Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o003BakEa7c7cgIjJRHOI6AFGyg.roa
File: o003BakEa7c7cgIjJRHOI6AFGyg.roa (raw, json)
Hash identifier: l7yL8AneRuflItXnAibjbZBiJwG7QBuP92TM6rUo1yU=
Subject key identifier: A3:4D:37:05:A9:04:6B:B7:3B:72:02:23:25:11:CE:23:A0:05:1B:28
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0183A3D7B7B5836503EE2880D890260C60C6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o003BakEa7c7cgIjJRHOI6AFGyg.roa
Signing time: Tue 04 Oct 2022 16:32:46 +0000
ROA not before: Tue 04 Oct 2022 16:32:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50666
IP address blocks: 185.228.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:d7:b7:b5:83:65:03:ee:28:80:d8:90:26:0c:60:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 4 16:32:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34d3705a9046bb73b7202232511ce23a0051b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:91:bb:88:18:7e:e3:56:19:a3:d2:15:af:78:
38:47:8f:04:4f:4d:84:45:cb:21:4b:de:86:cb:6f:
6e:e4:cf:00:ca:1b:c2:f5:5e:2b:91:73:07:48:2b:
f1:8f:97:1b:7b:81:d1:dd:9a:f6:83:e8:14:cf:c7:
bb:56:70:13:5e:3b:82:b0:8d:a5:3d:f8:73:19:15:
a2:5b:06:2c:35:ee:74:1c:3f:07:88:f3:b6:8a:8c:
84:21:56:98:e4:18:51:8e:fd:a9:57:2c:6d:bb:13:
31:3c:30:9c:b4:a3:f1:3e:20:4d:1e:24:a8:fa:9f:
93:06:b2:ee:85:09:00:af:40:34:59:b9:a8:3c:b4:
33:25:87:8f:3c:97:03:4b:27:8a:41:51:95:e3:fd:
f3:68:c1:17:e5:83:90:2f:d0:a5:da:24:02:fa:cc:
96:14:93:98:cd:5c:38:66:e2:01:ed:c3:92:e8:e7:
6a:6e:a1:d4:2b:ec:00:e7:70:bf:45:b2:bc:de:35:
96:0d:28:ed:0c:d0:fb:d1:3c:a8:42:4b:26:00:7d:
ea:d0:cb:56:ac:a9:3b:29:8f:15:3f:03:67:c4:ce:
30:c7:5d:51:56:ef:d1:6b:a9:3a:bd:21:1b:31:88:
53:9b:14:bd:e8:72:42:8a:2b:3e:3d:c2:61:db:89:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4D:37:05:A9:04:6B:B7:3B:72:02:23:25:11:CE:23:A0:05:1B:28
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o003BakEa7c7cgIjJRHOI6AFGyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:41:75:40:d5:a7:29:08:f9:b5:8e:60:ba:4d:5a:0e:c9:e5:
d7:73:21:81:18:8c:12:48:5a:44:17:f9:b8:b5:78:48:60:98:
e8:8f:fc:2e:d3:a6:85:d0:67:cc:a4:d2:51:64:ac:bf:22:de:
3b:fe:33:83:9b:bd:d1:54:b5:b0:39:5d:18:ce:06:26:eb:89:
49:70:56:26:e3:38:06:f2:07:23:e9:98:19:84:23:c4:d8:a6:
7c:f1:1d:4b:53:05:03:7d:83:c1:0f:33:fc:27:91:de:57:2d:
b0:f6:17:fa:2f:95:f6:96:79:27:e5:f2:eb:8c:7e:e0:47:bf:
bb:39:18:5f:a0:4e:bf:e5:88:36:cd:80:6f:a9:93:c6:c8:15:
2a:45:68:2a:bb:d6:b2:26:41:3b:12:f2:77:4c:1c:ba:40:b5:
3c:44:cc:3a:cf:02:ef:da:f4:ed:36:05:07:b7:83:50:99:61:
92:5f:9d:82:84:e5:be:28:88:ce:a4:9e:4d:3e:e1:3b:18:d6:
ef:12:56:25:50:4d:20:80:59:4b:0b:90:fe:80:63:10:cf:02:
75:d1:60:8c:f2:54:d0:08:ef:83:89:89:9e:ca:43:38:1e:58:
1e:80:eb:4b:41:69:da:c2:67:58:52:3c:65:d2:e6:c2:53:17:
28:48:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org