Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/tXoDIrOrAny470DGOquFJyvrH80.roa
File: tXoDIrOrAny470DGOquFJyvrH80.roa (raw, json)
Hash identifier: KpqNu5LDLRzJ5C+WQ+wjLOXPYqX0qaS70b09SnPbvPw=
Subject key identifier: B5:7A:03:22:B3:AB:02:7C:B8:EF:40:C6:3A:AB:85:27:2B:EB:1F:CD
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: C29090
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/tXoDIrOrAny470DGOquFJyvrH80.roa
Signing time: Tue 08 Feb 2022 07:42:06 +0000
ROA not before: Tue 08 Feb 2022 07:42:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60398
IP address blocks: 185.249.105.0/24 maxlen: 24
185.249.107.0/24 maxlen: 24
185.249.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12750992 (0xc29090)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Feb 8 07:42:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b57a0322b3ab027cb8ef40c63aab85272beb1fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:29:9c:53:af:83:e5:47:f0:22:a5:1f:4e:
d6:c3:8a:08:50:93:08:98:30:c1:5a:77:80:34:da:
51:89:1d:73:42:03:30:a4:8c:46:a1:a3:97:d8:a2:
d1:c2:3a:c6:27:29:1f:a1:fd:7d:6a:9f:08:38:71:
2c:1a:90:7c:16:c1:c1:01:88:8e:49:c5:d5:67:b2:
a1:24:5e:36:da:66:54:31:be:c0:d7:e5:50:7c:d9:
74:e5:16:df:b4:69:05:ef:d4:84:32:8c:c6:dc:e4:
eb:04:b3:3a:33:99:bb:4d:c3:a4:30:26:d6:d3:f7:
eb:d0:bc:ef:0f:fc:fb:3e:03:3c:19:32:64:6c:ea:
e3:bc:b7:7d:00:d0:de:9e:f0:a7:8a:7e:ae:32:7c:
f4:74:4a:cb:fb:65:31:25:81:66:57:e9:77:8e:cb:
a2:de:43:ba:f2:cc:29:0f:da:f0:26:f0:2a:67:e0:
1a:de:71:5c:be:8d:4a:f3:42:01:36:53:6c:f3:da:
79:c9:6e:a6:6d:4d:bd:03:db:69:bd:24:13:4d:09:
a2:6e:dd:70:71:ea:ce:38:43:61:11:f9:71:7a:8b:
03:0f:2b:b4:d4:d5:18:7e:89:d4:06:3c:98:ed:24:
2d:f1:fa:87:62:5b:63:4f:53:93:b8:10:1f:2f:59:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7A:03:22:B3:AB:02:7C:B8:EF:40:C6:3A:AB:85:27:2B:EB:1F:CD
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/tXoDIrOrAny470DGOquFJyvrH80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.105.0-185.249.107.255
Signature Algorithm: sha256WithRSAEncryption
3a:90:f8:59:7f:58:cc:42:03:06:0d:34:8f:4e:a0:04:e7:79:
44:6a:1d:29:d8:83:2c:28:b6:7f:f3:15:ae:59:58:5c:33:ca:
a7:76:ac:a0:2b:9f:fb:a4:76:df:aa:d7:4c:0d:55:da:92:fa:
72:6b:20:2a:b5:99:e9:f5:d4:a4:03:26:36:38:2b:fc:8e:ca:
79:ee:8f:8a:11:5d:5c:72:7f:bf:1c:60:90:91:f7:8b:77:99:
5e:b8:fc:80:bb:c2:6a:63:5a:8c:1a:d5:9b:ae:8b:9f:5f:27:
61:af:14:46:ad:3c:6e:9d:72:1d:70:3d:e8:16:79:f0:2a:43:
d4:a4:ec:9e:75:f1:93:3b:f7:35:5c:c7:16:61:30:52:7e:8c:
8f:72:bc:97:23:5f:b9:9b:9e:e0:78:11:b9:18:30:aa:b4:c3:
ae:e8:5e:6f:b6:26:2c:a6:c5:4c:52:03:47:88:a9:7b:b9:3a:
df:40:ce:40:0c:9d:aa:30:b0:b3:15:b5:2d:ce:e2:a0:63:06:
6c:fe:4c:75:29:7c:78:c5:be:de:91:fb:4b:99:09:fa:65:72:
bf:8a:2b:a0:76:92:f6:50:94:6a:ce:69:20:a5:81:a1:d0:18:
63:f1:12:da:3f:46:ae:2b:3d:2d:7f:9f:b1:09:a6:89:d4:d0:
11:ec:16:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:19 2024 by rpki-client on console-fra.rpki-client.org