Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aJ6UyeIbtZJI9dIyJi1O2uTggyc.roa
File: aJ6UyeIbtZJI9dIyJi1O2uTggyc.roa (raw, json)
Hash identifier: liGG6sCmJ0+eXQProe3b0HCMqP1X20SckVmhsrmUZi8=
Subject key identifier: 68:9E:94:C9:E2:1B:B5:92:48:F5:D2:32:26:2D:4E:DA:E4:E0:83:27
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 366A586D
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aJ6UyeIbtZJI9dIyJi1O2uTggyc.roa
Signing time: Sat 01 Jan 2022 13:57:28 +0000
ROA not before: Sat 01 Jan 2022 13:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204221
IP address blocks: 185.101.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912939117 (0x366a586d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=689e94c9e21bb59248f5d232262d4edae4e08327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:63:16:de:7e:61:b4:b9:14:45:31:b8:66:
1f:0f:72:c0:f7:a4:d1:62:10:1e:2c:0d:b6:a4:02:
d4:fa:35:f0:3c:6a:67:5c:8a:6d:0e:04:44:e1:c2:
27:09:01:5f:8b:9c:23:ab:46:5c:c0:fc:06:30:ac:
26:12:86:a9:84:c9:b0:ab:47:45:81:8d:31:b9:9c:
5a:a5:44:2b:ae:c0:10:c1:fe:1c:46:d3:ae:ff:bd:
37:a3:c4:45:84:a9:3a:1d:6c:f8:a2:fc:f8:60:8c:
27:01:40:9f:9c:8e:83:69:2c:96:98:83:1a:66:a6:
0f:c8:0f:8c:b7:de:17:56:28:83:ad:e3:18:d7:54:
76:83:49:75:e4:28:99:95:ca:03:d0:ec:64:6b:2d:
42:d1:53:1f:68:c4:23:0c:e3:99:c2:c5:4a:bb:55:
6d:8f:b7:12:fd:b9:d3:b2:1f:b2:58:6f:37:75:48:
93:17:b7:40:e1:ca:be:bd:35:1b:d4:be:02:e3:51:
aa:a7:d9:cd:c8:3f:f5:43:74:58:2b:c9:1c:69:30:
e9:84:43:7a:b2:9e:3f:da:d7:48:78:45:4c:de:89:
c8:7c:1e:6b:76:42:49:f6:d0:42:df:13:3f:94:f1:
dd:ed:7b:aa:92:f8:b0:0b:3c:1b:ce:fb:53:e2:6f:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:94:C9:E2:1B:B5:92:48:F5:D2:32:26:2D:4E:DA:E4:E0:83:27
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aJ6UyeIbtZJI9dIyJi1O2uTggyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.106.0/24
Signature Algorithm: sha256WithRSAEncryption
46:23:e7:ac:36:4c:4a:27:1a:d7:80:fb:c6:7d:28:6b:83:e1:
77:7c:f4:e0:b8:73:b6:9a:59:9f:47:6a:e6:50:60:8a:f3:61:
94:a0:a2:d6:81:ee:80:ad:fb:57:e7:6c:37:7c:a3:3c:e7:83:
04:97:01:e6:cf:83:27:5e:e4:1b:40:6d:6a:c3:ef:d4:91:09:
d7:a9:d6:c2:7a:e5:9f:84:b5:ee:0c:9f:af:77:52:8c:a0:7a:
73:b5:06:02:34:00:83:60:40:39:9c:b8:8c:f0:dc:65:8b:46:
18:b8:27:a2:61:c0:25:a6:d4:1a:95:a3:74:71:a9:a9:fc:6d:
37:37:e5:4b:ff:74:e8:51:8d:34:10:73:69:5a:81:99:ea:5e:
0f:2b:bf:c9:d4:a3:f8:2d:b5:4a:5b:ab:d9:a1:2e:cf:d9:86:
ac:14:05:12:f3:85:a6:23:07:c2:c4:c7:eb:1d:e9:d2:32:78:
47:6e:35:28:9d:5c:53:f9:13:fe:e6:44:39:1d:3a:47:2a:73:
24:28:61:7e:60:de:e3:61:05:99:a5:bc:4b:6b:93:bf:dc:4b:
92:db:fc:5b:4e:d5:a4:be:7d:28:76:ea:61:5a:43:f8:1e:e0:
61:e3:30:3e:fd:86:a8:1c:93:13:f0:b7:51:88:dd:b8:a7:a7:
6a:57:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org