Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dURU4xw8tItLCYn_NqZZoR_MiE8.roa
File: dURU4xw8tItLCYn_NqZZoR_MiE8.roa (raw, json)
Hash identifier: 1yD3oX+EvMCIzwdMWdiTg72ogGG0deNN0IOPkD+ZX5g=
Subject key identifier: 75:44:54:E3:1C:3C:B4:8B:4B:09:89:FF:36:A6:59:A1:1F:CC:88:4F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 071E9F7E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dURU4xw8tItLCYn_NqZZoR_MiE8.roa
Signing time: Wed 09 Mar 2022 09:30:12 +0000
ROA not before: Wed 09 Mar 2022 09:30:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 185.234.21.0/24 maxlen: 24
185.194.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119447422 (0x71e9f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 09:30:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754454e31c3cb48b4b0989ff36a659a11fcc884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:9b:b4:61:db:13:89:36:6e:3e:52:6b:af:
75:cc:79:c7:75:37:58:b4:e1:18:3e:3f:e3:48:39:
1a:67:ee:7a:cf:b6:c3:c1:e0:96:c6:0c:3f:4f:45:
a8:73:83:f8:e9:ed:61:04:a5:29:8b:ed:8a:33:08:
ff:90:b9:6a:b9:94:18:33:eb:74:2a:34:da:73:a2:
f6:90:f2:d6:d6:a3:f2:9c:6f:b3:bd:54:40:95:fd:
fb:40:9c:2a:68:1e:2b:1a:22:19:eb:29:12:7e:cb:
8d:c9:43:f1:ce:98:c2:ac:85:4a:24:4d:cd:8b:33:
61:9f:f3:6b:8c:1c:7a:d6:7d:76:26:52:a8:e5:0f:
36:66:d3:19:f5:8b:52:2d:cd:f8:1f:97:ad:83:b8:
9b:54:a1:05:24:51:06:0f:47:3a:67:91:f8:dc:91:
5f:f1:cb:ea:f4:51:1b:78:1d:3f:a4:e1:1e:7d:99:
c4:08:19:ff:18:20:30:05:da:8e:af:c3:0a:2c:d1:
16:bc:62:70:f0:d8:87:8d:8c:2e:ed:8e:6a:ba:f1:
55:c4:c5:39:71:3b:a5:01:7e:26:d6:40:6c:92:48:
10:4e:67:62:76:db:fe:e4:48:8b:38:6c:a2:ca:50:
aa:c8:2a:96:58:d7:05:16:4a:25:19:c4:41:f3:0e:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:54:E3:1C:3C:B4:8B:4B:09:89:FF:36:A6:59:A1:1F:CC:88:4F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/dURU4xw8tItLCYn_NqZZoR_MiE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.31.0/24
185.234.21.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4e:ea:74:1d:18:b0:bc:11:3c:e5:3b:3a:de:fd:34:5d:e2:
87:4f:d7:4b:33:a8:7b:b4:58:26:1c:bf:c0:8f:f6:59:6f:79:
32:22:0a:5a:ef:92:e2:5d:30:1c:20:fe:f8:d2:3b:72:4d:2f:
22:16:20:84:ee:ff:4c:86:fa:81:aa:26:aa:cc:19:b1:96:5f:
6e:73:2f:55:ff:8e:81:3d:d0:95:80:b3:c9:f1:22:73:35:8f:
b8:42:6b:fd:35:d4:2a:6b:63:10:54:e1:92:4f:a5:c4:c2:86:
b4:36:f0:d7:e1:57:3b:d5:44:56:53:ba:a4:81:db:4b:1c:22:
b3:fe:c7:4a:f5:39:14:ec:3d:00:80:3d:c5:cd:80:ce:6b:f1:
d4:2a:5a:45:be:c8:af:83:e2:e3:5d:bb:69:ca:c0:28:ec:ff:
c1:ff:4d:39:b0:ac:2a:03:58:b2:e2:35:fa:ab:5c:c8:c4:52:
62:85:74:06:1f:e1:3c:cf:a5:21:92:fb:cd:e2:81:44:71:bd:
aa:82:ca:a7:91:ea:cc:e3:d6:d4:22:dd:5e:29:2c:e8:e1:d5:
a0:27:68:d8:d5:f9:c0:e4:6f:b4:b6:49:27:90:1f:30:e8:59:
f8:c1:ff:c2:cb:5a:34:20:3b:bd:87:f8:95:54:aa:2d:a1:b6:
28:99:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org