7MFo5ilwsuUPK8AR2HHRExcs7lqG/96jpaVb+zH8=
Subject key identifier: 6E:23:4E:1F:8F:BD:A8:E3:01:FF:73:57:8D:F8:B5:11:4F:EF:AD:D6
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 083AB95D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa
Signing time: Sat 01 Jan 2022 07:56:15 +0000
ROA not before: Sat 01 Jan 2022 07:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206435
IP address blocks: 185.126.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138066269 (0x83ab95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 07:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e234e1f8fbda8e301ff73578df8b5114fefadd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:c7:cb:06:55:8e:cc:d5:45:fb:19:49:5a:
3b:37:8f:87:f1:0d:89:63:f9:e8:f5:36:d4:79:1b:
50:32:17:aa:1e:c6:aa:c8:cb:5d:de:16:05:b4:88:
03:33:a4:a1:85:13:3e:a5:22:f6:e6:21:dc:9b:ba:
68:bf:6a:bf:c8:d3:d9:37:d0:bf:96:ca:1a:d8:7e:
87:3e:f6:28:5c:89:cd:39:38:22:83:7a:58:d7:81:
68:6d:bf:e6:b0:54:8f:bf:53:11:b7:35:1c:35:f0:
12:1a:aa:f6:a0:64:4d:b3:48:4c:c1:0d:f8:e6:9d:
15:27:49:37:63:ad:87:4d:48:8f:43:eb:fe:da:d0:
bf:71:2f:ae:4a:68:a5:5a:80:af:7e:aa:0a:26:26:
37:bd:75:fa:e0:b6:8e:4e:ac:7f:c7:e5:60:ea:77:
4b:cc:84:ef:a6:1b:c4:4b:1b:6b:d1:17:e6:5c:b4:
fc:c3:46:5d:4c:15:21:3a:6a:e7:ca:b6:b5:12:0f:
1c:52:ef:3a:8c:2f:41:9d:cb:cb:fb:e3:23:4a:c8:
75:36:7c:f4:30:92:41:bd:fe:5c:6e:c2:a3:c2:dd:
89:88:b5:0e:ff:01:73:22:3c:aa:fc:a1:b3:31:e4:
08:db:5d:e5:1d:35:f1:54:48:75:81:2a:df:05:ad:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:4E:1F:8F:BD:A8:E3:01:FF:73:57:8D:F8:B5:11:4F:EF:AD:D6
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/biNOH4-9qOMB_3NXjfi1EU_vrdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:af:bf:9c:18:6e:eb:39:b8:c0:b8:9c:5d:e0:63:2a:af:e1:
f1:38:11:6e:d8:fb:3a:ae:fe:04:b7:1b:1a:5e:45:04:65:83:
b9:35:8e:da:f3:62:fe:24:5c:ec:44:6f:40:d1:f0:d3:6c:46:
85:74:4c:e7:8d:98:84:e0:88:0f:d4:3a:53:76:10:48:3b:55:
71:4c:9f:a6:22:5f:07:56:c7:c3:ea:46:8e:3b:c2:fe:4c:73:
41:22:e8:58:80:91:c3:28:e6:46:d4:a3:7d:e4:1c:77:71:29:
4e:7e:d0:28:64:44:3a:8c:62:a9:ee:fa:43:c4:eb:73:ff:5a:
3c:92:e4:98:cf:98:b9:6e:17:bf:55:c9:f5:a3:bd:4b:03:74:
c4:9c:23:48:ae:f3:c0:01:b3:ee:e8:e2:a9:c6:e3:a4:bd:d1:
a3:47:e9:8a:11:96:c3:71:9d:5c:cb:dc:d9:ce:87:8d:60:e0:
57:d8:63:48:96:20:f3:07:41:4e:7b:25:ef:f5:ca:c6:e4:1d:
1c:a1:c9:69:3c:c5:7b:d9:5d:b0:a7:26:ac:08:10:c8:cd:50:
29:3a:f9:c0:3b:0a:2d:0a:6f:3e:70:69:5d:5b:5e:9e:75:1a:
31:b3:68:7d:ce:8b:d3:50:43:39:b2:1b:a8:15:a1:f2:b0:7f:
db:98:3d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org