Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/638zF_g85MN85clCAZlXe-kBLeg.roa
File: 638zF_g85MN85clCAZlXe-kBLeg.roa (raw, json)
Hash identifier: rKvnWoU97r436LJ9noZT0kjPS5tkZu7TRwe1XWLXzLQ=
Subject key identifier: EB:7F:33:17:F8:3C:E4:C3:7C:E5:C9:42:01:99:57:7B:E9:01:2D:E8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06DF9D8D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/638zF_g85MN85clCAZlXe-kBLeg.roa
Signing time: Sun 13 Feb 2022 13:03:47 +0000
ROA not before: Sun 13 Feb 2022 13:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.240.120.0/22 maxlen: 24
185.223.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115318157 (0x6df9d8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 13 13:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb7f3317f83ce4c37ce5c9420199577be9012de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:cc:4c:e0:6d:95:80:61:96:0a:e0:88:77:
95:71:bd:7b:51:4b:83:8b:19:24:34:c3:ac:6e:c9:
96:3a:74:73:d0:2f:36:99:6b:ee:bc:d5:d5:6a:ca:
5a:4b:d7:31:79:7b:36:7f:ac:15:cc:65:2b:02:d6:
91:cb:cc:c8:f8:54:ca:d9:98:84:e0:77:78:de:81:
02:f0:82:1a:d8:88:dc:bd:6c:57:96:e8:fe:0d:f1:
9d:b0:c5:18:f8:bd:3f:f6:54:33:ba:3b:97:c8:86:
ae:c0:8c:a0:ee:47:c2:7a:8c:15:c6:52:64:5a:ae:
28:4c:1d:aa:3c:ea:ed:c3:d1:3b:bf:cc:e6:f4:7d:
d1:8b:f6:c9:74:a3:17:d4:82:93:56:ef:29:0b:c9:
65:bb:25:b7:77:1e:25:cc:7c:c9:c1:ac:ad:1c:c2:
07:dd:e0:93:de:f5:0e:9c:e4:ad:83:28:37:34:f1:
bb:29:c5:f6:8a:95:7b:97:c4:74:88:36:2a:e1:c7:
10:23:38:80:78:4f:36:20:08:7e:1e:bd:7a:0b:a3:
c2:59:20:d0:67:87:cb:f7:36:f1:8e:12:b9:e4:1b:
47:e0:7b:3c:19:28:6d:22:45:6d:e6:ac:d6:92:6a:
e7:a7:e4:c5:39:85:40:c7:ba:2c:07:5e:c1:04:a7:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7F:33:17:F8:3C:E4:C3:7C:E5:C9:42:01:99:57:7B:E9:01:2D:E8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/638zF_g85MN85clCAZlXe-kBLeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.76.0/24
185.240.120.0/22
Signature Algorithm: sha256WithRSAEncryption
64:14:d5:ac:cc:dd:0c:f1:b3:fe:6a:1a:31:2d:6a:c2:95:ac:
c7:90:79:e6:ed:e1:89:8c:da:60:48:84:74:79:7c:7e:16:3a:
bb:96:c7:ed:7c:ce:3b:99:41:a3:d7:5a:13:bd:39:42:9b:e5:
a0:c3:51:9d:a2:5c:a2:70:81:c2:85:4b:7e:5f:0a:48:80:78:
d9:85:86:24:9d:95:b6:bc:bb:81:0e:aa:e4:14:b0:e7:c3:95:
3d:09:c6:9f:b0:e6:22:44:57:48:dc:01:cf:80:34:96:12:7b:
e5:09:06:aa:ab:d9:ee:73:f3:5b:87:b0:d1:92:61:ec:82:9d:
a5:49:b2:de:1c:b1:1a:07:f6:c0:74:77:20:40:30:6f:ac:e6:
88:29:ba:ff:f2:18:b3:d9:67:4f:9a:b7:60:cf:0d:30:c2:22:
8e:d1:f2:f4:9f:93:5f:1c:73:3a:a4:08:a9:57:eb:bd:9c:90:
bb:ef:38:52:95:2f:91:45:72:66:3b:87:ce:8e:c4:82:7e:cc:
80:d7:98:51:c1:45:58:bd:4a:16:96:78:c7:8c:76:3e:7d:8b:
9d:6e:4e:1a:bf:7d:30:99:8b:8c:ef:19:e5:28:70:c3:ed:04:
d4:25:7e:c8:b4:f1:28:a5:bf:29:c4:3c:20:ad:82:93:db:45:
00:fc:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org