Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VIQlgwWj1wsaH0B967dFNRSVB7o.roa
File: VIQlgwWj1wsaH0B967dFNRSVB7o.roa (raw, json)
Hash identifier: z8T1yTlx6fOaV1fzHBuDT/8bd2D0IqxTkEaMLitZX5k=
Subject key identifier: 54:84:25:83:05:A3:D7:0B:1A:1F:40:7D:EB:B7:45:35:14:95:07:BA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 08747441
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VIQlgwWj1wsaH0B967dFNRSVB7o.roa
Signing time: Tue 28 Jun 2022 10:20:03 +0000
ROA not before: Tue 28 Jun 2022 10:20:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 185.226.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141849665 (0x8747441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 28 10:20:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5484258305a3d70b1a1f407debb74535149507ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7b:7b:de:28:35:d8:97:4c:42:4d:7f:fe:55:
ca:a0:5b:17:ba:7f:a9:d3:38:6c:f8:be:98:f1:28:
54:40:6d:8d:16:69:f7:8c:ec:ab:26:d4:5f:0e:44:
5c:d5:d7:43:2c:6b:cd:54:7c:a0:7a:8c:77:ef:c8:
03:24:de:df:ba:3e:c8:d8:25:52:4b:e4:3c:67:3e:
b7:b4:21:8f:53:e0:94:a8:eb:f1:fb:7e:4f:97:99:
7d:02:32:25:d1:f7:aa:a0:e9:b8:ff:f4:bc:2d:ef:
04:94:6e:a9:0a:76:93:ec:b0:43:c6:3d:00:b6:c2:
d5:d6:98:4d:96:a9:bc:90:e4:b6:f6:94:c3:29:28:
2e:aa:e1:28:09:10:83:86:db:f5:63:82:30:d3:11:
e2:05:0f:e8:c3:2d:a1:9f:8c:d8:57:10:8a:bf:f2:
8a:db:c0:92:7a:a5:db:23:08:b2:be:43:87:dc:04:
ce:03:c6:a0:af:85:7f:87:1f:1f:69:83:20:34:7e:
1c:85:5a:ca:d5:75:9d:44:28:a8:36:78:ad:a2:60:
cb:7c:d8:b9:bf:e9:13:7b:8a:92:d8:6c:df:cd:f2:
2e:8b:47:26:7d:be:49:d9:89:04:16:ab:47:5b:f6:
dd:e6:49:ca:00:08:eb:6a:e3:c5:15:eb:67:37:cd:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:25:83:05:A3:D7:0B:1A:1F:40:7D:EB:B7:45:35:14:95:07:BA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VIQlgwWj1wsaH0B967dFNRSVB7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:65:c0:bd:33:73:6d:44:fd:78:a4:ee:e6:c6:3e:27:b1:6f:
11:22:78:11:a1:84:9f:b4:c2:c1:2a:37:a8:18:29:82:94:64:
db:33:8c:64:89:d2:14:b4:7d:3c:06:06:8a:20:99:a1:0a:75:
90:33:84:e4:0f:27:da:89:aa:70:91:a7:dc:dc:45:b8:c6:03:
8c:9e:52:bf:78:d9:78:e7:66:fc:e2:72:49:8f:29:45:c8:38:
28:10:7e:aa:12:8d:8a:b0:a4:57:36:4d:00:2d:ab:ec:26:90:
34:cb:59:8f:f0:a9:da:24:68:20:5a:c0:5f:b8:e9:09:39:c6:
ba:10:d3:87:e0:e0:b2:a2:77:24:12:74:cb:14:ef:1e:0a:28:
82:0b:5b:d9:81:4a:cc:95:c2:29:bc:41:28:6b:fc:38:bd:7b:
b1:6b:6c:41:57:9e:4e:e6:f4:da:17:5b:9f:d7:c4:10:60:34:
07:7b:b5:62:d5:7b:c4:18:c4:cf:b8:e9:42:cb:34:2e:70:05:
6e:02:7c:b0:22:62:a7:e1:a5:f4:7e:bb:01:39:49:d6:e3:75:
9c:99:7b:71:d4:19:7a:5b:93:0f:bd:8e:74:d6:35:51:00:c6:
8f:dd:6e:ff:61:22:33:92:0e:7a:0e:12:43:98:50:9d:27:84:
fd:7f:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org