Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3Cdodl3VN-MG7NK0W3kYA1rDQ9g.roa
File: 3Cdodl3VN-MG7NK0W3kYA1rDQ9g.roa (raw, json)
Hash identifier: cD2BkFMyxlR4Xoeev4llwiby9YGQFI3eIZCN8iQiEh0=
Subject key identifier: DC:27:68:76:5D:D5:37:E3:06:EC:D2:B4:5B:79:18:03:5A:C3:43:D8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06C235ED
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3Cdodl3VN-MG7NK0W3kYA1rDQ9g.roa
Signing time: Sun 06 Feb 2022 18:33:07 +0000
ROA not before: Sun 06 Feb 2022 18:33:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.255.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113391085 (0x6c235ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 6 18:33:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc2768765dd537e306ecd2b45b7918035ac343d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:b5:86:63:fe:b9:9d:f4:4e:57:47:71:16:
2b:30:d4:57:a2:ad:98:21:24:9c:43:02:fa:c4:7e:
ff:6c:de:04:a7:97:84:71:d9:2a:e7:33:67:2e:bc:
72:90:52:23:b3:b7:ac:39:22:09:e2:61:fb:9f:ee:
1e:28:4c:9a:64:04:9f:e7:08:b1:42:33:72:17:2d:
38:d0:a6:6d:09:bd:9e:da:31:4f:0c:19:78:33:be:
51:e9:05:4f:2b:80:6e:eb:98:b2:a6:20:eb:15:79:
a0:22:d8:1c:9e:ec:f2:8f:96:65:71:19:47:ba:ef:
fd:e3:56:34:00:76:08:5b:5b:e7:e9:71:5e:ed:92:
dd:8f:2d:2c:be:00:10:01:95:56:55:19:2c:0e:23:
e3:ee:2c:f5:b6:a2:93:83:46:d1:9d:db:02:85:fe:
c6:32:8e:db:46:c6:8e:d2:9f:b4:bf:bc:5d:25:54:
40:31:ef:0e:fb:18:65:86:89:57:ac:e2:c9:ea:fd:
01:a7:91:d1:67:19:43:98:1f:1f:54:ef:55:fe:f5:
d2:1e:9d:72:4a:d3:32:f5:3f:43:d2:83:c9:cb:8c:
86:52:9e:9f:ae:71:9b:d2:18:e0:15:77:dc:d9:da:
8d:a6:5a:f5:4b:50:9a:10:57:6e:88:6b:3c:b4:c6:
69:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:68:76:5D:D5:37:E3:06:EC:D2:B4:5B:79:18:03:5A:C3:43:D8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3Cdodl3VN-MG7NK0W3kYA1rDQ9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.124.0/22
Signature Algorithm: sha256WithRSAEncryption
20:f2:24:08:a7:6a:0b:7d:0f:0b:f8:9d:57:f5:e6:9d:52:bc:
3b:8d:43:4c:17:fa:90:9f:dd:84:f7:ff:37:38:a8:b2:e8:27:
9a:0a:6b:73:ae:48:a7:b6:5d:b3:fe:7f:ec:e9:0f:08:90:6f:
2d:1d:06:47:a5:77:e2:4b:61:99:c7:16:7b:14:04:18:9b:da:
62:5b:a2:41:52:56:eb:4a:e9:eb:b6:30:cb:7b:dc:10:36:75:
2f:56:da:60:6b:77:28:1a:56:78:78:aa:92:67:4c:da:b0:48:
6f:e9:03:0f:43:bb:9c:bf:20:bf:ea:1c:4c:f9:30:bc:21:ef:
a9:27:03:72:dc:00:e6:c5:41:8b:27:3f:81:67:72:88:0a:99:
2a:d3:d9:59:4a:07:ae:30:c2:fa:c8:62:81:e8:da:25:16:73:
72:e1:0e:78:52:40:c6:bf:36:c6:de:1f:aa:2b:3a:99:07:4c:
92:52:34:77:0e:a5:d2:c3:3f:81:31:f6:1c:7a:a5:9f:b7:b8:
72:db:0f:9a:16:32:ac:a2:d6:92:38:a9:f2:b6:8f:d5:82:26:
01:40:c3:c9:a9:de:75:39:4a:8d:8e:5f:12:57:c6:c5:03:a3:
b7:f7:c1:97:6a:9c:7f:a2:86:01:f7:64:68:a0:07:ed:fd:ed:
11:cb:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org