Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/9CkMC9dt-1_PkB1ICrmAPv9gGd4.roa
File: 9CkMC9dt-1_PkB1ICrmAPv9gGd4.roa (raw, json)
Hash identifier: by0weWFT8KKks+JswIam5rN+IfdtUyRTrb9dAQZKeBI=
Subject key identifier: F4:29:0C:0B:D7:6D:FB:5F:CF:90:1D:48:0A:B9:80:3E:FF:60:19:DE
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01837949E2B1B81115A45B9BA1BFCEA17515
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/9CkMC9dt-1_PkB1ICrmAPv9gGd4.roa
Signing time: Mon 26 Sep 2022 10:13:48 +0000
ROA not before: Mon 26 Sep 2022 10:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205896
IP address blocks: 185.143.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:49:e2:b1:b8:11:15:a4:5b:9b:a1:bf:ce:a1:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Sep 26 10:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4290c0bd76dfb5fcf901d480ab9803eff6019de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:fa:e7:7c:a6:14:e1:32:69:13:42:cb:5a:
2f:c0:76:98:54:fb:c7:4e:ec:70:f4:c8:e7:a9:f0:
77:2d:dc:1c:ed:be:69:6d:f0:c9:84:d9:76:62:1d:
a8:dd:73:5c:1d:5e:58:c4:3c:9c:8f:51:25:0b:83:
15:84:e7:e5:e3:a3:67:cf:f2:dd:54:6f:d2:a4:50:
fe:f2:3f:eb:64:e8:25:d9:64:07:21:c3:e3:00:35:
63:da:df:b6:cb:d3:32:5b:44:90:c6:f4:6d:3f:b4:
ba:a7:26:ca:21:d8:09:62:0b:4d:a5:cb:a6:a1:69:
20:0d:bc:54:68:75:ec:d8:92:66:f9:9e:8d:9a:c3:
4f:76:bb:f3:01:4f:bd:aa:d6:68:27:40:67:15:1c:
8a:4a:9b:c5:3d:7f:bd:b4:2b:e6:d7:d4:d1:28:33:
44:1f:34:9a:a1:c8:f0:ff:42:d2:78:21:36:dd:ef:
8d:0e:48:10:c3:87:37:b6:8e:9c:b4:81:bd:83:2f:
61:11:4d:f1:ab:11:0d:19:ad:f9:51:6d:33:06:df:
75:72:4b:87:0e:ac:b0:e9:97:46:9a:7f:7e:2f:f5:
46:4a:17:9b:6d:7b:ee:ae:f0:85:66:1f:e2:1c:27:
47:f7:cb:54:28:de:c8:62:11:19:01:ac:9d:23:98:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:0C:0B:D7:6D:FB:5F:CF:90:1D:48:0A:B9:80:3E:FF:60:19:DE
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/9CkMC9dt-1_PkB1ICrmAPv9gGd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.241.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1a:cc:87:b2:14:d4:25:cc:3d:b0:08:13:19:c0:24:b2:aa:
59:cc:d8:69:1e:66:d8:02:c4:0a:a5:c6:b5:99:d0:85:cc:f9:
67:30:6c:33:f0:2f:2c:74:11:5f:97:76:57:95:29:4d:d5:41:
3f:98:6d:ee:04:78:2c:cb:18:5a:6c:48:12:40:22:a4:06:98:
e6:ea:17:4c:fb:19:7e:59:bf:a6:68:8f:f9:a5:58:b9:b4:b7:
b7:06:12:60:96:6b:54:1e:b0:b7:b0:69:e8:bb:7d:ac:d0:13:
b1:10:d4:a9:b3:b0:3a:3b:b7:1d:b5:df:a8:70:a8:1f:13:45:
0d:0b:ad:04:3b:31:f1:cf:e4:6c:7e:c1:8f:da:11:af:e3:12:
d2:ba:be:ec:4f:3f:cc:ae:b4:f3:eb:75:c5:d8:38:79:b6:52:
34:48:9e:76:5a:d9:4d:d4:0f:37:8e:ad:7d:c3:de:c6:fb:39:
0b:d8:00:02:36:4d:94:2e:d7:9f:12:20:7e:33:e7:9c:f5:d7:
5d:44:6d:5c:b7:ba:10:0c:a3:ef:c7:24:a5:d9:fa:fa:8b:62:
f9:f0:f3:bb:cd:d7:a0:9d:f0:ba:97:71:0b:f1:9d:f5:a6:41:
2b:55:4f:41:7c:2e:3d:cf:df:1a:c6:cc:15:9e:34:24:91:dd:
fa:2d:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org