Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fUKWa2DYBJh0uDFedJs0D_9uxUQ.roa
File: fUKWa2DYBJh0uDFedJs0D_9uxUQ.roa (raw, json)
Hash identifier: Wh8kC4lhKRMwA9e0jTkw76JGzC1A1FoKIjFbUGEl0YM=
Subject key identifier: 7D:42:96:6B:60:D8:04:98:74:B8:31:5E:74:9B:34:0F:FF:6E:C5:44
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0184D767B8865C8988B7409EC9B01604FE12
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fUKWa2DYBJh0uDFedJs0D_9uxUQ.roa
Signing time: Sat 03 Dec 2022 09:53:29 +0000
ROA not before: Sat 03 Dec 2022 09:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d7:67:b8:86:5c:89:88:b7:40:9e:c9:b0:16:04:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 3 09:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d42966b60d8049874b8315e749b340fff6ec544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:20:1d:c0:ac:6e:8a:d3:e8:18:3d:9f:c4:
d8:72:1c:e6:df:21:cc:b6:9f:f3:0a:44:0c:6d:e9:
29:2e:97:0e:6b:d3:f0:fa:f1:c2:1d:c8:2b:5d:3f:
43:2f:42:49:ea:69:19:57:94:21:08:8a:3d:f3:7d:
41:aa:9e:9b:18:b3:4e:f2:9a:0c:97:49:df:95:5e:
02:88:11:6e:9e:1e:aa:9f:5c:d8:db:98:ae:f7:dc:
26:6c:45:02:59:64:51:5e:d5:bf:1c:e8:11:c2:05:
31:a3:bf:f5:2b:ae:7b:50:1d:d5:ed:56:f7:1f:29:
bc:5a:1e:03:9c:76:74:af:4d:96:ae:97:d6:b6:26:
cb:05:7f:ff:fc:65:7e:35:d4:4f:1c:2e:3c:b5:1d:
27:c3:fa:05:5a:42:59:bc:49:8b:45:ad:a7:f2:84:
99:63:48:bb:db:d0:ff:04:16:58:1b:1e:04:51:ee:
1f:0f:87:81:6c:e2:59:d4:f1:bb:e3:d2:91:0c:6b:
85:af:dd:8d:b1:59:7b:52:5d:18:b9:11:f3:08:3e:
26:a1:7d:ec:4c:fc:91:de:90:92:59:e0:f4:0f:c4:
18:ea:a1:16:b5:7a:85:98:ca:97:ea:1d:5d:53:20:
53:4d:b3:5c:3e:2f:51:35:d1:b8:78:30:61:a7:b9:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:96:6B:60:D8:04:98:74:B8:31:5E:74:9B:34:0F:FF:6E:C5:44
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/fUKWa2DYBJh0uDFedJs0D_9uxUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.159.0/24
185.206.250.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b6:48:7f:73:8c:ed:d6:8f:9c:18:43:57:bb:a5:9c:b4:c5:
82:43:88:23:9a:45:b4:4c:13:7c:ac:3d:b5:8c:d7:c5:1d:c5:
17:6b:22:d7:a6:7d:d6:22:b3:ef:b8:be:08:50:1b:2f:63:49:
6d:1b:9c:55:d3:17:e0:29:53:75:e0:15:a9:a3:f7:68:a1:9b:
5e:03:d4:9f:2e:df:cc:d0:27:a8:15:58:b3:53:a6:f4:9a:f6:
88:cd:28:0f:8a:8d:93:09:7b:83:41:4c:0f:10:35:db:51:3b:
aa:ef:2e:03:0a:e8:b6:0a:a3:21:3f:d7:34:cd:bf:0a:49:65:
69:f0:03:5e:62:1f:38:12:82:b1:5d:70:22:6d:5d:03:a1:f5:
99:4a:6e:1d:c4:1b:1b:25:60:51:bf:1a:8f:73:9b:79:50:6a:
a5:e3:dd:36:d9:81:00:3b:e9:d2:f4:95:3f:0d:22:7c:95:9a:
50:2a:f3:fe:ee:32:10:fe:79:47:aa:ca:23:46:9b:7c:83:05:
52:94:7b:cd:a0:e5:a0:6f:2d:54:bb:72:48:d5:40:e2:a6:e6:
7c:6f:41:b4:79:9a:e6:49:06:77:24:53:f0:c8:8a:56:66:58:
69:b3:20:b2:60:12:54:b0:f4:6d:55:d5:35:27:64:60:55:13:
d0:76:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org