Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/dfMwuFSnErQiykGWQx2Ac2FGcO0.roa
File: dfMwuFSnErQiykGWQx2Ac2FGcO0.roa (raw, json)
Hash identifier: 3q13HgY+mCgW4KrXtSHJMyR1LvksxSSpB5LaF6mg/aY=
Subject key identifier: 75:F3:30:B8:54:A7:12:B4:22:CA:41:96:43:1D:80:73:61:46:70:ED
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 09746540
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/dfMwuFSnErQiykGWQx2Ac2FGcO0.roa
Signing time: Sat 01 Jan 2022 10:58:30 +0000
ROA not before: Sat 01 Jan 2022 10:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207211
IP address blocks: 185.157.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158623040 (0x9746540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Jan 1 10:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75f330b854a712b422ca4196431d8073614670ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:ff:d7:9a:60:af:16:7a:38:dc:da:12:2b:
9c:b7:ca:c3:e7:c4:83:b3:9d:12:1d:85:9f:ce:5d:
e3:8e:38:99:65:e2:65:e6:6d:79:37:6f:4f:22:d1:
6e:de:83:71:d9:41:53:3a:be:41:a6:70:4a:72:a5:
d9:24:e2:ce:5b:b4:7f:97:1d:57:e4:ee:e9:95:e5:
7c:ba:b7:a3:1b:b6:86:51:f3:f6:33:2b:d2:4a:04:
f6:6a:24:db:b1:ba:61:3c:9d:18:dd:41:e9:45:57:
71:49:53:12:da:f3:19:32:d1:64:92:6c:47:eb:87:
e1:2c:77:2b:7e:40:a5:2f:60:c5:d7:62:f4:44:c4:
42:d8:99:b5:d6:ae:b3:93:b9:d0:92:d8:9f:e8:13:
88:6e:2c:73:ce:a7:b6:12:8a:5c:ee:60:72:af:a6:
3b:08:12:20:86:74:5d:07:b3:58:d0:59:04:bd:81:
ce:23:3d:84:3a:c9:9f:f8:a8:27:59:97:27:b6:62:
64:58:d1:59:c4:68:e8:6d:60:db:2c:a7:b9:f1:e2:
00:29:03:e6:30:71:ed:fb:35:58:f4:5b:f4:6a:a5:
23:f5:bb:b6:c1:e0:a1:0e:c0:9b:b5:d7:32:e1:b6:
d5:43:b1:5a:ad:18:40:56:13:ad:0c:f9:10:c7:10:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:30:B8:54:A7:12:B4:22:CA:41:96:43:1D:80:73:61:46:70:ED
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/dfMwuFSnErQiykGWQx2Ac2FGcO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a7:a0:10:fb:ce:a7:66:73:d1:a2:64:c3:76:43:28:24:60:
dc:19:ab:24:a4:18:b2:c4:2a:cb:44:71:17:16:66:82:96:e0:
c9:ab:90:b1:96:57:0d:92:82:6b:e9:2a:42:07:8d:67:6e:a1:
3c:cb:07:f6:a5:6c:f7:59:a7:a4:c4:e2:0f:04:b1:40:f1:7a:
09:56:6a:c1:66:35:39:cf:00:1a:b6:e9:64:2e:de:18:fe:20:
42:8e:2e:ec:23:e6:d8:9b:20:81:17:41:6a:23:ff:c7:6a:a7:
b7:47:5f:fe:7e:07:9f:ac:f9:c6:37:d8:14:0e:05:e3:fd:91:
12:e6:6d:4b:0a:90:cd:87:7d:18:dc:19:5a:a6:94:78:84:75:
04:59:08:60:6e:82:12:c8:15:5f:d3:dc:13:4e:ba:94:7e:36:
97:86:17:e7:39:e9:04:aa:53:f0:72:9d:3e:60:4b:f3:37:fe:
d0:fe:2b:c9:84:a5:f1:69:cf:b1:39:d8:bd:b9:7f:c0:35:36:
e4:6c:77:92:d2:25:3d:9a:3a:e8:94:60:7a:c9:ed:f3:e1:09:
6f:16:65:48:3a:85:c9:ab:15:df:64:fa:de:a0:d6:71:e9:04:
82:31:31:69:da:cf:b1:89:dd:cd:c1:c6:15:e1:16:c6:a2:43:
40:30:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:18 2024 by rpki-client on console-ams.rpki-client.org