Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4sFz-TgdaA6XUyTfrBa01E92b4.roa
File: I4sFz-TgdaA6XUyTfrBa01E92b4.roa (raw, json)
Hash identifier: vJflrU9ArEsgkbChg8ueJvD8oKXIwS/s5wqUsXDsbjQ=
Subject key identifier: 23:8B:05:CF:E4:E0:75:A0:3A:5D:4C:93:7E:B0:5A:D3:51:3D:D9:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0655FD32
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4sFz-TgdaA6XUyTfrBa01E92b4.roa
Signing time: Sat 01 Jan 2022 06:52:47 +0000
ROA not before: Sat 01 Jan 2022 06:52:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213006
IP address blocks: 185.214.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106298674 (0x655fd32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=238b05cfe4e075a03a5d4c937eb05ad3513dd9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:d8:f8:b0:a3:96:cd:5e:e7:89:86:6f:92:
ab:8b:50:62:f3:aa:02:58:07:c7:ff:29:6b:ec:4e:
b6:6a:2d:84:08:a0:8b:27:50:71:b8:0f:0a:4f:59:
11:6c:de:13:a2:40:c0:ad:8d:9b:7d:d8:d6:8e:24:
bd:75:ec:58:4b:88:cd:18:05:8a:38:e6:04:d4:86:
af:3e:dd:49:a9:b8:36:1c:d9:62:d8:ae:0a:8f:7e:
70:ab:f4:6d:7e:8c:70:a6:ce:5c:97:1a:c4:c5:df:
6a:8a:7a:a2:74:14:94:3c:14:35:ae:c3:b3:09:6c:
90:13:d7:c9:8b:3d:e4:b8:8d:1d:a8:e2:49:5f:b7:
25:ef:a8:53:ee:b6:d5:51:1b:f0:64:48:e1:04:a8:
25:fd:83:5a:d2:f8:e6:65:f2:66:5a:f6:17:03:f7:
6c:c0:0a:b2:e6:05:28:d8:82:11:90:a3:7e:e0:51:
eb:2d:34:fa:5e:29:99:6d:26:db:06:ab:ce:56:70:
89:90:d8:ae:13:85:5a:f3:6c:dc:6d:56:15:94:96:
4d:ba:40:a9:b1:44:f9:1a:b3:09:6c:80:c9:e5:79:
66:28:ad:95:1f:25:fc:5b:11:51:fb:ae:21:59:52:
7c:78:b7:2b:07:f8:e5:3d:c1:3b:a0:76:78:c4:17:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:05:CF:E4:E0:75:A0:3A:5D:4C:93:7E:B0:5A:D3:51:3D:D9:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/I4sFz-TgdaA6XUyTfrBa01E92b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.84.0/24
Signature Algorithm: sha256WithRSAEncryption
29:05:a6:33:9a:dd:27:90:d3:f1:04:1c:26:82:f1:e2:fa:57:
eb:fe:27:ea:07:8a:d6:4b:c9:53:ec:22:73:af:a4:47:85:2a:
a0:bd:35:73:c2:43:c5:d0:9c:87:a1:1f:dd:e1:ea:84:1c:d8:
f4:45:b2:d8:97:6e:b3:90:b3:ed:cd:ef:e5:a1:51:4f:18:d8:
b2:75:c6:4a:b0:23:5c:43:84:d5:5d:7b:eb:95:8b:9e:ba:94:
01:65:18:07:62:ac:1b:6a:6a:ea:88:fd:2a:16:d6:14:cd:c2:
4e:b3:26:59:12:f3:d2:9c:60:85:6e:ef:6d:a2:2f:57:61:f6:
aa:94:28:e9:a3:3d:7e:b7:81:73:5c:6c:3c:a3:3e:30:94:1b:
6a:d6:7a:21:af:d1:ce:3b:79:6d:73:fe:9b:aa:c7:0f:fb:0e:
75:32:9c:52:38:2d:72:78:73:7b:25:2d:73:b9:50:43:ba:46:
1b:e5:83:4f:67:db:37:60:23:27:2b:5d:45:58:73:dc:7e:22:
ed:53:02:c9:9f:f9:46:12:e5:c4:c2:c9:49:aa:0f:fd:6d:61:
56:e7:b3:74:81:2d:ea:b1:cf:b7:f2:37:b0:02:4b:a3:25:ff:
6e:d3:2d:45:16:d5:32:a0:56:15:a0:85:5c:43:dc:2b:bb:8d:
d1:fd:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org