Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aaQT2JILkCji7VmkCBfzsBxOAXM.roa
File: aaQT2JILkCji7VmkCBfzsBxOAXM.roa (raw, json)
Hash identifier: qU1AeNbY9vDBToLlqIAS9MRDe/rqjeTSaDCOrVblk2c=
Subject key identifier: 69:A4:13:D8:92:0B:90:28:E2:ED:59:A4:08:17:F3:B0:1C:4E:01:73
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 365F6F92
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aaQT2JILkCji7VmkCBfzsBxOAXM.roa
Signing time: Sat 01 Jan 2022 13:57:21 +0000
ROA not before: Sat 01 Jan 2022 13:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41219
IP address blocks: 185.101.104.0/24 maxlen: 24
185.101.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912224146 (0x365f6f92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69a413d8920b9028e2ed59a40817f3b01c4e0173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:4e:6a:14:1e:43:b9:c1:ad:ad:cb:8b:df:
bc:de:72:53:8d:53:52:f9:52:26:0d:f6:f2:88:fc:
18:b3:3d:fd:b6:40:a3:e2:eb:eb:ef:2e:91:80:4f:
22:54:18:a1:e5:46:26:de:80:3f:2d:64:cc:0d:e4:
26:36:40:87:b4:76:02:a2:72:45:2c:04:93:61:72:
3b:67:74:28:ed:4a:2f:ba:17:d5:11:44:be:64:eb:
0f:ce:eb:5c:69:50:53:f2:4d:3e:22:93:cb:95:86:
a7:fe:4a:9e:8d:49:2c:b7:2b:c7:cb:4d:37:bb:0a:
a4:8c:f1:0f:25:97:6d:2c:c1:d4:45:38:f9:a1:ab:
e8:71:d0:4d:42:7d:14:39:77:bd:0e:89:91:d9:d3:
71:af:3a:89:06:7b:8c:47:f6:75:b5:a7:62:8b:5d:
94:3f:0f:03:90:b3:fb:c6:73:68:18:a6:6f:66:23:
a1:01:d1:fc:25:48:c4:03:f4:c8:19:7a:7a:c2:34:
88:23:5e:47:65:54:24:2c:d4:98:28:22:29:a9:e1:
90:d0:06:35:56:2b:44:8b:86:07:99:df:b2:a8:76:
06:d0:33:4a:d5:36:73:3d:c3:b7:90:5f:a0:fa:54:
02:79:63:50:13:0d:5c:f1:2f:4f:ec:af:76:0b:5e:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:13:D8:92:0B:90:28:E2:ED:59:A4:08:17:F3:B0:1C:4E:01:73
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/aaQT2JILkCji7VmkCBfzsBxOAXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.104.0/23
Signature Algorithm: sha256WithRSAEncryption
37:cd:5c:3c:47:f5:e9:2d:4f:99:02:8a:94:c1:69:2a:0c:0f:
5c:42:cc:2b:05:b4:b1:0e:dc:77:e1:22:c3:ed:e8:24:ce:60:
dc:be:b8:e4:14:2c:7a:fa:cd:e2:ef:50:04:d6:7b:8e:35:c9:
ae:a4:0a:a9:43:53:3d:07:21:ec:57:86:29:f2:e8:ba:ca:53:
49:4c:ee:62:71:cf:cc:8b:58:ed:3c:1f:4d:7a:f6:c5:78:68:
64:90:71:d3:14:a1:87:ee:6f:0d:65:0a:5e:8f:a7:3c:fc:72:
13:ee:64:0d:aa:63:72:75:20:bd:c1:c9:e4:73:93:21:21:e9:
9f:82:a9:b9:e4:30:c7:b7:1b:42:70:46:31:dc:a6:2b:97:80:
81:45:a5:7d:45:3f:b8:36:d2:6b:d1:b6:64:bb:03:5c:b2:0b:
76:dc:8a:c2:75:4e:7b:cf:76:cf:84:47:ee:dc:fb:d4:ed:18:
74:07:46:0b:0d:c9:4b:12:db:38:9d:20:26:c4:85:3c:e5:62:
b4:c4:fe:7d:b0:ab:59:de:b6:61:88:8a:55:9a:a3:82:93:8f:
be:fb:d3:cf:a3:50:ff:d3:e2:81:e2:56:12:0e:dc:cb:67:93:
4e:0a:68:a0:f5:28:d8:64:fc:b7:e7:5d:24:31:cb:e7:a4:2b:
b7:97:db:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org