Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/2eJAvVtEpqWcOHJFBEC3_Yr0S-4.roa
File: 2eJAvVtEpqWcOHJFBEC3_Yr0S-4.roa (raw, json)
Hash identifier: sE5H916TBK9u7GVDw+DplwlRSnUg+eqRjOegInf+cM4=
Subject key identifier: D9:E2:40:BD:5B:44:A6:A5:9C:38:72:45:04:40:B7:FD:8A:F4:4B:EE
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 098E1159
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/2eJAvVtEpqWcOHJFBEC3_Yr0S-4.roa
Signing time: Sat 01 Jan 2022 05:01:04 +0000
ROA not before: Sat 01 Jan 2022 05:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207207
IP address blocks: 185.32.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160305497 (0x98e1159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 1 05:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9e240bd5b44a6a59c3872450440b7fd8af44bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:c7:4d:5b:0c:b5:bb:cc:3a:3d:6b:c2:c6:
f1:70:2e:f1:9b:18:71:51:cd:d3:fe:64:22:b6:13:
ed:d0:75:ad:af:36:47:f1:e0:79:53:46:b2:29:c6:
7f:2e:d2:09:a0:64:a0:4a:87:35:5f:5f:8a:28:dc:
33:dc:2d:6b:0f:0a:09:44:ee:d4:f1:6b:e9:b8:d2:
ee:99:61:90:75:af:6e:66:96:b5:3b:2a:08:1c:8d:
78:48:ba:c5:a4:87:e4:9a:f9:fb:64:47:1d:87:46:
6b:41:85:dc:b7:82:56:eb:66:ad:cb:a5:62:fc:d9:
a3:00:9b:a5:8a:52:65:bc:c8:95:c1:5c:a3:c0:da:
5d:5e:d3:35:5f:c1:bc:4b:53:8c:64:ac:c9:65:3d:
aa:21:a8:2f:1b:50:f4:71:9f:00:69:26:a7:a1:16:
d0:ae:72:ee:c2:16:53:65:91:6e:a9:6b:69:d4:5f:
76:76:d1:01:af:7a:6f:f7:4b:33:b9:07:27:71:61:
fe:5b:aa:1b:40:37:d4:fb:61:bf:6f:2d:dc:bf:22:
7f:eb:0a:4b:2c:ae:56:bf:dc:f6:6c:9c:47:5a:ee:
65:81:67:d9:43:bd:f0:67:12:27:6a:10:b5:a2:de:
6f:bf:1e:f0:e8:f9:cf:74:86:39:36:88:1f:0d:6e:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:40:BD:5B:44:A6:A5:9C:38:72:45:04:40:B7:FD:8A:F4:4B:EE
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/2eJAvVtEpqWcOHJFBEC3_Yr0S-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.186.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fe:28:6c:4d:0c:aa:77:de:1c:75:ce:57:ed:ea:09:d6:30:
c2:12:85:12:24:1b:8c:c8:6e:57:40:bf:58:77:90:bd:74:0a:
9b:bb:e9:7d:91:09:02:74:13:ed:ac:c7:d4:7c:3f:76:eb:5a:
a0:d7:e2:2a:b3:6f:fb:5b:34:fb:92:23:c0:b4:7d:31:40:45:
0e:35:19:94:b6:27:2f:6d:66:87:c4:6b:47:b9:e3:fc:20:d8:
df:86:56:5d:c1:fc:ae:bd:20:9a:5f:3a:f1:c8:5d:87:bf:c9:
ba:58:19:4d:5e:d0:8c:1a:68:87:1c:a0:db:ff:e0:d9:1d:42:
65:68:25:03:95:bf:69:6e:ae:1c:58:a4:b9:7c:5c:86:81:c2:
89:40:6e:f4:1d:b6:9b:1d:54:20:6a:d9:86:1e:27:90:51:82:
0f:0d:9f:e3:0f:5a:ee:4f:06:d9:d9:65:21:3c:4b:54:66:8a:
51:2c:32:9e:2c:72:4e:07:8c:88:a0:8b:3a:67:20:b9:5a:ec:
6d:3f:01:fe:59:82:44:1c:40:e6:b4:dc:ec:c6:fe:df:da:a0:
39:3f:27:68:88:07:ac:fc:f9:4c:71:0c:66:49:73:f0:56:61:
c3:29:71:72:8d:16:5f:c9:f9:54:f3:c9:e2:79:85:ba:79:1c:
39:ef:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org