Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9C2J0rOLl5ZfbshyIDghc-mXb0.roa
File: _9C2J0rOLl5ZfbshyIDghc-mXb0.roa (raw, json)
Hash identifier: kwAH79lkwpAjAoI1vV3bnedkJWyE+yaWSJeiG/D4UnI=
Subject key identifier: FF:D0:B6:27:4A:CE:2E:5E:59:7D:BB:21:C8:80:E0:85:CF:A6:5D:BD
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0184E3197E41B7E96B9FDB4CAF1D630FA75C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9C2J0rOLl5ZfbshyIDghc-mXb0.roa
Signing time: Mon 05 Dec 2022 16:23:29 +0000
ROA not before: Mon 05 Dec 2022 16:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 185.214.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:19:7e:41:b7:e9:6b:9f:db:4c:af:1d:63:0f:a7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 5 16:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffd0b6274ace2e5e597dbb21c880e085cfa65dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:3e:ae:20:84:21:34:34:3c:e9:3b:a5:6c:
d4:71:a1:be:53:8f:23:1d:72:d3:7f:20:b7:1a:ff:
67:38:ca:29:9c:ff:26:eb:5e:c7:44:f0:b2:85:79:
09:55:b2:47:1d:a9:ac:86:9b:c8:0f:b2:9a:f3:55:
6c:80:03:ae:60:c1:8f:35:ff:9d:1b:60:4f:1e:71:
64:81:bc:b9:82:7e:92:c3:3e:bb:cf:4f:cd:0c:5d:
34:31:ff:b1:1d:87:cd:a8:8d:85:bc:bf:f1:00:f5:
fb:c6:d9:2b:75:38:09:40:43:8a:33:6e:97:61:d4:
ae:5b:a8:24:f6:2b:fb:f1:03:3c:c3:3c:54:18:74:
7f:38:ee:5b:43:bf:0e:31:f6:48:e5:f6:b1:38:fa:
95:ae:e5:33:d0:16:34:0b:be:df:6d:5a:56:3e:18:
54:b5:67:49:1a:ad:ab:90:05:1f:6b:e1:0a:1b:3a:
c2:e5:e2:0d:2d:59:c1:48:a3:87:40:c9:1f:0e:c6:
23:62:83:c3:8a:4e:08:0b:33:a4:da:3b:59:05:a9:
5a:e1:51:6c:ee:03:ee:a4:4f:a5:4f:d6:db:96:ab:
0b:bf:e7:bb:59:69:b0:ee:b5:8b:76:0f:82:d7:53:
cc:d5:6d:db:fb:08:29:cb:0e:a6:81:46:d8:2f:42:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:B6:27:4A:CE:2E:5E:59:7D:BB:21:C8:80:E0:85:CF:A6:5D:BD
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/_9C2J0rOLl5ZfbshyIDghc-mXb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:96:0c:64:66:a7:31:dd:d8:8e:e4:c7:4b:2e:3f:f8:a3:dd:
72:15:31:69:0d:cb:df:e3:ed:74:97:b4:10:47:e7:ba:35:a5:
bb:d2:2d:ba:8d:0f:c3:9c:2f:e7:54:2e:24:11:a8:08:a5:c1:
8d:2f:df:52:5c:81:03:91:57:84:bb:fc:32:8e:0a:22:97:50:
8d:80:4b:43:60:8b:e3:7d:6a:f7:2a:23:f8:f2:bc:05:9a:88:
16:14:d7:96:b5:ec:b6:fe:40:47:3a:89:b2:47:15:3e:fc:37:
b7:5c:4c:da:f5:20:6e:11:4d:dc:74:e1:f8:18:be:04:27:9e:
d2:9e:de:76:89:99:d7:38:49:6d:73:03:dc:e7:23:d2:a8:f7:
94:b9:62:37:78:15:a0:3d:a5:89:22:34:e3:77:08:be:bf:2d:
8c:75:d6:f5:dd:f8:b9:78:3b:89:3e:2e:cb:6b:66:f4:25:8e:
1f:ce:dc:9b:63:65:3c:bc:3f:38:59:0d:24:1e:46:4e:8c:e5:
63:fe:92:b1:6f:e4:b5:14:43:c3:72:3b:12:55:5f:63:09:a1:
e0:dc:08:9b:6f:2b:73:99:cb:68:73:d1:a3:ff:d4:66:34:73:
6a:71:c3:2d:87:37:5d:4e:96:97:7c:fa:75:47:74:62:10:a8:
b1:db:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org