Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K7CGDtljkPbESDASoDrBA78sX3M.roa
File: K7CGDtljkPbESDASoDrBA78sX3M.roa (raw, json)
Hash identifier: rn0+QGa7rzoUaaml4ndcWBA6DxbtX+R5iha170byBng=
Subject key identifier: 2B:B0:86:0E:D9:63:90:F6:C4:48:30:12:A0:3A:C1:03:BF:2C:5F:73
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01826D461344102A1B63A294F999EFB017A7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K7CGDtljkPbESDASoDrBA78sX3M.roa
Signing time: Fri 05 Aug 2022 09:11:25 +0000
ROA not before: Fri 05 Aug 2022 09:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 185.226.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:46:13:44:10:2a:1b:63:a2:94:f9:99:ef:b0:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 5 09:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bb0860ed96390f6c4483012a03ac103bf2c5f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9a:a5:80:64:28:bc:ce:ff:71:cf:52:b2:ce:
14:85:82:61:01:2c:29:b6:f8:ce:0a:13:01:54:57:
0a:a6:2e:3e:87:78:1d:46:12:b9:5d:aa:d7:5d:13:
36:2b:a5:cb:c5:16:87:de:93:ce:52:5f:3b:03:07:
87:c0:73:62:8b:6f:e6:8f:c5:7e:bd:a0:dc:e1:e4:
20:a3:2d:86:24:ee:48:35:59:02:c2:ac:db:96:75:
6e:74:af:6b:57:6b:4f:ea:76:20:da:a4:78:e8:f6:
67:1c:8a:ce:bd:b1:29:cd:43:cb:66:d4:8a:44:ca:
53:b1:5f:9e:42:9f:79:f9:7b:df:40:0e:79:68:fd:
5e:9c:0d:30:e1:92:15:3a:ba:bf:e7:81:66:42:06:
15:62:83:7f:2f:88:c8:45:33:5d:36:a9:e4:3e:e2:
af:f9:1c:75:c8:a8:71:a1:b1:e4:a8:4a:26:23:d7:
97:f6:81:17:80:9c:20:43:3b:4f:ca:c9:b0:05:38:
c2:10:2d:c9:b7:b4:c9:a6:96:6a:51:df:01:3c:38:
d3:fd:3f:3e:2c:fb:d7:fc:18:b8:d0:ea:60:35:b0:
16:68:92:34:f2:1a:84:95:b7:1e:a6:12:c1:d1:39:
8a:64:8a:48:54:15:55:9e:50:56:d9:78:6b:d2:56:
f3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B0:86:0E:D9:63:90:F6:C4:48:30:12:A0:3A:C1:03:BF:2C:5F:73
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/K7CGDtljkPbESDASoDrBA78sX3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.104.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:06:b0:dd:33:eb:d7:93:d1:de:99:26:fe:46:b1:26:cd:
95:9a:0a:63:60:89:a5:23:ab:17:b3:d3:74:45:39:f7:b9:e3:
44:e6:d2:15:2d:e9:2a:b8:61:75:c9:38:74:4a:bb:fe:5e:9c:
cc:2f:d0:97:86:18:f2:1c:a2:92:db:6d:dc:fe:3e:93:7c:33:
7d:2e:a3:3c:8a:f1:b7:9b:38:2d:1a:b0:a4:41:b0:0c:e6:0c:
c5:4f:a7:8a:3d:77:d0:ce:1a:65:66:7a:32:3b:b1:8c:3a:21:
bb:e9:fa:f8:3c:27:a2:2b:23:ee:93:87:ea:10:33:db:f2:dd:
63:f9:80:3b:ef:db:6f:77:22:b1:9b:32:0d:b4:3a:bd:61:aa:
19:f7:4d:fd:24:f5:49:6b:dc:06:0a:3c:64:71:32:51:a7:2a:
d0:0f:bb:47:b2:ce:7d:ee:bb:68:e9:3c:4c:df:83:92:d5:ed:
68:90:80:a6:19:1b:26:d8:21:10:70:52:5d:8e:4a:50:60:bd:
09:6f:80:0d:80:e8:9a:4e:62:0c:54:05:dd:cc:5a:0b:36:77:
4d:d7:eb:3b:6f:77:d1:ff:b5:c6:ae:11:4e:39:b6:b2:d7:14:
9c:85:1f:b1:37:db:19:e6:81:ec:5c:77:70:87:87:69:21:f0:
e9:a2:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org