Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RW7BnkXuhvTGG2yOyG-PC3VlbiU.roa
File: RW7BnkXuhvTGG2yOyG-PC3VlbiU.roa (raw, json)
Hash identifier: qHNIm8qv8Y3Ecc9rpcIhTNrXmyIwTrKqFTXQ3T1uqTE=
Subject key identifier: 45:6E:C1:9E:45:EE:86:F4:C6:1B:6C:8E:C8:6F:8F:0B:75:65:6E:25
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06D8058D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RW7BnkXuhvTGG2yOyG-PC3VlbiU.roa
Signing time: Sun 13 Feb 2022 12:56:31 +0000
ROA not before: Sun 13 Feb 2022 12:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 185.255.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114820493 (0x6d8058d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 13 12:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=456ec19e45ee86f4c61b6c8ec86f8f0b75656e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:8b:db:8d:0e:80:86:a0:f2:73:18:bb:fe:
8a:d6:e4:e3:8a:0d:d1:bd:97:81:bd:44:3e:b8:e3:
56:62:2d:af:52:27:a6:b3:d2:19:02:07:67:74:dd:
57:ba:be:74:1d:3e:71:43:74:b3:b1:79:7b:4e:84:
f6:87:9d:b6:e2:e8:90:df:cb:f5:28:cb:c7:5b:16:
01:5f:20:69:ee:31:18:a3:bd:94:a3:6f:c5:8d:aa:
76:0c:59:20:c4:73:15:3e:c9:dc:9f:23:b5:f9:bc:
c8:71:fa:40:76:f9:a7:31:0b:d3:42:4d:71:b2:3b:
93:3a:f4:53:0c:8c:e1:e8:70:b3:88:a4:1a:db:9b:
94:7d:95:c7:dd:b4:c5:f3:8b:3a:0c:9e:d1:df:5b:
27:9a:4b:1f:8f:07:87:c3:89:53:84:69:66:8d:f2:
0b:1b:2c:ea:b7:b8:36:f3:cd:2c:db:78:e4:df:27:
40:06:11:08:24:48:60:43:04:05:23:d3:ce:18:80:
95:e0:db:af:1c:4d:4f:71:a0:fa:d0:51:42:4b:3c:
b9:fa:d0:90:bd:57:b6:2d:24:2d:84:47:a0:c7:50:
4e:fb:e6:98:88:6a:27:90:17:5c:0c:66:2b:ad:17:
73:7a:e7:fa:99:f7:32:4a:3b:23:f7:95:dc:b3:b1:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:C1:9E:45:EE:86:F4:C6:1B:6C:8E:C8:6F:8F:0B:75:65:6E:25
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RW7BnkXuhvTGG2yOyG-PC3VlbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.125.0/24
Signature Algorithm: sha256WithRSAEncryption
40:1d:cb:dd:84:47:6a:db:47:1e:91:6b:73:4b:e0:3b:72:0e:
19:ae:81:f7:90:cd:2e:69:8a:d3:74:e7:c8:1b:f9:e4:47:74:
d7:a7:a0:87:e2:46:5b:eb:bc:52:e5:28:9a:2b:45:8a:80:10:
da:e5:6b:de:9e:60:c3:65:c4:40:95:e1:48:51:33:e1:3a:82:
4b:61:f9:2c:db:62:83:b9:0c:12:45:b2:1e:bb:39:94:61:ec:
89:62:45:69:bf:0d:40:bd:dd:04:13:87:36:29:51:c7:94:c0:
d8:7e:29:ce:f3:d0:e1:2d:c7:95:be:a9:cc:a3:ad:19:af:c0:
7d:e4:73:7b:36:6a:b6:a3:88:3b:47:63:ec:72:3a:08:9b:d9:
10:c8:b1:02:61:47:62:6b:3a:be:45:65:3b:72:56:82:25:d2:
4f:4d:4c:54:e7:e6:bd:7a:83:7b:95:76:fb:f8:bf:1e:d1:fd:
04:6b:d1:95:c6:3c:e3:8f:b7:07:43:ed:65:f2:b5:67:6d:97:
06:9b:b4:81:eb:04:e8:79:b3:5b:51:da:2b:fd:3e:63:1d:d2:
50:a0:ac:5a:49:48:bc:fd:32:49:c1:9e:aa:ae:c5:3a:45:d5:
e4:d1:40:40:0e:98:67:a8:57:6d:bd:06:97:ca:cb:c1:99:ea:
d2:d3:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org