Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ek-GE4dNPVM-BPRVFKYB4KPzsfA.roa
File: Ek-GE4dNPVM-BPRVFKYB4KPzsfA.roa (raw, json)
Hash identifier: JxBbZbVP0WyzapL5LfTiATO+/AmpRc3Yw9Zfdnw9jBI=
Subject key identifier: 12:4F:86:13:87:4D:3D:53:3E:04:F4:55:14:A6:01:E0:A3:F3:B1:F0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0183EB7F4C1DC9699827CF1EDA7D461BBAC5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ek-GE4dNPVM-BPRVFKYB4KPzsfA.roa
Signing time: Tue 18 Oct 2022 14:28:51 +0000
ROA not before: Tue 18 Oct 2022 14:28:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50666
IP address blocks: 185.228.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:7f:4c:1d:c9:69:98:27:cf:1e:da:7d:46:1b:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 18 14:28:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=124f8613874d3d533e04f45514a601e0a3f3b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:b0:aa:64:ca:a4:37:b9:db:5c:cf:06:26:
d4:c3:24:03:bd:91:b0:21:59:4d:9c:a3:66:29:74:
ed:75:e1:e5:5c:67:14:1e:02:75:74:01:59:92:e6:
a4:fa:fa:68:84:55:39:99:8f:da:e4:f8:2f:fd:b7:
a5:cd:a8:5c:64:2c:ac:f3:1f:19:61:16:cf:21:5d:
36:e4:a8:e3:e3:c1:3e:8d:90:98:61:99:a1:5f:6c:
70:b3:4e:02:4e:79:26:8c:13:e7:d6:c9:fa:ce:16:
2b:f1:9a:8e:73:ae:80:37:63:40:7e:6c:40:db:ac:
2a:26:6b:34:e9:fe:65:aa:8d:aa:3d:48:27:42:ce:
80:12:a3:32:d7:a8:de:06:be:07:82:7f:f8:eb:69:
47:ca:87:18:0f:6d:33:1b:bd:d2:1e:0d:df:ee:88:
52:04:8c:8c:fd:6e:bd:79:d1:01:65:bd:8d:ba:b2:
74:75:98:29:3a:9f:63:5c:56:50:96:1e:83:a2:00:
ef:b2:d3:de:07:81:c2:d9:5b:3b:e5:ef:bf:c4:63:
57:cb:e3:f9:c8:67:30:f4:ac:49:f2:5a:d0:06:5c:
9a:f2:96:de:a8:2f:27:f0:f4:9a:97:a4:28:43:0f:
13:cb:d5:1c:8b:02:03:b1:05:fe:b0:9d:8f:34:c3:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4F:86:13:87:4D:3D:53:3E:04:F4:55:14:A6:01:E0:A3:F3:B1:F0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ek-GE4dNPVM-BPRVFKYB4KPzsfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:b1:2c:24:c5:4a:52:2e:0d:46:d0:bc:ee:c1:22:ff:10:9c:
d1:15:51:3e:87:ca:5c:ac:a7:f2:84:79:a7:37:08:b4:f4:4d:
67:f8:50:74:b4:01:1e:cb:1a:05:b1:f7:68:05:e2:1e:af:26:
dd:95:bd:e9:43:a2:14:f0:a1:1c:92:4f:12:d8:f9:20:a7:1e:
9b:29:cd:78:25:52:cd:6d:ad:99:aa:27:c4:7b:fb:8d:3d:9c:
17:a8:e7:3e:ff:85:20:fd:dd:11:b0:78:65:e5:97:dc:e9:1a:
7d:2c:12:90:50:8e:c7:f5:da:8b:1a:a3:fe:e0:e6:d1:3b:d1:
60:78:4b:07:9d:af:0e:fb:e3:c0:55:f9:97:11:3d:cb:a6:16:
22:76:6f:71:83:11:ff:9d:5c:da:83:7f:47:0c:ee:05:d3:23:
78:27:62:76:ae:87:ee:79:f9:52:5f:79:f4:b3:b6:1d:15:16:
98:6f:96:74:37:74:e0:d5:bd:86:30:42:b8:ad:9f:fe:a0:08:
7e:91:52:1b:02:0f:2a:a6:09:02:5f:21:18:5c:3f:83:d0:a1:
b2:47:40:fd:3f:8a:fb:89:82:de:5b:e7:97:64:bb:a1:b4:72:
e5:ed:99:56:86:82:fa:48:bd:7f:3a:09:a2:83:0b:85:7e:71:
08:48:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org