Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YEz1wcv3i-ap1UbcuxuRb3G_hb4.roa
File: YEz1wcv3i-ap1UbcuxuRb3G_hb4.roa (raw, json)
Hash identifier: tJlWdfvYZQaTfvb3/thWgaRjMQGnTNZ7PRLjJKZeAzg=
Subject key identifier: 60:4C:F5:C1:CB:F7:8B:E6:A9:D5:46:DC:BB:1B:91:6F:71:BF:85:BE
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0184F62C7A67AA021CEAD426BFF006F774E8
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YEz1wcv3i-ap1UbcuxuRb3G_hb4.roa
Signing time: Fri 09 Dec 2022 09:17:00 +0000
ROA not before: Fri 09 Dec 2022 09:17:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 185.36.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:2c:7a:67:aa:02:1c:ea:d4:26:bf:f0:06:f7:74:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Dec 9 09:17:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=604cf5c1cbf78be6a9d546dcbb1b916f71bf85be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:71:ce:af:b6:9d:6b:13:2c:21:13:a3:e8:
3f:f4:4d:70:d5:72:4f:7e:6d:6f:2d:a2:5b:bf:5a:
cb:04:e8:c5:45:6f:9e:1f:74:7e:30:d0:33:5c:0c:
64:99:15:15:43:c6:2b:5e:dc:d9:dd:fb:8b:fb:7f:
0a:1d:cf:c0:3f:2e:26:d8:d3:0d:94:e9:8f:1a:b5:
21:6d:ae:e4:26:f1:ca:f8:4a:5c:19:07:5d:be:73:
60:5c:b7:bf:58:56:0b:bc:2a:5e:91:7a:df:a5:df:
4d:f8:7d:98:58:0e:0c:08:89:96:e5:db:de:c6:a2:
ca:0f:60:74:71:2d:31:99:7c:bf:f9:f1:87:4f:a1:
42:e7:8a:73:eb:c0:b5:75:bd:42:7b:9a:f3:f2:ce:
e3:27:bd:53:4a:a0:45:44:78:c6:f1:98:41:ea:14:
33:87:c3:89:61:97:ba:88:ef:67:95:2a:00:a5:97:
cc:83:9d:a5:aa:48:a9:68:ab:48:c5:e6:c8:5c:50:
eb:41:7c:d2:39:2a:46:33:e5:64:b2:f9:e4:5c:22:
e1:a1:13:72:73:35:4c:55:e9:16:74:34:08:37:01:
6d:da:a3:2c:78:5e:3d:11:af:3a:27:83:f2:4c:40:
95:7a:41:13:1d:0e:01:c7:56:ba:44:5e:74:c3:76:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:F5:C1:CB:F7:8B:E6:A9:D5:46:DC:BB:1B:91:6F:71:BF:85:BE
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/YEz1wcv3i-ap1UbcuxuRb3G_hb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.140.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:60:e9:ee:c9:11:66:2b:be:f5:a8:fa:33:b7:2e:5c:09:6d:
59:08:e6:be:33:50:57:11:1a:64:4d:7b:b4:b1:6b:d8:52:02:
6e:3b:04:7d:46:34:c3:0a:d8:e9:6b:c6:9f:aa:ba:e1:31:23:
1d:1a:79:b1:f1:6a:27:c4:76:d8:49:fd:aa:92:f6:c3:81:fd:
87:30:6c:41:b0:8c:7c:89:8d:d3:60:19:ca:93:b5:ae:67:f2:
cc:fb:fc:03:76:2d:4b:7f:c4:fa:df:6b:d0:69:68:6f:67:d8:
3f:88:43:d5:c4:ce:08:68:78:35:8f:96:f9:b8:7e:e2:80:fa:
e5:88:a3:b6:97:08:a1:cd:9c:f0:c7:69:f5:1a:5c:72:ba:29:
f0:91:96:07:a7:08:07:fc:40:7c:7d:fa:50:e9:2a:c7:47:24:
68:17:2d:d0:3f:88:52:7f:a1:45:4e:38:d0:c9:b9:a1:fe:9e:
b0:89:f2:7f:49:37:c9:d5:de:d5:45:12:0d:c4:dc:69:30:ed:
1d:68:81:14:4b:fe:18:ee:21:ae:67:ad:ae:d5:78:33:07:7a:
7a:a3:26:e3:20:0c:45:2b:07:59:fc:4b:66:68:68:78:16:18:
9d:67:85:a2:9b:65:b3:3f:f6:aa:0b:89:0f:f3:ee:1e:fb:6d:
10:e6:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org