Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Pk8GRK_nh5qlv2W2TEL8up2yPQY.roa
File: Pk8GRK_nh5qlv2W2TEL8up2yPQY.roa (raw, json)
Hash identifier: szJf4Ez3yYVNgbQmZxAC3O8zetqO1lpgZYY70nHYi2o=
Subject key identifier: 3E:4F:06:44:AF:E7:87:9A:A5:BF:65:B6:4C:42:FC:BA:9D:B2:3D:06
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 0F81456C
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Pk8GRK_nh5qlv2W2TEL8up2yPQY.roa
Signing time: Sat 01 Jan 2022 06:04:41 +0000
ROA not before: Sat 01 Jan 2022 06:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211523
IP address blocks: 185.200.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260130156 (0xf81456c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 1 06:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e4f0644afe7879aa5bf65b64c42fcba9db23d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:df:df:5f:e5:80:83:2f:85:0f:c8:bb:f7:
0f:05:3a:0f:d0:a1:9c:33:93:f7:7b:f4:6e:b8:d9:
b7:e8:4f:2e:11:2e:b3:f8:c9:1a:04:af:03:b2:54:
6d:b5:3f:e0:d8:de:8b:2a:21:f0:24:8f:f7:d3:ba:
60:30:17:86:f8:49:83:35:73:d4:0b:1f:e1:7f:fd:
f7:bc:c5:06:c7:42:04:38:13:29:e0:fb:e1:1a:59:
82:7b:8a:8c:72:b9:b5:32:3c:84:df:75:dc:9f:3d:
4e:17:33:44:9e:ab:35:79:6d:55:13:03:42:5b:28:
e4:b7:e3:63:9e:22:1d:00:c1:b5:6a:b5:8a:0b:5c:
cc:ec:75:33:db:91:15:85:67:7e:41:86:97:fa:0d:
d4:2a:74:f7:1c:1d:2f:d8:b8:18:eb:d4:32:2e:88:
53:09:8a:a0:5c:68:1c:54:a6:2a:d5:b0:01:81:32:
09:a6:c2:66:ef:6e:7f:f0:d9:03:b8:e6:fd:1a:9f:
23:7b:1b:0c:4f:cd:3a:76:e5:37:d6:e0:39:36:c1:
0d:13:86:05:84:67:23:9d:08:8c:48:ac:03:b6:61:
62:f8:35:9b:e7:5f:4d:10:9c:4c:d7:5b:fa:d5:b4:
ae:46:1f:ff:42:d3:82:c8:e4:8d:5b:4e:f8:e9:0c:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:06:44:AF:E7:87:9A:A5:BF:65:B6:4C:42:FC:BA:9D:B2:3D:06
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Pk8GRK_nh5qlv2W2TEL8up2yPQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:21:42:f5:4a:37:96:de:9b:ee:be:25:16:a8:c0:16:10:5b:
bf:59:17:3d:75:7c:72:0f:4a:2d:00:42:6e:e5:39:72:64:e2:
63:9a:52:f0:b1:d2:07:a1:ed:1b:77:b6:09:85:b5:6f:20:7f:
7b:18:f1:f0:02:08:ae:57:a9:f1:18:84:d3:d1:c2:dc:71:7b:
c9:31:ce:a9:3c:23:99:6e:ee:6e:bb:ec:c0:8f:22:37:80:6b:
fb:9a:d6:06:52:10:5f:8b:d3:cf:3f:58:ae:88:98:c4:43:58:
03:f9:db:17:f9:0a:5f:38:e5:0e:b7:4f:9e:5c:26:0f:5c:e0:
35:4a:8c:6b:8a:42:c3:80:56:e8:c0:3b:e2:1d:fd:3b:7e:cd:
e7:88:60:84:e2:8d:3f:f9:06:d8:72:67:4b:b7:87:59:7e:83:
94:17:c5:1b:79:49:72:5e:f3:96:db:db:fe:77:43:a6:ed:82:
50:ad:cd:01:83:26:12:93:08:6a:9d:d5:66:3e:0c:39:11:e9:
12:17:85:6c:47:d1:7e:24:ee:19:9d:f0:7d:cf:e7:ad:85:63:
76:b6:f0:05:b8:fc:b2:62:d7:86:d8:65:90:51:ba:b0:d9:9f:
fa:97:ac:3a:6c:84:fa:e1:7e:85:e1:ae:2e:ce:43:82:9c:71:
d6:57:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org