Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4JK3h7P0BPcJFP8aLnms4Rqfqg.roa
File: k4JK3h7P0BPcJFP8aLnms4Rqfqg.roa (raw, json)
Hash identifier: FHESA1O+Casgt6DYWas57DfZF6AFBZlQwT7kcbu0858=
Subject key identifier: 93:82:4A:DE:1E:CF:D0:13:DC:24:53:FC:68:B9:E6:B3:84:6A:7E:A8
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0184FCDAADC56224C239D6EA60261EC4C27B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4JK3h7P0BPcJFP8aLnms4Rqfqg.roa
Signing time: Sat 10 Dec 2022 16:25:00 +0000
ROA not before: Sat 10 Dec 2022 16:25:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210531
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:da:ad:c5:62:24:c2:39:d6:ea:60:26:1e:c4:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 10 16:25:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93824ade1ecfd013dc2453fc68b9e6b3846a7ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:d0:94:f8:41:7d:d5:13:b2:61:4e:09:57:
b2:70:2f:e4:cb:bc:be:16:2b:91:91:ec:c7:7b:86:
e7:96:73:ad:07:b0:f1:fa:fa:7c:e6:97:9f:d9:d1:
62:e4:45:e7:b9:06:a6:e4:76:4b:f5:c5:3b:11:f7:
6b:c9:27:a7:2c:7b:c3:c4:7e:f2:0c:7b:bd:3a:65:
5f:7c:4e:d5:33:e5:67:88:e6:af:53:d5:32:a6:e4:
79:42:ad:43:99:6d:a5:24:f2:3f:67:92:fd:2c:84:
7a:70:27:4a:15:42:83:10:8d:48:6d:a0:ad:9f:de:
f4:f0:89:3b:d9:d9:03:13:58:ff:b5:0f:ae:63:f8:
7a:fc:39:fe:cd:6f:08:68:1e:40:81:8d:2e:96:d4:
ab:3a:02:7d:30:4c:61:62:86:8f:ff:c8:79:12:8c:
66:2c:72:e7:b8:50:cf:ee:18:0e:37:ff:5c:93:2b:
f0:c9:0b:b0:84:ed:f8:4c:96:f5:70:40:71:eb:76:
bb:f8:18:6d:48:9b:2d:6a:b1:9d:db:c6:67:a6:95:
4a:19:bf:71:6e:81:55:f7:06:53:0d:7c:73:78:16:
15:d1:f3:47:de:b8:2f:71:f7:2b:c0:9b:74:fa:9e:
a1:33:b6:43:3b:1c:94:70:90:d7:83:dd:bb:30:f6:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:4A:DE:1E:CF:D0:13:DC:24:53:FC:68:B9:E6:B3:84:6A:7E:A8
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/k4JK3h7P0BPcJFP8aLnms4Rqfqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:51:d4:9a:9f:79:d5:15:85:10:a2:15:41:3f:9c:3b:55:3a:
3b:09:34:66:76:2a:4b:90:84:d8:04:0f:ad:5c:7b:bc:ae:81:
35:1e:9b:d8:68:5b:74:bc:40:eb:24:4c:6a:47:4d:e6:ae:20:
e1:97:9a:e0:69:f3:2e:20:6d:25:b4:90:c5:36:cf:43:2e:e4:
c0:28:12:46:2d:d2:43:d9:62:44:a4:39:4d:3d:8c:17:cf:e6:
e1:14:d8:de:cf:4e:5e:66:99:e8:79:b6:6b:19:d6:a1:db:fa:
f9:3a:c5:f8:85:c2:d7:c2:8c:fd:93:95:da:78:6a:9b:66:8a:
72:e8:c2:1c:22:0f:bc:1c:5a:91:f0:50:69:6e:17:d6:d1:d2:
ea:8c:d5:bf:39:4b:a5:c6:29:a8:c4:5c:29:ec:b0:a2:1f:3f:
dc:1c:b5:ad:a4:90:b7:4a:40:06:a6:c9:69:d6:08:4a:f7:11:
30:77:e2:08:39:f3:6a:2a:b6:10:13:d2:3d:9d:86:c9:cd:fa:
1f:ee:06:0c:91:11:10:f3:56:fb:68:73:40:1e:19:fb:f4:a1:
da:c7:9c:13:b8:57:f7:a9:cc:39:3f:38:ba:b6:3a:b5:e2:38:
2d:1c:cf:9b:dd:85:d9:76:0e:e3:b6:a7:c1:c8:f1:d4:7b:c9:
c0:02:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org