Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/URuO7dBPKfMdnlLp8DPcPYv_o2U.roa
File: URuO7dBPKfMdnlLp8DPcPYv_o2U.roa (raw, json)
Hash identifier: z+iGhjEuGo2R7fUZTwHd4Mxw8i/Yz4JFfXi51/2SKI0=
Subject key identifier: 51:1B:8E:ED:D0:4F:29:F3:1D:9E:52:E9:F0:33:DC:3D:8B:FF:A3:65
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06A9EE14
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/URuO7dBPKfMdnlLp8DPcPYv_o2U.roa
Signing time: Fri 28 Jan 2022 10:19:24 +0000
ROA not before: Fri 28 Jan 2022 10:19:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
185.223.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111799828 (0x6a9ee14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 28 10:19:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=511b8eedd04f29f31d9e52e9f033dc3d8bffa365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:0f:a8:c5:87:4a:77:13:ab:da:77:e4:98:
47:16:7c:91:77:7a:6d:52:da:8d:b2:fe:ce:9c:ea:
8e:a5:5e:20:1f:9b:07:14:c8:c8:62:ee:a5:27:21:
54:b5:1d:f4:53:34:37:86:8d:4b:b6:da:ee:13:b4:
94:63:80:d7:29:78:fa:e4:bd:cd:d9:32:c6:f3:76:
a7:5d:0d:f8:40:72:eb:ec:03:12:c3:e6:5a:ee:38:
2e:db:e2:2c:b6:9b:40:27:3b:9f:c7:19:1d:dc:6d:
b8:ac:52:70:09:ff:ae:f1:3c:2c:47:86:b4:63:5d:
4e:79:3b:87:61:23:04:16:ff:dd:2a:4b:c5:43:b3:
c3:41:fa:e0:7c:27:91:6c:c5:39:e3:fb:66:f0:9b:
bd:8c:f4:5f:4a:5a:a0:91:dc:3f:94:79:13:a7:59:
a5:c1:e6:18:b6:01:13:5e:0b:b1:48:8a:c3:ba:eb:
cf:86:3a:8a:b9:3d:e8:32:ac:4d:e4:c9:e5:18:42:
d6:39:be:b6:64:81:5b:04:0c:57:7c:37:71:96:d7:
a8:c2:13:b0:bc:1e:40:bf:34:55:a1:53:6b:5e:79:
f2:d2:e9:00:04:e3:b1:ac:59:0d:00:25:92:f1:6b:
bb:2b:89:8c:c7:3c:cd:f7:3f:86:6b:17:5c:2d:60:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:8E:ED:D0:4F:29:F3:1D:9E:52:E9:F0:33:DC:3D:8B:FF:A3:65
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/URuO7dBPKfMdnlLp8DPcPYv_o2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
185.223.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e8:b4:15:db:9c:a9:7b:17:de:60:46:f5:02:d5:32:2d:34:
51:40:ea:af:d3:83:6f:54:a7:86:3a:92:5e:da:56:a9:84:7a:
84:21:c8:4b:c3:8d:f0:af:88:8a:dc:19:5d:51:9f:84:0d:c0:
16:75:f8:16:94:2d:5a:71:eb:0e:3e:2f:b0:f5:fc:ba:c6:d0:
66:49:df:7b:94:19:5d:ee:6f:3c:d0:ac:fd:ff:0d:62:c3:6f:
bc:40:9d:97:41:4b:ca:3d:93:eb:c3:18:f1:0c:90:4e:a1:db:
dc:e4:16:ba:e5:55:1b:46:52:88:17:7b:83:5c:d1:a5:55:3c:
cd:97:ab:59:a5:ce:4d:9c:7f:67:e1:b7:d3:2b:79:64:d3:c1:
9e:e8:c9:02:d4:e0:d0:0c:74:63:8f:2b:1d:6d:12:83:d1:86:
a7:4d:6a:fd:4c:6d:98:20:08:ce:34:24:2d:a1:ed:89:aa:5b:
e5:16:95:78:57:fd:67:e9:fb:9d:fe:67:3a:44:14:04:dd:44:
54:1a:7d:78:fd:31:df:38:fc:e7:0b:96:e5:f0:5f:3e:56:48:
b8:ad:94:99:3a:39:b9:2f:83:57:e9:e0:f8:02:e2:1a:ce:62:
50:8a:f1:49:cf:ce:e7:41:bc:ca:c7:e2:c5:f6:06:ec:70:d8:
ec:07:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org