Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/8tdXuHLQDBrRaPG_b5EBFvghPOA.roa
File: 8tdXuHLQDBrRaPG_b5EBFvghPOA.roa (raw, json)
Hash identifier: P+vahpypO5OijRgF++R86Avv8zA/T5QKEwq895AsaSk=
Subject key identifier: F2:D7:57:B8:72:D0:0C:1A:D1:68:F1:BF:6F:91:01:16:F8:21:3C:E0
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 046F391C
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/8tdXuHLQDBrRaPG_b5EBFvghPOA.roa
Signing time: Sat 01 Jan 2022 03:55:04 +0000
ROA not before: Sat 01 Jan 2022 03:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208738
IP address blocks: 185.252.186.0/24 maxlen: 24
185.252.184.0/24 maxlen: 24
185.252.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74397980 (0x46f391c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Jan 1 03:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2d757b872d00c1ad168f1bf6f910116f8213ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:bf:98:46:83:4a:a5:40:0c:07:ae:7b:39:
08:11:28:9e:cc:a4:8e:34:aa:78:6f:23:77:f6:45:
86:e5:33:fb:03:25:92:e1:e2:dd:39:6b:d6:54:d1:
4d:b3:93:9b:7d:5c:55:f5:b6:cf:54:ed:9d:9a:53:
b4:dd:75:10:4b:66:3b:07:57:a4:d2:37:f6:0e:ed:
42:2d:86:53:78:1e:d3:87:bb:0c:81:54:12:27:82:
52:ea:58:35:65:8f:7e:c4:ce:d0:b6:69:c1:cf:35:
fb:a4:41:ed:dc:e0:57:ae:3b:b9:f6:66:7e:aa:5b:
38:11:39:46:df:d4:3f:7e:ee:63:5b:ca:8d:d5:90:
ed:fc:0f:39:2e:d5:58:c6:19:d3:2e:d8:7a:52:51:
f7:5a:70:a5:b0:ad:75:69:08:8f:5d:ee:78:a4:b0:
2a:ca:1d:4e:6f:5b:6b:3e:41:56:8d:b2:4e:0a:4e:
04:00:8c:a0:68:4d:03:6b:51:88:ad:1f:42:c2:7e:
46:85:a1:6a:a7:cb:78:a2:b4:65:a4:f4:5e:a7:36:
b5:d5:1d:24:43:a2:dd:2a:43:2e:39:e1:9f:2f:78:
c1:d6:d4:57:0f:ec:c3:43:38:ad:67:0a:f8:f2:eb:
93:08:7a:5d:b8:f1:af:e3:0a:77:e6:74:98:ed:23:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:57:B8:72:D0:0C:1A:D1:68:F1:BF:6F:91:01:16:F8:21:3C:E0
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/8tdXuHLQDBrRaPG_b5EBFvghPOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.184.0/24
185.252.186.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:24:a9:19:b9:a0:6b:bc:2c:e5:68:5e:48:5e:c8:b7:52:ec:
80:b3:b2:74:eb:3e:3c:6c:17:5d:dd:ba:ab:1c:c0:80:75:f9:
fe:63:d2:1f:e4:9c:29:67:48:3b:96:92:1b:0c:f3:f0:1c:4d:
ff:7a:9f:33:54:6b:cc:5b:f0:e4:ea:30:e7:d9:04:6c:7a:de:
82:b1:09:a4:ae:b8:9d:f9:8a:e9:53:a1:24:af:47:6e:76:5d:
e8:54:24:22:0e:8d:96:d5:09:90:28:f7:80:e4:e2:9d:d0:4b:
c1:e6:57:9b:9e:11:66:23:91:0a:db:bd:e4:78:91:c2:46:36:
81:54:3c:65:25:36:6a:02:60:9f:e4:16:50:5b:f1:fc:fd:dd:
bc:f6:a6:1e:74:18:b1:4a:a2:77:7b:5a:38:0d:fe:36:3c:b4:
94:28:c5:95:ea:80:cf:ba:2d:39:68:0b:e7:f4:5a:3f:81:63:
d4:b4:34:e3:80:bc:95:ba:43:2e:89:bc:0e:50:b1:3c:bf:cd:
14:10:0d:ce:7f:0c:52:bc:60:06:a9:bb:f7:7b:34:fc:db:de:
21:fd:bf:e1:b9:31:e3:e1:56:52:68:ae:f5:d3:2c:66:5a:63:
0f:1e:c1:29:56:c1:46:bf:d0:4c:2f:3f:d2:c0:6d:ff:f2:ae:
f1:61:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org