Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4OJdyl_B1-DiaNblUocEztd_UNI.roa
File: 4OJdyl_B1-DiaNblUocEztd_UNI.roa (raw, json)
Hash identifier: E542q+GqeSeBdSEC6dHzAwtKv45yaxDuKJvwicZCHkw=
Subject key identifier: E0:E2:5D:CA:5F:C1:D7:E0:E2:68:D6:E5:52:87:04:CE:D7:7F:50:D2
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0607A9AE
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4OJdyl_B1-DiaNblUocEztd_UNI.roa
Signing time: Sat 01 Jan 2022 16:01:26 +0000
ROA not before: Sat 01 Jan 2022 16:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211826
IP address blocks: 185.225.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101165486 (0x607a9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e25dca5fc1d7e0e268d6e5528704ced77f50d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:47:83:76:32:c3:59:87:84:63:93:13:ad:
c4:b7:00:fb:3a:c5:cd:bc:33:db:01:3e:f7:16:ef:
2b:37:ad:45:20:5a:45:a2:bb:1f:91:d9:ef:f6:39:
71:5c:c7:cf:bc:a5:5e:f3:3b:d3:95:ad:a1:75:aa:
2c:6a:51:fd:2f:3a:64:09:ff:d5:35:00:35:7c:52:
06:a9:0b:b0:b0:27:16:8e:eb:80:15:c1:46:ca:f4:
09:1a:3c:1a:31:1f:35:be:89:44:ab:3a:ec:dd:df:
4e:29:39:17:82:dc:56:b6:e5:b0:a2:8b:ce:ef:c6:
ad:fd:89:e0:b6:10:11:c0:ee:76:f8:cd:2f:1b:be:
4c:4d:e3:c4:04:57:ea:33:77:79:29:5e:fc:50:e3:
b1:e9:ac:29:97:6c:d9:01:a1:68:e0:e9:2b:4e:77:
6f:2f:ee:06:11:00:e8:55:6a:7e:91:60:4a:f9:91:
03:3b:0c:7f:27:d8:be:de:e4:ef:e9:53:40:3c:e6:
e2:79:b4:73:b6:7d:30:41:04:91:4c:56:6c:01:0a:
83:60:c2:7d:22:20:c1:9d:fe:31:4f:ac:b0:b3:17:
77:8f:b9:58:2c:ff:20:65:ae:fd:e6:1b:14:e6:75:
79:a3:bc:17:c0:5d:33:e2:49:c7:ec:85:36:ef:41:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:5D:CA:5F:C1:D7:E0:E2:68:D6:E5:52:87:04:CE:D7:7F:50:D2
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4OJdyl_B1-DiaNblUocEztd_UNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.206.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8d:78:dc:c3:32:1b:1c:2a:ce:cb:dc:7a:ba:bd:3c:ba:f2:
27:ad:1d:0e:42:e7:0a:6d:23:2f:e1:cc:40:f1:6f:ff:2c:fc:
e9:1e:96:86:83:86:da:4f:66:59:e0:e1:6c:8d:dd:60:79:a4:
9d:05:f9:e7:e5:fe:3f:93:f6:94:3e:c8:cc:c5:b1:32:f2:11:
1b:1f:2a:6d:db:f3:df:71:65:fd:f7:2f:b7:cf:70:03:f4:9c:
ce:3e:04:b4:ea:fc:da:f9:3e:b6:69:2f:85:56:72:86:e3:49:
23:17:ee:06:6c:08:ea:89:7d:a9:fa:d4:92:be:9c:e6:e2:ac:
aa:5c:09:e3:a5:ac:b4:da:30:b2:f9:89:80:7f:03:f2:92:1a:
60:74:7b:9f:ca:ee:eb:cb:37:0c:47:6c:c4:39:5d:63:ba:46:
cb:04:06:0f:8c:31:24:c3:ef:76:80:31:8d:6f:8f:f6:ef:f1:
3f:50:3d:a7:32:41:74:f1:2c:df:62:a1:33:a7:09:59:34:53:
99:88:f5:4f:25:a1:83:b8:b4:7b:4d:75:1e:91:08:5b:6a:e1:
fc:b4:ed:40:c1:d4:4e:65:ef:d4:23:42:79:7c:5c:22:c8:fd:
59:09:21:ce:d3:5a:b3:33:ba:39:70:99:d9:9c:62:e1:2a:0f:
a2:7c:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org