Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/7GT78gY9c6h66ADuXb_6YZEZqDg.roa
File: 7GT78gY9c6h66ADuXb_6YZEZqDg.roa (raw, json)
Hash identifier: pMAuKnn+GB2HctZXOCkt99E8yiF9sZl2Qk/w71A4Vm4=
Subject key identifier: EC:64:FB:F2:06:3D:73:A8:7A:E8:00:EE:5D:BF:FA:61:91:19:A8:38
Certificate issuer: /CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Certificate serial: 02C22B4E
Authority key identifier: CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/7GT78gY9c6h66ADuXb_6YZEZqDg.roa
Signing time: Tue 04 Jan 2022 23:24:44 +0000
ROA not before: Tue 04 Jan 2022 23:24:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42689
IP address blocks: 185.210.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46279502 (0x2c22b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb645bc0fdb8626bce2c0425c4087b54e150d386
Validity
Not Before: Jan 4 23:24:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec64fbf2063d73a87ae800ee5dbffa619119a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:fe:d9:35:75:9f:5e:8f:52:c5:02:72:33:
a2:32:6c:59:7a:48:99:2d:5a:72:3b:21:ac:07:8f:
1b:34:39:60:9c:ce:66:94:27:0a:fe:76:af:7d:f4:
0b:c7:1e:57:c5:2b:32:3b:9d:58:a5:d4:b1:e9:fd:
a9:ab:40:7b:2a:68:f3:27:2a:34:44:60:e4:f9:00:
e2:0e:34:19:92:26:0e:47:93:28:0b:30:ea:47:c3:
21:df:eb:65:81:32:60:0c:68:6f:ff:56:7f:4b:25:
fa:3e:c1:ba:b9:45:9b:c7:16:5e:f8:ee:08:01:65:
73:ea:ec:9d:90:f1:d7:6f:68:c8:9e:65:e6:66:14:
2a:35:7d:e1:cf:f9:7c:68:43:fd:7c:51:26:7d:f3:
7e:47:4f:68:43:fb:44:d3:16:02:57:30:93:9a:2c:
8d:89:e3:91:91:fd:34:0d:06:97:b5:5e:18:3e:14:
66:19:1c:f8:0c:41:d7:1b:35:23:97:b7:7f:f0:87:
a1:e4:79:4e:f8:cb:a2:db:bc:bf:5c:7d:33:78:13:
8c:2c:5a:69:85:95:05:1c:44:3c:8e:82:f2:89:e3:
96:02:de:90:5b:c9:b5:ff:7e:13:5c:4f:79:d9:c9:
d7:52:6a:f8:25:fa:a2:6e:2d:8b:37:ae:89:f8:c3:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:FB:F2:06:3D:73:A8:7A:E8:00:EE:5D:BF:FA:61:91:19:A8:38
X509v3 Authority Key Identifier:
keyid:CB:64:5B:C0:FD:B8:62:6B:CE:2C:04:25:C4:08:7B:54:E1:50:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2RbwP24YmvOLAQlxAh7VOFQ04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/7GT78gY9c6h66ADuXb_6YZEZqDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/57bf89-fe3b-4c21-8ffb-e8754d005ebe/1/y2RbwP24YmvOLAQlxAh7VOFQ04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.157.0/24
Signature Algorithm: sha256WithRSAEncryption
67:30:12:d9:13:e5:9c:a1:40:62:f2:2d:5f:45:3e:fd:f5:c6:
40:fc:ca:07:3f:0b:88:8e:fd:24:9d:0d:33:d7:8a:bd:eb:2c:
be:8f:4e:71:7b:8e:44:ca:f2:2f:d4:ef:8e:7a:49:a8:37:24:
ff:9c:d9:e9:4f:8f:c1:99:df:a5:8e:b8:b7:19:e8:9a:6b:75:
92:42:69:6c:f5:0d:37:13:4f:08:02:02:dc:66:68:13:62:69:
8f:3e:01:39:55:f1:02:ec:db:40:c7:ec:8f:76:01:eb:67:4d:
57:7f:4c:1d:ce:95:38:6c:82:85:5f:eb:90:80:e5:6b:b3:aa:
28:3d:4c:27:a4:57:2f:0b:91:34:9c:73:37:78:13:23:d6:60:
bb:93:a2:70:c2:2f:2a:83:e5:1b:9b:04:18:04:f5:b7:d3:35:
2a:87:f1:48:77:4f:99:59:27:5b:08:7d:73:3e:0d:5e:8b:9c:
9a:e1:50:e0:61:e5:94:cd:c9:24:2a:0a:cb:0b:95:b0:1c:df:
6e:17:74:6a:a9:66:e6:ed:fe:c7:1b:ac:ff:ac:13:cd:6f:07:
6a:7e:7d:f9:2a:bd:54:fb:13:25:ed:3c:02:93:8c:71:e6:3a:
8b:c7:0e:09:7a:af:f2:79:64:90:19:8b:1d:42:49:57:24:6f:
7f:15:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:47 2024 by rpki-client on console-ams.rpki-client.org