Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/avBQWn-QHrf-O3t2M0fiMMqnvCg.roa
File: avBQWn-QHrf-O3t2M0fiMMqnvCg.roa (raw, json)
Hash identifier: MLVb/8Tw4FhldMTqlrXuVnOKrLUqbaOORFkDGZdtGsQ=
Subject key identifier: 6A:F0:50:5A:7F:90:1E:B7:FE:3B:7B:76:33:47:E2:30:CA:A7:BC:28
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 13A1553B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/avBQWn-QHrf-O3t2M0fiMMqnvCg.roa
Signing time: Sun 06 Feb 2022 07:23:55 +0000
ROA not before: Sun 06 Feb 2022 07:23:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48359
IP address blocks: 185.215.246.0/24 maxlen: 24
185.215.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329340219 (0x13a1553b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 6 07:23:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6af0505a7f901eb7fe3b7b763347e230caa7bc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:a8:22:46:3b:7d:e5:a3:3b:be:ac:e6:24:
fa:26:be:10:d3:60:76:e6:81:49:b9:27:03:01:0a:
3f:1e:1b:b9:91:57:ad:9e:a1:7c:b9:24:11:f8:4d:
6f:9e:2b:ac:85:f2:3a:d6:11:68:76:69:24:2f:19:
2a:d4:b2:8a:48:8e:6a:d1:0e:50:46:6f:3a:3c:f8:
bc:9a:5d:31:41:47:b1:19:4c:6c:96:cb:31:cd:13:
c1:5a:a3:04:26:c1:f5:b8:5f:f6:ed:b9:e6:06:8c:
7a:79:7d:f4:fa:38:9f:74:0e:60:ce:88:ad:ba:cc:
23:7c:fe:c3:fa:70:a2:d2:d8:69:10:bb:2b:82:d1:
3b:75:aa:3e:15:ac:5a:9b:a2:56:c3:70:58:e7:c0:
14:7b:0c:19:01:97:a0:cd:5d:a9:74:0f:ce:fc:ba:
a8:10:d0:2c:89:f5:ef:e4:c0:f8:c0:2d:44:01:9a:
8a:b2:88:05:5a:a8:68:33:8b:06:f3:14:e0:6d:03:
78:49:49:9f:04:c0:5f:41:28:e2:b7:6b:13:f0:8a:
aa:70:2e:6c:d5:95:6c:43:fe:d2:f4:ea:23:e4:67:
ba:08:89:9b:13:40:52:06:b0:79:67:9a:52:a1:92:
fd:76:17:a1:c0:af:fa:d2:12:de:cb:8e:36:b2:ae:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:50:5A:7F:90:1E:B7:FE:3B:7B:76:33:47:E2:30:CA:A7:BC:28
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/avBQWn-QHrf-O3t2M0fiMMqnvCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.245.0-185.215.246.255
Signature Algorithm: sha256WithRSAEncryption
07:5b:69:06:d7:ef:6f:68:a5:8d:6c:ac:97:53:60:c9:95:9d:
ff:02:00:e4:9b:0a:7f:d1:34:54:39:1d:24:af:1b:81:98:f3:
7e:73:7a:ee:35:df:9d:ee:31:92:ce:ec:fb:7d:9a:ca:05:dc:
24:01:a8:87:50:67:dd:06:f4:1a:b0:d9:69:76:a2:51:bf:25:
29:1a:fa:4b:94:83:e1:97:7c:37:e0:ee:30:a8:77:14:5b:d7:
58:84:30:fc:43:f6:f2:f0:60:6f:9a:2d:6a:73:cb:70:fc:a5:
db:72:d8:a3:58:33:15:e4:90:3a:71:af:23:cd:db:3e:60:00:
1e:1b:5a:b1:8c:0a:e2:c8:eb:16:8d:b3:63:12:3e:8a:94:e1:
73:fb:f1:8b:b3:fe:f6:76:2d:b0:85:1d:cd:ca:0a:9a:b9:89:
a7:8f:0c:3b:b5:c0:6c:12:41:b0:07:2f:a3:f6:b7:b1:5a:49:
7a:d9:6f:f4:ae:6e:19:62:b5:bb:c9:45:01:99:15:a3:86:59:
f8:1d:52:1a:7f:c4:ef:4b:a6:b3:52:89:74:b3:3e:66:a4:ae:
c9:8d:ff:b9:e5:ce:6f:1f:ed:62:85:4a:76:ae:80:a2:cb:c1:
fc:a0:1b:bd:31:f3:62:68:aa:74:a5:d2:e4:e6:5f:35:5b:80:
e3:b9:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org