Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/9Dgu5x9zQoeCF3lcOEAhwGLwckg.roa
File: 9Dgu5x9zQoeCF3lcOEAhwGLwckg.roa (raw, json)
Hash identifier: q7C5Gl7kNOUSRB+0TuIXiGRFJDteAlGpFcgDqyUId70=
Subject key identifier: F4:38:2E:E7:1F:73:42:87:82:17:79:5C:38:40:21:C0:62:F0:72:48
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 06B5C0B6
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/9Dgu5x9zQoeCF3lcOEAhwGLwckg.roa
Signing time: Sat 01 Jan 2022 05:06:29 +0000
ROA not before: Sat 01 Jan 2022 05:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 185.204.17.0/24 maxlen: 24
185.204.19.0/24 maxlen: 24
185.204.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112574646 (0x6b5c0b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 1 05:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4382ee71f7342878217795c384021c062f07248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:fa:97:48:52:c0:0c:17:b7:34:5a:db:6c:
1c:b1:3f:5f:2f:df:3b:23:b1:41:c8:76:f1:fe:b4:
d5:f7:6a:99:32:8d:cd:de:4e:48:61:5c:8f:db:c4:
4a:28:d1:d7:d7:ca:f7:8b:30:10:32:34:7a:fd:ac:
8d:10:a0:7a:b2:ef:1c:30:d3:c1:05:cc:a5:7c:aa:
b2:1a:c1:43:e7:63:d0:1d:5f:37:2c:bc:d2:cb:2f:
18:76:bb:40:62:09:8d:bf:bd:de:ea:d1:46:c7:83:
55:11:5e:1b:98:32:0b:bb:94:57:0c:b4:f5:c5:45:
6e:3c:74:5e:17:12:c0:65:c0:6a:4e:ea:40:67:b1:
3f:a5:0e:fa:8f:80:1a:61:16:aa:25:fb:18:4e:e7:
01:5c:7a:db:e6:27:9a:18:d4:b6:17:2b:d0:44:e4:
71:d0:46:46:5d:98:e0:4d:d0:20:49:bd:c1:e4:64:
ce:31:37:b1:e1:86:af:26:5e:9a:85:b7:78:1d:4a:
5e:83:3c:4e:87:56:d3:04:f6:7d:cd:8d:e9:90:d9:
9b:f1:fb:52:29:82:60:78:47:17:fb:ef:58:e8:68:
2c:c5:78:ef:dc:1e:d1:44:ba:47:f1:a1:5e:07:ce:
70:d9:6d:a3:74:52:d1:b3:03:b7:f2:5d:b4:f6:0e:
9c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:2E:E7:1F:73:42:87:82:17:79:5C:38:40:21:C0:62:F0:72:48
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/9Dgu5x9zQoeCF3lcOEAhwGLwckg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.17.0-185.204.19.255
Signature Algorithm: sha256WithRSAEncryption
34:1f:eb:8c:de:40:9e:8e:84:cf:78:eb:dc:9b:5c:32:00:bc:
21:bf:13:c7:dd:50:67:4b:eb:da:56:db:d0:94:5d:d9:91:ce:
52:cb:8f:b5:51:92:ff:f1:45:3c:95:cc:66:05:60:02:09:f9:
f5:be:b2:90:2e:b2:e0:b7:ca:f8:10:96:d5:ee:8c:f7:b3:3e:
65:c1:bd:dc:e6:83:69:ab:66:05:d1:71:74:7c:41:8d:43:69:
ce:af:91:60:45:30:8d:d6:6a:58:b8:87:bf:58:52:1e:e2:d1:
88:ec:43:57:3e:3a:21:5b:5c:ed:a4:2f:a9:ba:5f:a6:4f:41:
5b:23:3f:5f:22:1c:db:34:47:13:7b:23:c2:d2:69:2b:83:53:
20:e4:26:ab:0b:75:9d:63:5a:83:a9:89:b1:67:a4:ea:de:5e:
70:e8:91:87:c3:65:79:97:27:ed:a6:2f:1c:a6:12:d2:19:04:
e2:96:cc:d2:87:29:ca:b0:da:d8:2b:37:40:05:9c:8f:a5:f9:
e3:b4:4f:24:62:3e:59:cf:79:e3:e0:f7:b1:a8:c5:88:7b:5b:
ee:c8:bc:a4:ab:26:37:92:76:21:b8:94:23:92:d6:ff:9f:6c:
d2:36:02:b0:c6:11:f4:41:b6:77:0a:05:2b:4f:4a:15:b6:84:
ff:dd:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org