Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/9WX2Hg4m374VvcNkg4Aoc-3ch1U.roa
File: 9WX2Hg4m374VvcNkg4Aoc-3ch1U.roa (raw, json)
Hash identifier: BamNVU/+TY3kxdih6XFYZc7fDJuW+VWPcxpkVYDHqW8=
Subject key identifier: F5:65:F6:1E:0E:26:DF:BE:15:BD:C3:64:83:80:28:73:ED:DC:87:55
Certificate issuer: /CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Certificate serial: 0182CA629F33F11CA18724FA774D57F2B6BA
Authority key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/9WX2Hg4m374VvcNkg4Aoc-3ch1U.roa
Signing time: Tue 23 Aug 2022 11:07:17 +0000
ROA not before: Tue 23 Aug 2022 11:07:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48918
IP address blocks: 185.250.110.0/24 maxlen: 24
185.250.109.0/24 maxlen: 24
185.250.108.0/24 maxlen: 24
185.250.108.0/22 maxlen: 24
2a0c:c40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:62:9f:33:f1:1c:a1:87:24:fa:77:4d:57:f2:b6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Validity
Not Before: Aug 23 11:07:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f565f61e0e26dfbe15bdc36483802873eddc8755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:83:71:c5:a3:7f:07:34:5b:99:73:89:d6:68:
72:e8:64:6c:0d:67:0e:53:f6:e7:7b:41:b3:84:18:
e8:65:53:b3:fd:a3:1c:87:89:f3:b7:6a:e5:10:e5:
b4:f0:8f:6f:39:62:0e:0e:86:1e:0d:3f:11:49:f0:
99:9e:76:f4:6b:c8:dd:34:3a:9f:f1:2a:06:4c:ed:
e8:0f:f9:e3:25:eb:9d:53:62:be:c4:cd:d7:52:de:
ed:2b:90:97:db:dd:8b:3b:f4:0c:50:02:10:68:54:
0e:f5:44:64:fa:46:e1:a3:4f:38:1c:3a:86:93:13:
a5:3d:e3:ac:13:e2:80:95:dd:63:e7:62:61:14:b8:
d5:8c:7c:d6:17:f9:de:1f:d7:d8:1f:8c:bf:54:34:
65:70:c0:3a:52:83:f3:96:a2:c3:79:54:4e:2c:88:
8e:76:61:9d:fa:01:7d:53:f8:c8:ae:2e:4a:3b:8d:
54:9f:38:b3:4d:c6:df:cc:36:1c:c1:1b:0a:e1:90:
af:3c:7c:7e:54:f6:ba:3d:4a:cb:d2:60:aa:6c:17:
2b:bf:80:8c:9b:5f:41:ef:05:b3:9a:5c:83:54:15:
8c:e2:9e:b9:3e:55:72:c8:51:01:2d:09:c5:67:70:
f9:64:9f:98:36:87:2f:0f:38:ab:e3:d9:d2:54:2e:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:65:F6:1E:0E:26:DF:BE:15:BD:C3:64:83:80:28:73:ED:DC:87:55
X509v3 Authority Key Identifier:
keyid:39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/9WX2Hg4m374VvcNkg4Aoc-3ch1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.108.0/22
IPv6:
2a0c:c40::/32
Signature Algorithm: sha256WithRSAEncryption
66:ab:b4:1f:17:7e:8e:d7:fe:f8:7c:17:cb:38:f8:be:3d:b3:
b7:09:3f:6a:4a:a4:9b:76:ed:88:3b:f4:26:82:68:4b:df:d7:
fe:d6:0e:3f:79:99:a7:dc:fd:7e:6e:4c:c1:2b:ab:d6:6c:1c:
cf:66:2f:77:81:cd:f2:91:08:29:8e:97:cd:b1:0e:32:4e:96:
7a:fc:48:01:9d:44:34:a7:a9:cb:81:1b:55:fb:e5:c4:bc:a3:
77:0c:09:2b:8d:ee:b4:75:00:05:e5:f4:ba:6f:57:fb:2a:0d:
26:da:24:be:5d:8d:4a:61:78:17:ab:7e:da:83:11:7b:50:53:
92:d9:6d:3b:a2:f0:1e:54:95:d2:2c:fa:bf:39:36:34:b1:2d:
49:13:ab:31:f6:7a:4c:41:00:5e:62:18:cd:6e:af:74:18:80:
e2:33:15:5a:8d:de:fb:a1:f0:eb:ed:d3:ab:d5:71:db:8e:4d:
bb:e1:d7:61:56:19:d3:89:d9:57:12:00:84:74:e2:45:f7:82:
42:64:91:4d:60:3f:05:ed:21:14:90:e9:fc:8e:cd:28:82:24:
90:46:56:88:13:5a:f1:ef:3c:53:6f:0b:2e:12:11:9e:dc:3a:
e5:4f:22:43:24:2e:b3:6f:45:ac:9c:f4:98:bc:f4:57:be:3d:
19:ec:2d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:54 2024 by rpki-client on console-fra.rpki-client.org