Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/oiFX6LE3uJ4vVJFTEiBHUOHTXIg.roa
File: oiFX6LE3uJ4vVJFTEiBHUOHTXIg.roa (raw, json)
Hash identifier: wJub7wYsO1ROqKHnbwd89f+J+a90aHQSBVHtCgrdCOw=
Subject key identifier: A2:21:57:E8:B1:37:B8:9E:2F:54:91:53:12:20:47:50:E1:D3:5C:88
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 08494132
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/oiFX6LE3uJ4vVJFTEiBHUOHTXIg.roa
Signing time: Sat 01 Jan 2022 16:04:05 +0000
ROA not before: Sat 01 Jan 2022 16:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 185.103.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139018546 (0x8494132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 1 16:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a22157e8b137b89e2f54915312204750e1d35c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:a1:6b:f0:e9:48:bf:47:e2:bd:48:d6:bf:
ed:2b:8b:1f:1d:a5:9c:f6:81:bb:3b:f9:68:e7:54:
69:57:03:97:48:b6:cb:f4:89:11:8b:1f:35:61:8c:
e6:a9:b3:a2:39:04:42:50:a6:2c:af:09:a9:89:da:
b1:e7:5d:a8:68:5c:c4:0b:92:f4:b8:b6:bb:66:c2:
70:a7:f6:9d:c6:bf:ef:62:ff:a5:57:7b:01:26:e5:
21:8b:6e:d1:ed:fa:6e:34:1e:06:1d:79:1d:8d:76:
2f:0d:f0:1b:95:b2:5d:d4:e8:1f:d9:0c:38:46:bb:
75:2f:5d:c7:05:2e:f7:dc:59:a3:2f:8c:b7:f4:9b:
e3:a7:87:53:32:18:65:22:3b:67:2e:fc:f7:be:b2:
b4:b8:d1:22:41:97:7d:d3:0a:b4:6e:b7:4b:3c:dc:
e8:9a:74:88:25:9c:75:02:ec:0d:aa:37:7d:ff:d3:
88:14:0d:41:31:d9:ee:4f:dd:e9:54:2f:8c:6d:f6:
0e:9c:41:e7:b4:3a:16:0e:03:cb:12:65:86:c1:64:
63:59:d6:3c:d1:0e:a0:d5:2d:49:18:87:ac:d1:79:
8e:b8:73:e4:df:81:6a:0f:86:57:1a:9d:43:0c:36:
cd:88:cf:ea:4d:a9:43:a9:f4:a3:f5:06:81:48:8b:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:57:E8:B1:37:B8:9E:2F:54:91:53:12:20:47:50:E1:D3:5C:88
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/oiFX6LE3uJ4vVJFTEiBHUOHTXIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3f:49:1d:0e:c0:7b:43:ed:92:ad:48:9d:db:38:d2:cf:aa:
d2:d1:41:9f:e2:04:41:3a:11:d9:34:3f:6f:ef:f0:66:c6:b1:
cd:2b:86:0e:dc:64:4f:5e:cd:b4:0d:3e:0c:ca:78:1f:2c:32:
36:b3:b3:1a:7a:e5:62:ba:7b:4c:f8:6d:e9:60:e7:42:44:a4:
f7:8b:64:84:69:8f:a3:3d:54:54:e7:29:3a:cb:c3:18:a7:4a:
a7:21:00:c2:94:82:b9:7a:2e:ea:76:db:53:69:93:56:e3:6f:
2f:b1:60:a8:6d:54:30:0a:7e:9c:5e:51:3e:20:14:7b:30:cd:
a2:b0:bc:b7:52:d5:94:97:bf:b0:af:3c:1a:7c:f8:43:b0:eb:
1e:a1:83:4c:70:4d:ce:ab:92:99:fd:aa:fa:e1:ec:4f:28:c8:
45:19:44:c0:56:20:0e:8a:2c:d9:12:2c:fb:5a:b6:35:d3:1a:
9e:43:47:8a:0c:3c:91:c4:b0:bb:ab:42:ef:77:c3:06:3e:aa:
79:6e:61:4b:f0:34:04:2f:e1:e1:bb:c8:2a:9e:17:58:e6:92:
aa:27:fb:65:a1:66:ef:a6:25:e8:ef:92:2d:67:9e:6a:b6:90:
f7:05:b3:9c:f6:83:1c:74:75:1b:74:fe:ea:b5:7f:fe:27:90:
2b:ee:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:07 2024 by rpki-client on console-fra.rpki-client.org