Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V1wvZt5RSsLNaAOkLuaodwXhQhc.roa
File: V1wvZt5RSsLNaAOkLuaodwXhQhc.roa (raw, json)
Hash identifier: hfliNqhw0aIDo5H9qkZmRdmMfGxJ1NIRjFoC7x16SGo=
Subject key identifier: 57:5C:2F:66:DE:51:4A:C2:CD:68:03:A4:2E:E6:A8:77:05:E1:42:17
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06F21F98
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V1wvZt5RSsLNaAOkLuaodwXhQhc.roa
Signing time: Sun 20 Feb 2022 09:02:39 +0000
ROA not before: Sun 20 Feb 2022 09:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212728
IP address blocks: 185.255.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116531096 (0x6f21f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 20 09:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=575c2f66de514ac2cd6803a42ee6a87705e14217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:b1:f9:4b:84:4a:1a:f4:76:da:29:32:6d:
d1:1d:9c:7e:25:5b:b0:2e:60:08:e8:05:53:99:15:
a5:ee:c6:2e:d2:aa:b8:a3:fd:91:62:d9:99:c9:1e:
07:7f:17:31:6a:a8:1d:a7:79:a6:52:97:25:89:60:
66:02:f5:a2:75:cc:7b:0b:92:44:01:29:48:17:62:
a2:35:b2:5d:40:99:84:53:81:f5:e5:77:78:f5:45:
42:86:ec:d1:0b:65:eb:ae:cc:40:e0:a6:fa:21:bd:
67:27:6b:b5:08:35:3d:6a:23:ee:3a:8b:cf:f2:c1:
46:df:08:87:e4:81:9e:af:66:f5:53:1f:2e:8b:ae:
39:88:f6:35:9c:5b:cf:07:b8:f2:09:c7:84:8c:6c:
18:a2:c6:b3:76:d9:84:8a:77:65:b7:c3:31:09:bc:
4a:d2:bd:7e:61:8a:72:88:e4:bf:a6:f3:3a:ad:07:
38:f7:30:a4:16:be:9b:6a:7c:be:98:9d:3d:06:63:
e7:7e:08:1e:23:ac:87:81:8c:dd:b9:e8:e3:dc:66:
42:a8:3e:4d:51:48:7c:9f:c0:2c:7f:c3:9d:5f:aa:
19:89:85:5a:a7:41:1f:76:67:86:60:e0:9c:e5:d1:
a9:54:b8:7f:0b:6f:ad:34:ac:92:12:08:2e:76:7e:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:2F:66:DE:51:4A:C2:CD:68:03:A4:2E:E6:A8:77:05:E1:42:17
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/V1wvZt5RSsLNaAOkLuaodwXhQhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.126.0/23
Signature Algorithm: sha256WithRSAEncryption
93:b0:64:19:a5:01:87:36:17:17:7c:8b:36:8d:49:0e:fd:12:
ad:8d:bd:af:72:98:8b:54:ac:32:4f:3c:d6:28:66:a1:87:57:
ad:eb:6b:12:3d:17:52:cb:1e:3f:fc:e7:1f:cb:e3:92:25:3e:
a0:93:be:6c:aa:73:6c:97:4e:91:0e:4e:7c:6a:6d:52:18:f4:
47:a4:6d:c9:37:fe:e8:9f:df:0e:9c:77:38:8c:97:df:a1:60:
d8:d2:0e:c3:58:00:78:07:f8:f5:eb:fe:65:c3:24:5f:0f:d3:
5d:52:1f:da:02:5b:cc:f7:27:80:f9:12:37:13:48:eb:a2:d1:
fa:b3:b2:d3:91:ad:e8:af:70:71:22:8d:92:b2:cd:42:8c:6a:
da:72:c5:dc:53:39:72:29:98:d7:9b:40:ac:2e:ad:37:16:a6:
0f:78:21:67:46:0d:37:31:2d:5a:ff:8c:e2:be:8b:1e:e4:38:
d8:2d:1a:c9:35:9f:c4:bd:5d:d0:b4:72:9c:c8:0b:b8:b7:4e:
ae:b6:11:82:28:54:29:0a:0b:db:65:5c:40:27:d9:e6:11:80:
8f:d7:db:44:9f:2f:0b:21:a6:a0:93:c3:83:98:89:22:18:a8:
00:ab:ca:d1:d0:fa:29:15:83:aa:29:6f:70:11:48:8b:00:42:
31:4a:f9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org