Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ig9x5lQFd3JiYiIpqLnn4FL-eVY.roa
File: Ig9x5lQFd3JiYiIpqLnn4FL-eVY.roa (raw, json)
Hash identifier: NJ7G/dWi6oWhu/6Emu+Pq+QJ7+uQhUDJbR/7aSDJ2Rc=
Subject key identifier: 22:0F:71:E6:54:05:77:72:62:62:22:29:A8:B9:E7:E0:52:FE:79:56
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018216C6337C2E61680765DD80587E0EC28E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ig9x5lQFd3JiYiIpqLnn4FL-eVY.roa
Signing time: Tue 19 Jul 2022 14:04:24 +0000
ROA not before: Tue 19 Jul 2022 14:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 185.225.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:c6:33:7c:2e:61:68:07:65:dd:80:58:7e:0e:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 19 14:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=220f71e65405777262622229a8b9e7e052fe7956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:92:0b:34:eb:b4:63:42:b5:f8:71:6f:b0:
30:b8:b2:de:a2:12:70:7f:ab:71:6b:4a:c9:68:ef:
fa:e0:39:94:e5:52:bf:83:de:ba:b9:78:b3:92:e0:
52:d5:33:70:01:87:0f:60:a1:a3:87:39:96:c2:91:
74:29:e0:b3:c9:1c:d0:8a:33:9e:59:5d:f4:29:8e:
3e:e4:b4:30:f2:e6:e5:60:d7:62:e2:6b:70:b9:cc:
fa:22:41:bc:ae:b0:b4:fb:9c:07:c8:56:35:18:c1:
da:1b:28:e8:b8:6f:fa:57:f5:fc:a1:f1:18:98:05:
cf:7a:b7:75:1a:a8:da:d1:c7:96:ea:be:66:7f:64:
67:a2:50:e1:03:b5:e2:52:7f:18:41:e0:34:34:79:
89:6c:87:f8:36:67:27:04:38:de:67:b3:6b:70:6e:
00:b6:91:24:ca:82:43:cd:a8:f1:69:9b:65:c5:37:
da:07:a1:b2:ed:84:11:c3:50:3f:01:03:91:89:f6:
da:86:71:36:b7:5c:1f:f7:00:01:a1:5f:9d:eb:f1:
33:67:9c:fb:78:85:1e:4f:f0:c2:79:59:f5:f1:48:
90:48:b6:79:ad:cb:f1:ec:8d:a7:67:ab:3f:b8:2b:
3d:f0:0f:be:88:59:91:90:9b:f7:49:9b:cb:ba:2b:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0F:71:E6:54:05:77:72:62:62:22:29:A8:B9:E7:E0:52:FE:79:56
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ig9x5lQFd3JiYiIpqLnn4FL-eVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.2.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a3:1b:b3:b5:fe:07:50:0f:e5:e3:6b:71:fd:92:6e:6b:b4:
c3:04:8f:92:c3:79:6b:c9:1d:4c:47:4f:e9:4d:ce:55:d2:00:
9e:c2:15:37:43:85:ae:64:ca:0a:ff:d4:63:03:61:bb:57:5f:
5c:81:15:05:cc:17:b8:13:99:be:9c:81:27:98:d6:59:36:cc:
43:75:0f:33:7e:63:03:b7:3f:32:8d:d6:31:e4:ce:dc:42:48:
46:f4:ed:da:12:df:7b:97:b3:a5:d5:b7:13:d1:b8:b9:ec:ff:
ab:22:bb:04:a8:0b:94:e4:a6:a2:84:a1:be:23:bb:ec:7c:ab:
f1:1b:ff:fa:87:c1:92:65:08:83:1c:0f:ab:b2:6a:5b:8e:c0:
be:bb:d0:6f:85:19:36:87:ff:c0:1a:dd:a5:94:a3:9c:cf:c3:
67:43:07:39:74:d9:1f:ca:02:e4:d0:1e:ac:7a:08:b6:3e:d1:
d1:b3:4f:aa:f1:82:17:f2:9d:a5:52:e0:6a:94:36:d5:09:ac:
01:ba:53:8a:0f:34:73:12:ce:2b:8b:e8:50:60:9a:a1:56:fe:
65:d2:6c:08:02:d3:20:a4:ec:22:85:0d:7f:52:0c:64:1e:ea:
99:d1:27:3b:7c:cf:84:7f:87:c3:94:65:58:fe:79:82:3b:dd:
9c:bc:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org