Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/t3T0GnrS7cCAmgHk0_SJEzxVpWI.roa
File: t3T0GnrS7cCAmgHk0_SJEzxVpWI.roa (raw, json)
Hash identifier: TvaeyN6fZF8erIguqIyIlohqY7r1nWuxVej+XDIcHl0=
Subject key identifier: B7:74:F4:1A:7A:D2:ED:C0:80:9A:01:E4:D3:F4:89:13:3C:55:A5:62
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 6CB0CE
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/t3T0GnrS7cCAmgHk0_SJEzxVpWI.roa
Signing time: Sat 01 Jan 2022 01:59:26 +0000
ROA not before: Sat 01 Jan 2022 01:59:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204352
IP address blocks: 185.249.105.0/24 maxlen: 24
185.249.104.0/24 maxlen: 24
185.249.107.0/24 maxlen: 24
185.249.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7123150 (0x6cb0ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jan 1 01:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b774f41a7ad2edc0809a01e4d3f489133c55a562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:bd:36:50:fa:32:6b:1d:af:c4:6c:46:6d:
dc:9f:7e:4e:c8:82:63:1f:c9:67:eb:f9:8c:27:d4:
29:a6:cc:41:aa:0a:f0:9c:38:49:a4:dc:7b:49:03:
47:7b:29:60:cd:2e:e7:e4:7c:6b:1c:28:72:1e:14:
6f:e2:6f:2a:cc:81:6a:38:fc:26:b2:f5:29:2f:c1:
77:9f:2b:4f:9c:3b:e4:67:69:5d:77:d1:e9:82:5a:
71:a2:c2:34:c5:74:47:a5:b4:77:a5:e0:97:d3:ef:
b8:3f:f6:97:2a:11:74:c1:2f:e1:f7:b6:d1:75:9e:
28:ff:5e:61:c4:b1:d8:8a:1a:be:4c:23:f7:d9:82:
6d:e8:d6:6f:cc:92:80:42:76:45:29:67:18:04:23:
1b:dd:96:b2:fa:73:e1:a5:b5:48:5c:e0:82:1f:52:
2d:b8:27:85:c5:1b:17:10:15:1a:e0:88:43:33:5d:
48:16:42:3b:f4:66:85:21:92:c9:de:42:3c:3f:56:
8f:da:56:13:e4:fa:89:88:f9:92:f0:af:c1:e6:ae:
cb:6e:d2:b0:dd:de:da:dc:87:01:ff:35:eb:1c:90:
ad:e1:c0:ad:a7:89:5e:4a:58:98:b0:24:10:13:8d:
07:a6:a6:c4:4c:30:9b:65:21:1b:7b:92:c2:31:c5:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:F4:1A:7A:D2:ED:C0:80:9A:01:E4:D3:F4:89:13:3C:55:A5:62
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/t3T0GnrS7cCAmgHk0_SJEzxVpWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.104.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:a3:34:a5:78:cd:4f:26:56:df:06:50:50:15:6a:69:10:74:
65:b5:ef:92:a7:29:86:f4:3d:06:53:1a:20:b2:0e:c9:77:62:
2e:e3:77:5d:d3:8a:f6:3b:44:9a:d7:ac:24:33:83:93:8d:e3:
56:f5:a6:d0:bb:ee:54:42:5a:bc:d5:74:f5:1f:16:fc:b9:7f:
d6:02:4d:5b:7f:77:3a:31:85:86:21:dc:5e:18:ba:8d:e0:48:
77:f7:8f:81:6b:83:b1:e3:ba:3f:de:2c:75:cf:20:dc:e4:9c:
43:80:bb:55:a6:7a:f4:a4:0d:9d:f9:09:33:88:b4:85:a7:d1:
31:76:7e:ea:17:7a:ca:96:4e:33:88:25:89:14:12:39:60:c6:
68:6e:1f:25:59:cd:c4:31:4c:9a:90:54:77:70:25:96:a4:5d:
70:aa:cd:40:1c:d1:13:19:33:23:40:45:91:96:08:31:aa:cb:
f6:16:31:bc:53:51:ed:9d:6a:fa:36:e1:16:5f:48:a6:ea:45:
f1:69:5b:b6:13:9d:47:24:47:65:aa:d1:6f:8c:e1:d5:6f:3e:
a6:87:06:89:75:f8:f7:49:b9:91:3c:67:4f:6c:72:1d:83:11:
20:94:49:b1:9e:ce:0c:85:79:42:1c:b4:00:50:91:af:a7:d2:
06:af:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org