Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkT30ynqGi6UseGDriMlhVBVJVE.roa
File: OkT30ynqGi6UseGDriMlhVBVJVE.roa (raw, json)
Hash identifier: ILhiXA+54dDMUxxDhlI6jjorXV7Yf93G4YRarsk7H/A=
Subject key identifier: 3A:44:F7:D3:29:EA:1A:2E:94:B1:E1:83:AE:23:25:85:50:55:25:51
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182FF0486135E12059D5B7124663652D841
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkT30ynqGi6UseGDriMlhVBVJVE.roa
Signing time: Fri 02 Sep 2022 16:24:22 +0000
ROA not before: Fri 02 Sep 2022 16:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 185.230.53.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
185.223.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ff:04:86:13:5e:12:05:9d:5b:71:24:66:36:52:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 2 16:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a44f7d329ea1a2e94b1e183ae23258550552551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:e7:7a:fb:d8:6b:e7:ba:b1:17:51:33:5c:
db:60:6f:a5:7e:62:8e:30:b4:03:4d:6f:80:51:c7:
c3:d1:f3:89:4a:76:1a:e6:a2:4c:ea:16:2c:61:4e:
9b:1e:ba:c4:3d:43:ff:d6:a3:5c:3a:29:3c:1a:56:
45:85:3b:d9:2c:04:b7:9e:1c:82:4e:56:d0:0a:39:
b7:02:6d:11:fb:7e:d1:9b:45:96:2f:90:e8:49:22:
f7:3d:ee:47:34:b9:93:a0:2c:df:6e:b7:40:95:2e:
77:cf:d4:3f:02:fd:7b:f7:3b:dc:1f:d8:22:96:d3:
86:e1:64:99:97:b4:99:1a:3b:74:f8:9a:09:d8:af:
f2:28:69:53:7f:73:c9:71:c5:84:64:62:42:63:a1:
82:38:6f:71:c7:fd:ce:f0:c2:e6:c1:69:fb:df:d2:
a1:44:85:36:8f:6b:25:7f:31:09:ea:c1:d2:52:84:
15:30:68:0e:e8:ce:c4:7b:17:35:11:83:6a:4f:69:
05:c4:8e:3e:8e:6d:67:43:30:3e:a6:62:7e:6d:6d:
f0:f4:62:b1:77:58:c2:2f:ae:0a:05:97:df:34:f4:
a2:a5:7e:90:03:a3:25:7f:73:87:1d:18:51:05:45:
ba:31:21:61:93:ec:53:74:e9:c3:86:5f:91:4a:07:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:F7:D3:29:EA:1A:2E:94:B1:E1:83:AE:23:25:85:50:55:25:51
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/OkT30ynqGi6UseGDriMlhVBVJVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
185.223.79.0/24
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:04:3f:ae:03:60:b1:5b:3c:eb:e0:3d:7c:95:7d:c6:7d:
06:3b:65:d0:08:ae:49:74:7a:2e:02:48:57:8e:5d:88:38:88:
0f:25:ce:70:0a:26:fe:04:d7:7b:77:53:87:e2:40:72:57:e2:
6c:48:d8:e9:00:94:ac:e4:00:0b:9c:aa:03:8b:1e:eb:3a:09:
fb:4e:f5:e5:a5:c2:02:8b:48:ba:d5:ed:90:75:b2:b1:78:9c:
a6:c5:a9:e6:c6:8d:69:82:b9:7d:57:47:db:1e:9d:57:0c:59:
ed:e0:69:0b:8b:11:9f:4d:df:5d:3d:f3:fd:2c:63:40:28:58:
f9:21:df:f2:23:54:e0:8e:4a:2f:b3:6d:10:12:42:48:a8:ac:
12:54:e3:ea:77:2c:87:96:5f:68:3f:05:2e:f5:18:39:f0:7f:
1e:d6:1a:33:e9:f9:ca:fd:1c:13:56:10:47:d1:d2:98:e1:3b:
7a:17:9e:a3:24:49:63:4c:e5:54:53:71:0d:ad:38:be:d5:af:
03:62:db:3e:ae:8b:2a:5a:72:54:4b:d7:95:b4:3d:7a:e2:35:
90:10:08:ed:fa:79:64:7c:93:9f:7e:8b:57:0c:f8:98:c8:60:
d7:bd:fa:f0:e3:ab:19:50:02:dc:4c:ce:61:a6:f9:da:03:16:
81:cf:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org