Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-uG_IJM6aip5p_UyfwgEVoxpdPA.roa
File: 1-uG_IJM6aip5p_UyfwgEVoxpdPA.roa (raw, json)
Hash identifier: AnbXA7gQ6ceNr//IICVkLeflAnOUCN6Ib+cUFgGQ620=
Subject key identifier: FA:E1:BF:20:93:3A:6A:2A:79:A7:F5:32:7F:08:04:56:8C:69:74:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018533D5C6BB23822E258813EB25FC5FC785
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-uG_IJM6aip5p_UyfwgEVoxpdPA.roa
Signing time: Wed 21 Dec 2022 08:38:46 +0000
ROA not before: Wed 21 Dec 2022 08:38:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 185.223.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:d5:c6:bb:23:82:2e:25:88:13:eb:25:fc:5f:c7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 21 08:38:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fae1bf20933a6a2a79a7f5327f0804568c6974f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:71:a2:ea:14:f7:90:ac:3f:0f:00:b3:13:
55:0e:e7:6a:ae:6b:20:da:ed:bb:08:c3:21:57:c0:
8e:1f:fe:45:92:03:03:fe:de:f0:5a:c1:e8:81:f2:
8f:3d:35:c7:0f:f2:59:ad:c3:d9:27:c4:ef:43:9b:
78:0e:86:fd:58:b9:e1:18:ea:d6:4a:be:56:34:63:
9d:91:36:fc:bc:d4:f8:ce:e9:94:8b:d7:43:b0:9c:
14:ce:e2:08:a5:c0:39:77:2e:65:28:03:59:7f:31:
02:e8:24:80:cc:11:57:72:d2:3f:b9:50:28:0e:d9:
08:4b:69:4c:93:5a:b0:9d:ab:f0:e1:ff:da:bf:05:
10:33:c7:92:c2:ad:66:93:b1:04:7d:e7:90:11:a5:
25:f8:c3:f1:82:10:9c:5b:64:fe:25:7d:6b:c9:7f:
4d:c4:91:8e:45:34:b5:5f:da:f4:0d:07:d6:28:95:
f4:f6:2f:9a:b7:7a:92:04:8a:02:f3:43:0e:6d:2a:
5d:63:1c:6f:3b:d3:10:5b:fe:cb:30:36:50:bf:0b:
5e:fe:57:60:a0:09:14:3b:91:f7:f6:4e:8d:cf:81:
25:dc:e0:a6:4d:1a:10:d6:0c:66:69:95:36:8d:e0:
30:42:d7:79:fa:33:ad:87:08:4d:e1:17:df:33:71:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:BF:20:93:3A:6A:2A:79:A7:F5:32:7F:08:04:56:8C:69:74:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-uG_IJM6aip5p_UyfwgEVoxpdPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:4f:09:fe:76:3a:94:7d:56:22:24:17:6c:75:37:6e:69:e7:
52:ac:bc:27:cb:15:b0:9e:88:b3:2f:1d:36:52:6f:db:1b:7a:
d3:26:fc:30:a2:f0:52:7a:21:49:15:97:d1:52:d7:a7:11:8f:
27:93:b7:d5:ce:7a:e3:68:27:52:ff:49:d6:2a:92:5e:9f:34:
40:6e:a2:f9:73:98:13:e8:ea:cc:33:13:db:f0:3f:fd:ec:a8:
4c:d1:dd:df:e7:7f:c1:5c:3b:a4:a5:44:5c:e0:92:d8:10:6e:
e5:cd:51:99:61:23:c1:08:e9:32:f3:74:04:0d:f1:4a:9c:49:
25:28:f7:eb:70:33:7a:a4:8c:49:e8:f3:97:e1:a2:25:3c:0c:
3d:39:a2:0f:6e:91:af:7a:17:bb:c9:68:cb:4f:c5:21:49:81:
03:94:7c:9f:69:63:1d:31:a1:1c:3d:1f:f8:87:86:6d:cc:1e:
0b:10:88:76:f4:e7:1b:f3:2a:0b:01:74:5b:ea:76:a0:3d:d4:
52:0c:be:b8:d2:70:be:1d:38:27:6e:9a:e1:9e:2b:56:94:a6:
29:0b:7b:7e:6f:65:ee:aa:03:4d:4f:c5:aa:86:f1:59:19:8e:
06:78:b6:74:35:48:97:13:5e:02:c8:e3:66:13:b4:e0:61:9c:
1d:7e:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org