Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L4xgukHcCRjBIbsSryJYZmT85Rw.roa
File: L4xgukHcCRjBIbsSryJYZmT85Rw.roa (raw, json)
Hash identifier: vu0HWKTnBJbT+G0nTdGmLF5V44Ncz/lU7+J8mMjBTS8=
Subject key identifier: 2F:8C:60:BA:41:DC:09:18:C1:21:BB:12:AF:22:58:66:64:FC:E5:1C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 071EEBB3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L4xgukHcCRjBIbsSryJYZmT85Rw.roa
Signing time: Wed 09 Mar 2022 09:31:37 +0000
ROA not before: Wed 09 Mar 2022 09:31:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.223.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119466931 (0x71eebb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 09:31:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f8c60ba41dc0918c121bb12af22586664fce51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:f6:55:45:bf:47:fb:f7:76:73:91:69:d7:
4f:25:d3:47:61:16:77:d0:d5:18:ed:6e:ba:3f:db:
c1:9e:98:68:45:75:f9:13:c1:cc:2c:f4:56:7d:08:
4b:21:d2:d0:8c:c7:51:a9:c2:5e:9c:81:ad:3b:64:
87:37:d5:19:99:a2:e1:5e:fb:de:ad:93:30:7a:ba:
d4:eb:9e:a5:e3:3d:02:27:41:b4:ab:1a:ca:c6:d8:
a1:ae:03:06:44:ad:52:98:39:69:82:8a:92:cb:c8:
0d:64:b2:38:a4:93:a7:06:7f:19:67:42:81:18:8d:
1a:06:4d:2e:00:13:8c:e0:85:65:89:fb:fb:17:24:
2f:02:fc:a3:32:65:db:c1:5a:03:38:01:4b:49:f8:
3d:57:17:b9:12:a3:89:d9:28:fc:9b:dc:49:0b:3e:
d1:a2:51:bb:1e:18:14:dc:56:b0:e9:c1:3c:d7:e0:
fd:64:99:a7:a5:ce:4b:d6:dc:4a:ba:1f:fc:60:5f:
ab:b8:4c:2a:de:dc:34:98:2d:d1:a6:89:78:06:a4:
46:71:b6:2a:ff:02:90:d2:51:7e:32:f9:1b:b2:6b:
23:94:ca:7c:fa:43:0f:14:85:f2:dd:83:ed:ed:f6:
6b:37:0e:a2:38:cd:66:3b:2d:a6:00:e2:18:e6:ae:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8C:60:BA:41:DC:09:18:C1:21:BB:12:AF:22:58:66:64:FC:E5:1C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/L4xgukHcCRjBIbsSryJYZmT85Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.153.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a5:67:24:77:b1:1e:9a:df:63:b1:20:7a:35:c8:2a:b0:a0:
a4:48:65:7d:d8:3d:aa:7c:a6:e3:49:ae:89:83:6a:12:0a:f5:
d8:8b:f2:b9:1d:00:13:7a:46:51:de:d5:b5:e5:1e:02:22:ae:
b3:fe:2a:6d:51:db:92:de:88:cf:47:ee:2c:42:22:91:a0:7a:
69:05:76:f2:d3:9e:dd:73:c0:7f:50:15:ec:58:d0:f6:17:09:
eb:ce:87:3f:f2:80:9b:05:0c:ed:1f:5b:a4:7b:a9:ea:d1:6a:
1c:3e:9e:d8:91:04:74:a1:9a:f5:db:2d:f4:a5:c5:48:ec:9e:
18:0e:48:2d:73:09:8c:6f:4d:32:a1:ac:ab:15:b2:61:f4:f9:
e2:77:e1:e0:2f:e0:01:49:33:6f:b0:ed:b5:fe:ee:63:35:f6:
2f:cf:ac:6d:78:e0:ac:86:ca:e6:8d:ce:c9:c3:d7:82:59:cc:
73:10:9e:c8:60:7d:01:81:6a:6a:dc:ea:ad:79:26:8b:6b:bb:
cb:14:5c:b3:d5:93:75:6f:d3:ad:cf:59:48:91:ff:0b:42:62:
59:fc:7d:4d:d6:bf:b5:dc:66:c9:10:11:f0:94:11:5f:f8:1f:
f2:0b:3a:1f:66:a8:90:a1:42:60:6c:1d:c5:61:7a:14:aa:f8:
79:7f:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org