Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sihr9sH0ObFvKeJE32eeKXhm_k.roa
File: 1-sihr9sH0ObFvKeJE32eeKXhm_k.roa (raw, json)
Hash identifier: AzQT+DRPuuw/I54e+6ZfJzwFTwYDqeWTqDV7VFJ1xDU=
Subject key identifier: FA:C8:A1:AF:DB:07:D0:E6:C5:BC:A7:89:13:7D:9E:78:A5:E1:9B:F9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06420DE7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sihr9sH0ObFvKeJE32eeKXhm_k.roa
Signing time: Sat 01 Jan 2022 06:52:38 +0000
ROA not before: Sat 01 Jan 2022 06:52:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198193
IP address blocks: 185.246.58.0/23 maxlen: 23
185.246.56.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104992231 (0x6420de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fac8a1afdb07d0e6c5bca789137d9e78a5e19bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:01:75:5a:8d:3a:ad:0f:69:c8:2b:40:a6:
6d:ec:c6:99:d6:5a:92:74:c2:a6:25:49:47:6e:11:
d5:b7:a4:9a:9e:4f:d0:64:13:55:5f:55:8e:ef:8f:
99:46:7b:19:b6:65:91:42:7c:3d:6a:22:ca:de:77:
9b:8d:53:bd:7f:a7:00:c6:36:77:c5:81:1b:6d:cd:
0f:71:77:ea:e4:61:6a:3a:36:ea:ba:7c:93:5c:47:
b2:7c:7a:d8:f1:8b:3f:83:b6:96:19:a6:fa:fb:b9:
69:38:e3:06:ce:d2:90:85:d9:63:5b:b1:f0:12:28:
5d:11:c5:ec:dc:cd:00:50:31:cb:d0:32:0d:76:c6:
e1:cb:52:b4:bc:a9:e6:12:f6:c7:6f:7e:12:00:37:
4d:c2:3c:70:fc:fd:6b:e3:f7:f6:96:c2:cd:b0:5e:
54:db:fc:11:de:fe:9b:96:1e:21:f1:4a:5b:9c:3f:
26:eb:4a:23:72:6b:72:93:fa:db:17:4f:05:c7:21:
32:45:74:81:7b:02:f4:d6:a8:83:9e:7f:6a:99:78:
a6:63:13:56:b1:3e:16:14:76:e0:d4:f8:0f:d0:b9:
bc:fc:ff:2f:34:df:27:62:29:45:f8:e0:7c:f5:5d:
6d:e5:47:dc:5c:d4:6e:1f:17:a1:2d:87:64:26:f8:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:A1:AF:DB:07:D0:E6:C5:BC:A7:89:13:7D:9E:78:A5:E1:9B:F9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-sihr9sH0ObFvKeJE32eeKXhm_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.56.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:62:0f:a0:6a:1d:95:02:69:e2:66:d6:03:22:c6:c4:23:c2:
c2:73:69:0f:8b:b0:f3:d9:dc:4f:c0:f6:87:90:54:f5:ae:46:
ad:bc:2c:b7:a7:56:57:85:a0:9c:d9:15:c1:78:e7:8a:5d:b3:
5b:3f:b8:e9:68:e1:c1:81:29:28:43:75:fe:ee:46:b8:f0:f0:
a4:4a:b9:b4:72:48:f1:23:39:ce:88:0f:76:3f:3c:d4:c5:60:
e9:c2:da:44:08:f2:c6:af:1d:3d:56:1d:f1:85:9a:d8:cc:11:
74:ee:34:51:e1:a7:c6:c4:d6:5a:49:0e:02:ad:a8:56:24:47:
16:14:28:97:f8:c5:98:12:07:ba:ea:3a:18:b4:54:d7:8c:50:
cb:10:9d:ef:27:c3:ac:6c:14:31:dc:14:bf:59:6b:75:42:4b:
0d:ae:dd:4c:7e:00:26:db:cf:7a:12:f6:30:2e:b7:a9:17:08:
2e:77:a1:3b:87:c6:fd:5f:8f:c7:6c:cb:1a:cb:2d:85:d8:3b:
bc:81:98:8a:87:16:3b:d4:02:aa:29:d2:bd:96:e9:59:39:18:
52:42:01:cd:19:37:ed:62:39:3a:fe:54:c5:ab:d3:c8:3f:e7:
5b:84:68:69:5e:27:8b:ea:b5:30:de:a7:11:fe:8d:43:67:3f:
d2:22:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org