Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/1-O4rU0KqIMbXC7JFrEaq6JVf0NA.roa
File: 1-O4rU0KqIMbXC7JFrEaq6JVf0NA.roa (raw, json)
Hash identifier: cWp2WQGgw+2eM2SAaYpSw4Ts+bF5xtWF1QFpmkmMMLc=
Subject key identifier: F8:EE:2B:53:42:AA:20:C6:D7:0B:B2:45:AC:46:AA:E8:95:5F:D0:D0
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 03C9042A
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/1-O4rU0KqIMbXC7JFrEaq6JVf0NA.roa
Signing time: Sat 01 Jan 2022 09:01:37 +0000
ROA not before: Sat 01 Jan 2022 09:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57687
IP address blocks: 185.129.171.0/24 maxlen: 24
185.129.170.0/24 maxlen: 24
185.129.169.0/24 maxlen: 24
185.129.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63505450 (0x3c9042a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Jan 1 09:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8ee2b5342aa20c6d70bb245ac46aae8955fd0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:8c:35:33:9c:eb:0b:92:d2:6e:5e:ca:c3:
1e:c8:ff:88:45:ef:0f:d2:f7:4d:33:b3:74:d3:51:
03:0e:62:01:31:ab:49:d5:c7:90:30:94:e4:3f:ba:
f5:35:78:c3:69:dc:50:3d:a9:3b:71:9d:58:36:32:
dc:51:8a:04:63:92:8c:c7:94:9b:de:30:92:5e:1f:
70:aa:2a:43:40:97:8e:f0:a7:1a:c6:e0:5d:73:23:
fa:86:28:cc:06:5e:97:cf:c1:23:58:42:8f:ec:07:
14:89:4a:8c:cf:25:4d:57:5a:bf:80:18:ee:17:f1:
95:c6:f4:41:ca:9c:c8:61:ee:4e:e2:a9:5a:70:61:
8b:14:a7:c5:7e:bb:f6:be:ed:ea:a2:2d:30:8a:c4:
3c:10:4a:5d:fa:a0:b3:94:ac:e3:bf:11:20:0c:41:
e1:b1:fa:92:cd:56:79:0f:3c:81:25:1e:aa:73:ea:
dd:68:54:cb:d0:57:6c:04:34:7c:7e:4f:a9:c8:3d:
a8:2b:01:42:41:8e:e5:86:df:a1:db:29:9e:26:ac:
0d:e6:18:12:0d:8d:18:b7:80:04:aa:bb:32:b2:c0:
56:ec:cb:cd:50:2c:05:80:68:ec:95:c2:fb:af:9d:
43:5f:bf:e2:97:54:83:6b:40:b1:c0:28:03:cb:8a:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:2B:53:42:AA:20:C6:D7:0B:B2:45:AC:46:AA:E8:95:5F:D0:D0
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/1-O4rU0KqIMbXC7JFrEaq6JVf0NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:dc:47:55:5e:e7:7b:38:8f:2e:87:b1:c4:27:47:d2:9b:99:
a6:9b:6a:98:2d:2e:a7:0f:9c:e1:9c:60:74:0f:f5:0b:9b:04:
10:ff:e9:9a:af:55:60:bb:b3:cc:23:e1:fe:67:f5:6b:26:34:
63:89:51:c9:3f:50:ab:6c:ea:5b:01:8e:16:2c:3c:fa:8c:6c:
78:f8:56:99:01:05:41:b5:31:15:90:b6:4f:6b:3b:af:a1:8e:
40:d7:9e:06:b5:67:b6:69:06:d3:99:12:d9:a6:c0:5b:ca:6d:
d9:c3:40:f7:e9:5f:9c:7d:55:b7:21:38:a9:e7:95:d1:7b:be:
4b:0d:3d:c3:15:42:83:3e:6e:1a:0a:a9:ea:8a:a5:f0:83:c1:
6c:14:84:48:4d:5b:37:fb:e1:af:2b:32:5b:f3:21:ec:7e:59:
48:46:69:21:3c:f1:e2:bf:70:71:81:59:b3:a9:ec:4b:f9:06:
5f:41:19:3d:6d:a2:b3:3e:4d:30:0c:92:31:e1:4d:f4:89:4c:
7f:c0:5e:89:3c:3c:42:c7:00:8b:84:9a:2f:23:a7:89:62:46:
d0:3b:2a:a2:74:b7:df:09:a1:5a:f0:89:f7:59:49:25:3b:d4:
12:83:e5:46:73:b5:1c:46:9b:72:c2:cc:f2:9c:49:3e:71:cc:
90:21:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:53 2024 by rpki-client on console-ams.rpki-client.org