Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/C2D6inllYf7Ixhej0NOBOCEaImo.roa
File: C2D6inllYf7Ixhej0NOBOCEaImo.roa (raw, json)
Hash identifier: aAFBPXSYAejUTbfNvIlRL5YKXySulyNXOdGbyR/5NbE=
Subject key identifier: 0B:60:FA:8A:79:65:61:FE:C8:C6:17:A3:D0:D3:81:38:21:1A:22:6A
Certificate issuer: /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial: 0182C4C8E27084E88F661A176A1C68406D02
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/C2D6inllYf7Ixhej0NOBOCEaImo.roa
Signing time: Mon 22 Aug 2022 09:01:15 +0000
ROA not before: Mon 22 Aug 2022 09:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203932
IP address blocks: 185.198.241.0/24 maxlen: 24
2a13:4700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:c8:e2:70:84:e8:8f:66:1a:17:6a:1c:68:40:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Validity
Not Before: Aug 22 09:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b60fa8a796561fec8c617a3d0d38138211a226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:56:86:48:24:aa:a7:54:cb:3f:a4:3b:49:
96:02:e4:55:fc:85:98:3a:57:0b:63:b4:80:64:00:
a8:dc:a5:fe:16:4a:2e:e5:90:84:3c:ad:1c:8b:b2:
66:83:f4:cb:be:4c:4b:66:03:07:eb:ec:ce:47:8d:
68:02:3b:c6:e7:4d:fe:d3:50:61:9d:ee:12:bd:c4:
e3:de:7b:5a:c1:b9:25:b3:f8:08:ce:ab:b5:80:3c:
28:3d:e2:aa:94:19:b6:69:af:13:34:81:0f:e5:04:
41:3e:65:1f:66:15:77:b1:38:df:5e:5d:3f:d8:c6:
52:1f:53:9c:4a:ee:a1:c1:f0:df:a6:ac:f7:a0:b5:
89:60:9b:05:07:80:f7:03:92:9a:8a:9c:7d:a5:fb:
99:dd:fd:a2:bd:27:c8:de:1a:9a:3e:b2:27:08:77:
24:98:46:ee:ab:aa:76:ef:63:e8:df:93:80:46:24:
3e:9d:0e:c4:06:b8:07:88:df:9c:b3:13:c0:cb:3d:
80:68:2f:69:80:c2:2a:a7:4a:be:66:4d:52:f6:de:
14:71:cb:b7:a9:b8:a8:b7:70:5b:07:42:7e:15:cb:
c8:cd:b2:6a:a1:5b:f1:7d:04:49:53:31:fc:bc:6d:
c1:b0:c5:96:1a:02:f5:19:3b:7a:46:9a:fc:d8:40:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:FA:8A:79:65:61:FE:C8:C6:17:A3:D0:D3:81:38:21:1A:22:6A
X509v3 Authority Key Identifier:
keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/C2D6inllYf7Ixhej0NOBOCEaImo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.241.0/24
IPv6:
2a13:4700::/29
Signature Algorithm: sha256WithRSAEncryption
10:96:c0:c7:41:04:cf:27:42:dd:4c:a0:49:00:f8:d2:68:30:
18:1c:03:dd:a6:df:68:45:3a:bb:d8:fe:ab:92:3d:41:bc:15:
87:2c:68:04:8a:20:72:7f:01:68:06:cb:d6:c8:21:70:6a:25:
8c:08:cd:7a:b7:2e:fe:bc:3a:93:b1:59:e3:20:1e:49:4b:b6:
c1:9a:81:0e:ac:a4:db:d2:7c:d6:50:69:83:7c:de:4f:ab:38:
0e:dc:20:50:4a:0b:3f:d2:02:98:1e:04:ef:e3:00:f3:ed:7d:
4b:b5:fe:86:c3:c4:95:f8:64:6a:6d:25:03:fb:d1:d7:8b:ca:
5b:2f:a8:2d:a2:99:ef:83:38:46:64:49:87:3f:97:07:a1:dd:
6b:9f:84:3d:fb:44:8a:9f:35:86:5d:7d:32:4a:e7:3b:e4:be:
00:52:84:4f:9e:60:3e:3b:42:14:d6:c4:71:79:c3:a7:90:12:
c3:3a:a6:59:1d:56:eb:30:28:b7:e5:1b:64:eb:2b:ec:de:ce:
64:02:8a:be:ee:3b:a4:6e:80:cf:bd:d0:dd:07:e9:cc:49:7d:
e4:20:19:2b:ab:62:bd:59:90:48:30:22:e8:f2:11:cc:78:a6:
aa:e4:26:f1:7e:cd:5b:48:9d:12:23:4f:d1:90:77:5d:53:63:
5f:b4:2c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:06 2024 by rpki-client on console-fra.rpki-client.org