Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/DT8IKFxXyKOvk9_-af1Dn5wmWnI.roa
File: DT8IKFxXyKOvk9_-af1Dn5wmWnI.roa (raw, json)
Hash identifier: LVMiSMuZR+E0Bix/z+oXphfYbLzESuFbCWv6ej14l5o=
Subject key identifier: 0D:3F:08:28:5C:57:C8:A3:AF:93:DF:FE:69:FD:43:9F:9C:26:5A:72
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: B3619D
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/DT8IKFxXyKOvk9_-af1Dn5wmWnI.roa
Signing time: Sat 01 Jan 2022 09:56:27 +0000
ROA not before: Sat 01 Jan 2022 09:56:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212850
IP address blocks: 185.120.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11755933 (0xb3619d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Jan 1 09:56:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d3f08285c57c8a3af93dffe69fd439f9c265a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:f8:5f:22:5d:94:d6:96:14:89:49:12:61:
cb:e7:3e:68:9e:44:da:b0:47:e9:d3:7f:88:c5:6b:
9f:a7:1f:2a:2e:e9:5c:fa:a1:19:52:7c:e1:87:f5:
a5:4c:21:1b:42:b7:ae:8d:fb:71:d2:60:ab:bd:e3:
c9:57:14:21:2b:b5:5c:a1:fe:5b:64:fa:39:58:ef:
ee:18:63:00:13:29:17:02:42:fd:70:3f:70:87:d8:
a3:cb:40:b9:e7:a8:ba:1c:d1:0c:3c:75:54:d4:7f:
fc:17:03:de:0d:ef:2b:d9:1e:27:da:00:d2:a8:23:
7d:c9:a8:d1:04:92:f2:e6:bb:c3:ba:31:45:e1:78:
6b:ee:b2:81:5e:ef:ff:e4:16:04:c8:e3:13:7b:2d:
d3:6f:bc:c8:3d:bd:ae:38:2a:55:3f:3b:c7:74:38:
d7:4f:39:c5:b3:27:8f:cf:bc:4e:bd:eb:4a:f0:b9:
ca:ee:9a:dc:d0:bf:9f:4c:88:be:9e:1c:b7:bc:b8:
0f:08:c8:d5:aa:e3:da:8c:ec:ff:20:87:5a:a7:b2:
6b:63:7f:09:84:bc:c5:80:e7:bc:46:06:d1:99:a2:
73:ed:78:57:c2:90:1c:3d:4f:2c:fb:8b:1b:00:90:
e2:5c:d5:32:99:8e:2b:7b:bd:15:53:cd:b8:15:5c:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:08:28:5C:57:C8:A3:AF:93:DF:FE:69:FD:43:9F:9C:26:5A:72
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/DT8IKFxXyKOvk9_-af1Dn5wmWnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.140.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b2:26:7d:c4:1c:ca:aa:36:c8:8e:33:48:99:5d:42:88:22:
53:16:ad:dc:ee:30:ff:41:35:d1:61:31:72:24:cb:4f:40:80:
6b:af:e5:e6:b4:eb:3c:88:b1:7e:1a:90:bc:f8:74:ba:99:84:
5e:df:bf:10:a9:e7:10:f4:85:a7:58:06:7a:ea:59:fe:ee:31:
2c:2f:8b:be:c9:c6:80:d5:c5:30:13:99:d5:75:2a:4a:7e:93:
fc:17:40:e5:88:cb:e3:8c:ab:28:34:80:82:9e:19:7c:95:10:
85:b9:86:94:07:f1:b1:56:bc:2b:c8:e3:c7:f9:87:ab:70:5a:
58:4c:b4:0c:28:eb:7b:7f:6b:7d:12:be:32:f1:26:f5:84:44:
66:1b:8d:08:b6:25:b8:28:64:d1:77:7e:9e:2a:7a:67:70:e1:
0a:16:3f:ca:8f:2b:30:36:16:25:8e:7c:6f:fc:b5:ea:5b:df:
47:15:8e:f9:aa:c8:d1:d0:eb:88:aa:e1:9e:e9:c0:18:ab:c9:
6c:c3:13:48:a0:df:d2:4d:c2:ec:e3:f2:65:a1:6d:aa:ee:17:
b6:e5:29:5f:95:46:5f:32:1e:23:1e:01:ce:ca:f0:c7:33:72:
1b:0f:45:a2:df:1c:9f:6b:46:63:49:e7:cc:23:27:54:4c:75:
0b:1d:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:48 2024 by rpki-client on console-ams.rpki-client.org