Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RAioQfqnvSSUFneq1gQ9yG2Pe8w.roa
File: RAioQfqnvSSUFneq1gQ9yG2Pe8w.roa (raw, json)
Hash identifier: twOJzj2uHjp2L5RwMw+ltZYvpnotwwqgYiViPKRvfII=
Subject key identifier: 44:08:A8:41:FA:A7:BD:24:94:16:77:AA:D6:04:3D:C8:6D:8F:7B:CC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 063A6A48
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RAioQfqnvSSUFneq1gQ9yG2Pe8w.roa
Signing time: Sat 01 Jan 2022 06:52:32 +0000
ROA not before: Sat 01 Jan 2022 06:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 185.234.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104491592 (0x63a6a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4408a841faa7bd24941677aad6043dc86d8f7bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:55:f3:63:24:58:17:0d:9e:15:61:76:a4:
94:77:fe:07:d6:b2:80:98:b8:a0:42:32:37:96:5c:
0c:ba:5d:de:ed:03:d6:4a:54:11:31:44:c0:ed:ee:
15:25:f6:49:8f:36:3c:b2:ac:c8:3f:f0:05:b9:8f:
b2:49:06:5b:3a:68:21:6a:af:ca:67:7d:bd:60:30:
3d:3c:66:2d:33:5f:8e:10:08:3b:c4:e1:aa:7d:fb:
e8:66:a2:81:23:35:0c:cd:da:f8:f1:91:a5:29:e6:
e1:44:1d:0f:ba:5f:b5:dd:5a:30:eb:07:3b:46:05:
63:c6:21:97:93:50:7e:cf:f2:c6:15:1a:42:f3:e2:
f8:b3:7f:39:f4:2f:d0:1f:26:a0:c3:23:92:6f:9d:
e3:20:26:1b:00:c8:45:9f:73:fa:a6:1c:23:09:7f:
05:f4:1b:82:93:13:08:70:1d:3a:62:d0:e4:4d:cd:
2d:29:51:a8:c8:5e:1c:10:d5:c5:ba:9a:29:da:cd:
e8:0e:50:b1:de:bc:1d:cb:e9:5c:29:fb:f9:be:dc:
16:c3:52:e9:fd:ce:b6:ec:28:0f:ba:95:24:07:d2:
93:1e:63:4c:1f:c1:a4:87:25:5a:b2:06:ec:55:d2:
54:fd:ca:90:15:d3:e3:a7:55:f0:31:66:66:2a:b1:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:A8:41:FA:A7:BD:24:94:16:77:AA:D6:04:3D:C8:6D:8F:7B:CC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RAioQfqnvSSUFneq1gQ9yG2Pe8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3e:a9:2b:b6:f5:b8:73:cd:40:84:ed:69:7d:fd:08:7a:b2:
7d:63:0e:b4:41:e7:d4:4e:b3:b3:bd:3c:84:99:8c:4f:1e:f9:
ae:e3:b9:c1:82:ea:68:d4:72:2d:59:8b:94:6d:85:91:c0:3d:
1f:ce:07:b6:07:d5:04:7d:08:50:ae:e4:7a:6c:ec:25:53:42:
d7:8a:c4:ef:2d:31:ad:2e:a8:e5:0d:7f:07:63:8c:eb:eb:fe:
4a:84:d3:64:1f:79:5a:e6:1c:cb:ba:da:ed:91:18:da:f4:60:
63:ea:00:59:2c:9b:e1:40:d1:76:5b:6e:e9:d4:bf:ab:31:49:
96:12:96:84:84:a0:bf:7f:5a:91:33:6e:99:fa:92:d9:bc:97:
06:3f:89:0a:8d:c2:d5:9d:75:fd:b3:39:24:29:7c:cf:e8:75:
63:70:c4:8c:1a:99:5d:be:c1:13:b4:47:6c:d3:e7:1e:a7:61:
05:ed:83:0d:62:64:a9:16:d8:7a:db:a4:4e:45:c3:c9:b8:8a:
f9:a4:fb:e6:a9:c1:3b:6c:98:01:55:79:da:4a:63:bc:e4:e8:
a0:6c:9f:67:63:9c:4d:d5:f5:4b:c3:ed:6c:e9:c5:f1:d1:f9:
38:1b:4c:a9:91:af:2f:c1:68:87:ab:11:97:72:3a:08:fd:90:
6c:24:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org