Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ckI9J0lNFtFuiCdxE23dvSsTXXo.roa
File: ckI9J0lNFtFuiCdxE23dvSsTXXo.roa (raw, json)
Hash identifier: Ce2ZfDCxS8T0E4iFWtbHdfn+Cvh75H77NmBwlT4uYUs=
Subject key identifier: 72:42:3D:27:49:4D:16:D1:6E:88:27:71:13:6D:DD:BD:2B:13:5D:7A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07AECAA8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ckI9J0lNFtFuiCdxE23dvSsTXXo.roa
Signing time: Thu 28 Apr 2022 19:33:34 +0000
ROA not before: Thu 28 Apr 2022 19:33:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.194.28.0/24 maxlen: 24
185.223.153.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128895656 (0x7aecaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 28 19:33:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72423d27494d16d16e882771136dddbd2b135d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:05:65:59:07:fd:1c:30:92:8b:58:e0:d1:
1e:5b:d5:fb:19:49:99:a2:29:52:91:af:7f:fc:2a:
9d:33:2f:3d:e8:da:e2:f7:a7:70:8f:04:eb:72:b5:
03:29:97:74:ef:56:ac:95:aa:6b:8d:7a:aa:8d:cf:
5a:dc:12:9f:27:48:78:ec:1a:fa:d8:d0:8f:3f:7b:
17:9b:0e:0c:9f:c6:f6:2b:50:88:eb:99:a3:06:53:
86:12:54:19:82:8f:e7:53:e5:55:ed:2b:5f:13:59:
af:68:48:ca:04:fb:74:e9:1a:56:7e:38:47:32:ad:
71:6e:88:d4:60:69:c8:ac:6c:b3:05:9b:f4:09:37:
8e:57:e5:99:2d:0e:5f:0b:c2:57:cd:bc:e9:ce:52:
e9:1a:c8:10:4a:6a:39:c1:f1:1f:d2:2b:eb:95:a2:
b9:64:f7:26:b2:d0:45:47:8f:85:74:af:28:29:f9:
02:08:90:f0:49:77:2c:a8:2a:88:5e:a2:41:75:6a:
fa:e9:41:53:23:00:ce:cf:f2:b4:d0:c8:4a:03:d3:
e4:65:d7:31:b8:6d:54:0f:43:bd:06:99:ad:56:95:
3f:03:1e:2e:5f:65:bd:7b:a6:5a:f8:0a:9b:b0:ef:
90:fb:55:fd:0b:8b:e7:2d:ef:fc:48:3f:6b:fb:b6:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:3D:27:49:4D:16:D1:6E:88:27:71:13:6D:DD:BD:2B:13:5D:7A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ckI9J0lNFtFuiCdxE23dvSsTXXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.28.0/24
185.223.153.0/24
185.225.3.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7c:f1:53:d3:a7:15:af:87:e0:6a:a8:02:3d:d8:61:9f:2d:
cd:eb:51:80:8d:25:89:ca:a3:9d:7a:e1:2a:ba:0d:26:63:05:
18:33:9b:35:c5:e4:97:a7:54:79:45:fb:e5:bb:2e:19:90:4b:
62:ff:a3:88:fc:0e:3c:b6:06:0c:ce:6a:7d:94:31:0d:ba:54:
f5:52:44:d5:08:ca:73:1a:d1:4b:50:22:3d:bc:cd:21:85:05:
f9:07:f9:46:65:b4:5e:09:34:13:07:41:39:a0:74:3a:65:56:
84:e1:36:d1:9e:47:42:04:2e:00:e5:9d:2b:b6:a1:ee:7d:b0:
ae:54:01:5e:69:de:9e:dc:0e:3b:a8:f8:8f:e1:82:0e:88:7d:
eb:2b:d4:5a:87:3c:a6:8b:e3:2f:09:f1:06:1b:ef:54:16:09:
a0:ec:3f:f4:7a:be:0e:cd:97:2e:ad:b0:55:14:72:69:f5:7a:
cc:0b:60:b3:c5:09:89:cf:b3:dc:e0:7f:f9:1d:1e:bf:93:18:
32:e7:b6:f7:58:78:c4:80:90:e1:63:57:e0:b4:1e:e3:5a:15:
dc:3d:18:ca:12:54:2f:21:1c:42:70:eb:7b:c2:70:4c:59:14:
67:f2:ff:ba:2b:66:92:6e:2b:ff:c4:e4:03:e0:13:e9:8b:33:
7e:0f:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org