Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa
File: CO6S1UaIhas97-oz7vIozklCyI0.roa (raw, json)
Hash identifier: 2UquavxjSoIs40FMk7e38fouZZwtMahYWIeulxiV8+I=
Subject key identifier: 08:EE:92:D5:46:88:85:AB:3D:EF:EA:33:EE:F2:28:CE:49:42:C8:8D
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 05314C37
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa
Signing time: Sat 01 Jan 2022 06:02:10 +0000
ROA not before: Sat 01 Jan 2022 06:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207139
IP address blocks: 185.169.115.0/24 maxlen: 24
2a01:8787::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87116855 (0x5314c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jan 1 06:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08ee92d5468885ab3defea33eef228ce4942c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:d3:2f:92:77:db:30:22:f5:b3:9d:f3:02:
9e:cc:ac:a1:66:a7:db:8a:33:31:25:46:43:3f:32:
95:0f:da:66:23:f9:db:11:28:1c:1e:62:3d:03:d8:
57:4a:16:85:aa:c9:1b:f7:b8:b5:06:79:b5:25:86:
b5:3c:e5:d3:eb:15:c3:66:a5:2b:1e:1a:3d:bd:2b:
e4:10:3d:ec:e4:df:cf:b2:18:5c:37:da:b6:4e:dd:
36:12:c2:cb:ac:d6:1e:ad:8c:b8:8a:6d:7a:46:26:
14:18:6a:7e:4c:fd:8d:75:86:11:9e:03:46:a9:aa:
02:38:d1:3d:72:f3:f0:db:dd:4c:f8:40:d7:f7:53:
56:b5:5e:32:e3:df:86:4c:aa:17:a3:32:c6:83:04:
ba:62:14:ab:15:2f:46:49:0d:4d:d0:4d:50:48:35:
2f:76:f9:1a:8b:2a:c6:fd:be:f6:dd:6f:1b:ef:b9:
bd:cb:31:c2:74:af:bc:a1:70:c1:c4:eb:6c:7e:8b:
15:71:5b:c7:33:38:d9:ad:4c:93:42:1d:dc:50:95:
c0:08:00:3d:48:26:60:bb:8a:c6:03:3f:f8:4b:33:
77:61:eb:01:ac:ef:24:2a:ae:b6:8d:d3:d0:fe:af:
13:21:d6:2e:bf:4e:de:85:b0:1a:07:ff:35:88:27:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:92:D5:46:88:85:AB:3D:EF:EA:33:EE:F2:28:CE:49:42:C8:8D
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/CO6S1UaIhas97-oz7vIozklCyI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.115.0/24
IPv6:
2a01:8787::/32
Signature Algorithm: sha256WithRSAEncryption
59:0c:52:d2:12:a3:82:40:3e:74:f0:b8:fc:d8:1e:53:4e:90:
0d:c0:06:d9:39:86:4c:46:90:03:ea:bc:4f:74:b8:0c:6c:78:
ea:b5:94:34:20:36:b3:63:ab:0f:7e:a4:f1:2b:b8:62:0b:3e:
54:78:b8:4d:c4:03:6a:61:54:ca:cf:7e:ce:d7:4d:42:51:6d:
34:9a:11:65:71:61:8f:70:7c:77:a0:7a:f2:74:ae:4f:4a:bf:
17:1a:3b:e4:ae:f2:25:a8:1d:58:4f:6e:4f:f8:05:70:d2:7f:
4a:d9:bc:10:5c:aa:7d:89:69:23:35:49:c0:86:4d:0d:89:b9:
2b:72:fd:30:27:a4:55:e9:de:45:db:88:26:02:96:c8:47:1b:
b8:3a:2a:34:25:0c:a7:37:90:e8:4c:06:be:fc:26:2e:7a:7f:
60:93:9f:41:13:6f:a0:a9:d1:8d:05:18:9b:32:10:4f:79:bb:
8b:55:f8:f0:77:db:46:a9:74:e9:b2:53:53:61:78:ce:d3:f8:
d3:13:6f:3f:7b:7b:83:fb:ed:cf:5f:e6:12:85:e2:49:84:b4:
93:23:d1:0c:60:f6:95:b3:3c:be:2c:f6:ac:1f:a8:c3:a8:8c:
cb:f3:a9:34:b9:ec:e5:ce:27:c6:fa:65:e3:9d:ff:14:30:71:
2e:e3:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:38 2024 by rpki-client on console-fra.rpki-client.org