Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g3u4y4Yo8t63Dz2n5Pg_a_dek7A.roa
File: g3u4y4Yo8t63Dz2n5Pg_a_dek7A.roa (raw, json)
Hash identifier: aT27xjuMW1Kbq90Y5sEU87A3tAWUa3SNZE81mY4/cAI=
Subject key identifier: 83:7B:B8:CB:86:28:F2:DE:B7:0F:3D:A7:E4:F8:3F:6B:F7:5E:93:B0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0670F982
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g3u4y4Yo8t63Dz2n5Pg_a_dek7A.roa
Signing time: Fri 07 Jan 2022 10:58:01 +0000
ROA not before: Fri 07 Jan 2022 10:58:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 185.206.250.0/24 maxlen: 24
185.194.31.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108067202 (0x670f982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 7 10:58:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=837bb8cb8628f2deb70f3da7e4f83f6bf75e93b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:ce:b0:b6:b5:db:e9:a1:37:02:3d:df:06:
0b:a1:b5:5c:79:83:d2:a5:87:f8:3d:31:64:d3:cc:
87:04:db:46:20:94:2e:1c:05:a9:09:63:d1:d7:e7:
29:ce:3a:75:5e:f1:6e:88:98:da:59:63:ae:44:9f:
02:81:ee:03:c1:0b:4a:c2:5a:b1:47:ff:61:ae:5f:
10:4b:09:5d:a6:67:21:b4:95:30:4b:8c:34:90:e1:
0d:ff:f8:7e:5a:bf:f0:a4:d4:8f:0c:30:f5:48:16:
c7:2c:8d:c3:8b:3a:9f:53:2d:8b:7d:8f:07:78:90:
07:75:5f:ca:c9:07:31:d4:76:9a:e3:50:9d:41:cc:
77:2c:c2:a3:0d:59:96:cf:8f:a2:e4:be:73:1d:32:
3f:0b:15:b9:b8:c5:34:8f:4b:a9:fa:55:c3:ee:c4:
6f:fd:03:13:28:75:21:40:75:39:f8:3b:01:ef:b8:
be:7d:26:c1:2d:92:26:b1:37:8f:84:b9:ac:13:7e:
b2:81:28:9b:00:31:d1:03:e7:a0:15:aa:37:c0:ad:
76:7e:5d:2f:54:51:ab:ac:4a:74:e2:c3:d1:25:15:
1f:08:d7:73:fd:b8:9b:e6:02:f9:1b:45:da:15:70:
61:b9:04:3b:fc:e2:c6:09:18:16:91:9f:27:31:64:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:B8:CB:86:28:F2:DE:B7:0F:3D:A7:E4:F8:3F:6B:F7:5E:93:B0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/g3u4y4Yo8t63Dz2n5Pg_a_dek7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.31.0/24
185.206.250.0/24
185.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:39:0c:99:6b:aa:8d:5b:69:ee:81:25:8f:1f:0c:7f:a8:be:
5a:dd:08:2d:59:67:24:68:45:fc:a4:f8:e0:35:c5:88:ed:f5:
91:ed:64:f2:76:a2:73:c2:59:99:e7:4d:f7:34:ea:87:bb:0c:
61:a0:40:da:c8:2f:2f:7d:cb:8a:c7:8c:e7:32:60:fc:30:81:
18:f1:96:c5:e5:70:0a:da:f5:62:ac:51:e8:52:49:98:6d:3d:
8c:19:71:41:10:12:09:79:c8:21:2d:cf:29:23:ec:ed:44:5e:
37:26:1c:c4:8b:71:70:8a:29:46:6e:bb:2c:80:ec:de:65:2c:
14:10:20:86:d2:3c:c7:06:78:61:ca:ae:3f:9e:13:92:e7:07:
87:34:ff:b5:92:22:6a:dd:2c:26:86:ec:92:32:3e:aa:ee:4c:
f0:fe:72:8b:9a:6c:ac:f8:0d:38:4c:ad:ee:58:13:e1:37:5a:
fd:01:8c:16:88:3e:c9:68:29:e3:73:e1:45:d5:b9:3a:70:5f:
97:71:0e:9f:f5:6d:e7:ce:01:d2:60:7b:ce:be:01:6b:3e:07:
d0:7f:2b:18:f2:99:92:2b:d0:f8:5c:15:6d:de:8d:70:da:28:
c5:1c:b6:04:5e:7e:b8:8e:21:7c:68:49:94:1e:f2:f6:72:5c:
29:06:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org