Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1oGOpyCzKDGsF48xSL8eWNxmuM.roa
File: b1oGOpyCzKDGsF48xSL8eWNxmuM.roa (raw, json)
Hash identifier: 8QG4kMOokvONmm6XDOYHmDK8xHucRgVTlX76hC0CKPg=
Subject key identifier: 6F:5A:06:3A:9C:82:CC:A0:C6:B0:5E:3C:C5:22:FC:79:63:71:9A:E3
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 064B9599
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1oGOpyCzKDGsF48xSL8eWNxmuM.roa
Signing time: Sat 01 Jan 2022 06:52:42 +0000
ROA not before: Sat 01 Jan 2022 06:52:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208528
IP address blocks: 92.60.33.0/24 maxlen: 24
92.60.32.0/24 maxlen: 24
185.228.163.0/24 maxlen: 24
185.232.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105616793 (0x64b9599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f5a063a9c82cca0c6b05e3cc522fc7963719ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:9c:e4:8e:e1:c1:f3:76:d7:69:80:e4:27:
90:ef:22:00:1f:9f:b5:c7:98:06:f6:d3:5d:b8:29:
61:0e:40:f9:ea:0c:65:0f:be:eb:b6:14:36:6e:c0:
dd:d7:b4:b1:b3:b3:53:5b:be:a9:ab:07:f5:5d:62:
c3:c6:7f:60:35:6a:d5:90:8d:75:83:79:cd:5a:f4:
cf:63:7a:90:ff:9f:d0:dc:44:af:77:06:01:69:51:
ea:f3:06:1b:d2:45:af:e8:44:88:cb:8a:44:d3:8c:
4e:8d:4a:ef:7d:f4:96:d7:ed:cf:92:b6:bf:bb:98:
e0:17:6a:a6:ee:0d:cf:51:ff:c3:47:98:47:0a:52:
8d:85:1e:d1:d9:6e:8c:a0:60:7b:07:97:4b:1e:86:
31:a1:5a:ab:cd:19:62:74:9d:5a:13:13:44:ff:42:
13:38:86:dd:67:6b:57:a5:d2:c5:5e:09:e1:f0:fb:
84:2d:08:f3:c7:be:03:87:c3:68:df:1d:f5:c0:4a:
1d:2a:2e:61:7f:cf:f8:73:dd:e3:c1:80:a8:b6:6e:
eb:64:9c:72:09:55:d1:90:24:29:bc:7b:59:c7:72:
29:a9:d4:d5:09:4e:c9:4b:6b:6e:04:ad:70:f5:02:
ec:39:7d:5f:43:ac:53:03:24:c7:09:42:e5:70:5d:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5A:06:3A:9C:82:CC:A0:C6:B0:5E:3C:C5:22:FC:79:63:71:9A:E3
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b1oGOpyCzKDGsF48xSL8eWNxmuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.32.0/23
185.228.163.0/24
185.232.11.0/24
Signature Algorithm: sha256WithRSAEncryption
32:12:01:a5:fa:d7:2b:eb:89:70:ac:15:96:16:e4:cb:49:1e:
50:a5:7e:6c:83:97:36:aa:d9:e7:bd:3c:06:bb:b7:53:67:12:
a6:2d:ce:68:65:76:bc:6b:9d:cd:29:47:24:5c:0b:36:9e:31:
b1:be:9a:16:71:18:c7:3f:50:fa:a9:4d:44:d0:5c:70:b4:a5:
49:b3:2c:a0:ac:58:ae:44:8c:df:05:4f:c3:b6:23:78:35:31:
fc:d7:eb:08:ee:e3:5d:fa:86:d0:d1:55:7b:1f:ae:1d:7f:83:
b0:ea:63:bb:f1:e0:aa:4f:fa:e1:9a:7e:f0:ea:f4:20:d5:06:
af:09:a2:bd:e1:9f:b8:97:ea:a3:76:d3:b7:c4:98:1b:8e:59:
65:c7:3b:c7:50:1c:79:bc:e8:57:57:31:3b:1f:ea:d1:80:17:
2a:a9:c3:73:1a:d6:18:2a:e2:7f:98:dc:58:4d:3f:00:c1:4d:
c1:8e:f0:a1:5a:74:6d:eb:8c:06:bd:65:4a:64:8e:bc:a6:18:
f2:94:76:a9:86:81:e5:39:62:73:66:e2:1d:1e:5e:35:17:d5:
c2:b6:2b:fa:53:ee:b0:3e:34:1e:2e:8b:50:f6:43:9d:d1:c1:
d7:e2:7d:62:a3:52:60:11:46:e8:aa:98:cd:0c:0e:f3:c3:20:
63:a0:67:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org