Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OfUNaq5EhMXEGxVr6Nl9xhPX9mQ.roa
File: OfUNaq5EhMXEGxVr6Nl9xhPX9mQ.roa (raw, json)
Hash identifier: zMsNG5dJ976ghMO2pqnhhPQtxFWiX84Mr4Shg+Rdpvc=
Subject key identifier: 39:F5:0D:6A:AE:44:84:C5:C4:1B:15:6B:E8:D9:7D:C6:13:D7:F6:64
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01826DD21F2EB24F7C1E4CD53494B0D360E9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OfUNaq5EhMXEGxVr6Nl9xhPX9mQ.roa
Signing time: Fri 05 Aug 2022 11:44:23 +0000
ROA not before: Fri 05 Aug 2022 11:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34779
IP address blocks: 185.246.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:d2:1f:2e:b2:4f:7c:1e:4c:d5:34:94:b0:d3:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 5 11:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39f50d6aae4484c5c41b156be8d97dc613d7f664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:3b:0c:6b:ac:0e:9a:0b:81:10:eb:c8:9e:
42:10:7f:94:21:88:55:d5:26:a6:e2:95:59:bf:a4:
0c:00:14:2e:28:13:76:82:bb:f4:ba:90:43:ec:d9:
24:b9:10:d1:fd:4c:5a:64:5b:e9:c6:cc:c5:d1:7d:
1a:fc:f7:5e:f6:2d:d2:51:8f:19:b0:85:dd:8d:3d:
68:35:2b:fa:44:d1:05:26:3e:3e:29:0d:b9:80:a1:
00:bd:b4:17:5b:d6:75:bb:a0:04:a1:79:ae:51:2a:
7d:b5:08:79:52:de:68:bb:17:cd:64:f3:31:e8:3c:
44:d0:31:aa:f7:4a:13:ca:be:a3:d9:5c:65:db:2c:
13:c9:59:56:f8:f0:51:17:40:e1:72:4d:1a:b4:2a:
b0:84:fe:21:5d:cf:95:b6:fc:c4:0b:79:64:a7:07:
a5:34:44:2d:1e:2e:7a:9f:67:01:41:4c:d0:2f:12:
aa:4a:e9:45:64:0a:de:13:58:4d:4d:7b:36:bb:2f:
55:c0:61:a1:73:1a:37:bc:a4:27:c2:19:5b:e0:87:
e6:4b:a7:8f:8b:cc:e8:28:48:a8:ef:28:2f:97:6e:
9a:7a:1b:99:e9:3a:80:78:4e:8c:c8:d5:d2:b7:1d:
c4:6e:d2:d8:6e:ee:3c:ea:8f:94:f6:a9:23:fa:5c:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:0D:6A:AE:44:84:C5:C4:1B:15:6B:E8:D9:7D:C6:13:D7:F6:64
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OfUNaq5EhMXEGxVr6Nl9xhPX9mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
92:64:a8:82:d6:83:99:b0:3b:c5:4e:7f:39:75:55:0f:fc:1f:
b1:c7:ee:c9:f9:d4:8c:b6:f9:ab:d5:59:50:bc:48:5d:24:8b:
3a:d1:cb:c9:01:78:af:ea:61:97:a3:13:7b:a2:a9:9b:28:6f:
20:29:f1:61:42:24:80:dc:2b:0e:5e:52:06:f9:de:ec:c6:58:
f9:1d:18:31:c5:a7:e1:d7:e4:4e:b9:68:5c:b1:b4:9e:74:67:
78:a4:d1:2c:01:5e:e9:7b:ad:a8:fe:70:ae:ac:97:dc:14:92:
8d:a8:b7:a0:7a:51:c3:49:fb:86:63:f0:37:eb:7b:11:3e:24:
16:08:23:05:33:3d:33:05:bd:92:59:fd:0b:c3:d4:e5:a2:3c:
7f:a5:77:6e:4c:b5:3e:0d:d8:2d:a5:6c:0b:3c:8a:83:09:57:
90:f1:e5:6f:9d:24:65:6f:25:b7:4a:56:70:61:a4:cd:f0:7c:
72:4c:05:57:eb:71:6a:f2:4a:1f:5a:40:a6:1b:db:29:ce:8c:
93:e4:89:00:99:6b:3a:2d:40:10:06:9a:3b:3d:6a:3a:fe:49:
06:a2:6f:fe:4e:c5:d0:c6:f0:2d:e3:e0:a8:b9:c0:df:c3:6b:
56:bf:1f:f4:da:f9:0f:6c:0e:88:f1:23:0e:cd:c5:44:8c:2f:
0e:18:5c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org