Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RavSYIdvVTtcI93XmCFYsWt-FbQ.roa
File: RavSYIdvVTtcI93XmCFYsWt-FbQ.roa (raw, json)
Hash identifier: QHAxmY6PuG+jaLQhGM1qKJYw0mvmLVnv8A5KosJskyo=
Subject key identifier: 45:AB:D2:60:87:6F:55:3B:5C:23:DD:D7:98:21:58:B1:6B:7E:15:B4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0763214C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RavSYIdvVTtcI93XmCFYsWt-FbQ.roa
Signing time: Thu 31 Mar 2022 09:12:15 +0000
ROA not before: Thu 31 Mar 2022 09:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123937100 (0x763214c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 31 09:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45abd260876f553b5c23ddd7982158b16b7e15b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:80:29:e3:fa:49:70:4f:8c:73:ab:dc:1c:
5f:49:58:8f:eb:c8:9c:2c:40:23:b7:cd:5c:3f:41:
1d:9f:50:21:42:b9:da:2f:46:6d:32:e6:70:88:95:
e3:97:86:82:c2:0d:24:b4:b0:b3:80:c5:80:22:11:
5a:0e:af:5f:4b:3c:54:9b:d4:49:54:ba:86:0b:dc:
a8:ae:7f:fc:71:89:f0:7a:85:8f:8a:93:d2:2a:ae:
c7:36:a1:e0:b1:fd:0f:94:1a:a1:57:93:10:5f:22:
c7:78:ea:fd:28:f2:59:a4:ec:01:95:2e:a8:4e:1e:
a5:dc:3f:49:33:88:bf:9c:8f:e1:99:9b:82:c4:5d:
12:05:8c:1f:84:23:40:74:fc:8a:10:df:f3:cd:4c:
28:33:f2:94:8f:a2:1e:93:a7:7f:1c:06:61:45:fd:
50:24:a5:04:8d:cb:ee:eb:13:e5:09:e1:78:3f:b2:
42:6e:c0:2b:36:ad:13:5e:4f:b2:b7:90:40:a4:d7:
2c:46:18:5c:a9:84:a8:4c:53:34:34:d5:38:eb:da:
cb:0e:3f:cb:52:61:fa:f5:87:48:ad:44:05:c8:84:
18:27:a0:14:52:90:85:b3:59:cf:3b:a1:75:cc:68:
99:9c:91:01:d8:81:85:1b:15:0f:f7:ea:cc:5e:26:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:D2:60:87:6F:55:3B:5C:23:DD:D7:98:21:58:B1:6B:7E:15:B4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RavSYIdvVTtcI93XmCFYsWt-FbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:96:a6:2c:76:53:78:55:b0:b0:e1:95:6b:00:c1:50:59:a9:
10:b9:4e:62:01:6e:60:3a:bb:9c:4d:b2:5c:65:3a:21:20:a4:
7d:2c:6f:db:be:69:af:68:f4:91:47:ac:f1:cd:45:c8:6f:70:
db:e6:99:f6:f3:36:06:2b:d1:06:eb:91:98:1c:30:8a:a0:05:
f3:05:97:83:92:82:96:6b:68:87:92:49:b6:a2:5f:db:a6:c2:
17:09:78:93:83:df:35:95:cf:2c:f1:49:e8:4d:f9:c0:01:bf:
67:67:39:2a:0e:de:e3:6e:77:f6:46:da:b6:9a:6b:8b:bd:33:
0c:74:f5:fb:88:84:d1:26:28:25:59:ea:e7:a5:b7:b5:e8:23:
d8:cc:e4:bb:5e:b5:a2:f5:07:21:11:52:c2:15:3d:7b:de:a7:
6e:25:23:23:20:21:2e:f6:32:7c:5f:44:bd:4f:6c:7b:f3:bf:
17:08:43:66:9c:44:cc:dc:12:52:47:b5:b6:be:61:03:74:10:
9e:04:40:14:89:81:4d:c9:30:36:73:23:87:f7:60:90:2d:f1:
21:7c:17:7f:3c:c6:5a:25:f7:3f:63:68:71:45:09:05:83:c9:
f1:45:d9:63:81:51:63:55:f3:ed:82:63:99:25:df:b6:7e:43:
49:65:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org