Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o6PiIDpwtZOMg1Js2JZZLJ3UUaw.roa
File: o6PiIDpwtZOMg1Js2JZZLJ3UUaw.roa (raw, json)
Hash identifier: rPQYheFlkCUCRdCB0rGGCdglyeYcvRvULzech4qLNYo=
Subject key identifier: A3:A3:E2:20:3A:70:B5:93:8C:83:52:6C:D8:96:59:2C:9D:D4:51:AC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0637E952
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o6PiIDpwtZOMg1Js2JZZLJ3UUaw.roa
Signing time: Sat 01 Jan 2022 06:52:30 +0000
ROA not before: Sat 01 Jan 2022 06:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 185.234.23.0/24 maxlen: 24
185.234.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104327506 (0x637e952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3a3e2203a70b5938c83526cd896592c9dd451ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:28:60:d5:a2:bd:b1:21:d9:47:d3:56:41:
33:4a:14:d2:d2:32:f2:77:0c:63:e4:6d:7b:e9:0d:
53:67:37:83:f8:34:82:13:5a:92:24:dc:36:34:c1:
7d:df:f8:d1:d1:55:58:6b:c2:8a:37:6c:60:9a:f0:
ed:20:37:81:ec:98:1e:c9:41:a0:0b:66:5f:04:71:
10:60:2c:9b:5b:33:95:22:32:6c:c4:40:6e:16:cf:
4d:75:38:03:cd:19:c0:c2:ea:86:c7:29:e8:10:e8:
14:75:33:94:1e:1f:f4:1c:f4:46:9b:05:e2:b5:6c:
7d:ac:d0:65:b8:bd:3b:98:b8:da:de:7a:e6:23:e7:
84:a2:17:67:24:9d:a7:70:ad:3c:a1:eb:9d:f4:ee:
6f:22:ed:00:c7:7a:b4:36:e9:4a:c8:bc:76:28:0b:
97:b5:b1:c2:28:c0:54:92:22:e1:ed:97:bf:5c:a8:
e2:38:ab:36:39:4b:37:03:90:90:89:67:00:b7:e4:
fd:b4:4f:33:7d:0b:87:49:ab:7e:d6:fe:1c:fb:29:
01:71:f8:38:b5:82:42:59:a6:e7:ba:fc:a2:d5:2e:
50:f1:d9:c7:5a:53:6e:60:67:ce:91:ab:e2:db:e1:
5c:1c:ee:94:61:67:16:f9:00:81:60:14:c9:20:1d:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:E2:20:3A:70:B5:93:8C:83:52:6C:D8:96:59:2C:9D:D4:51:AC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/o6PiIDpwtZOMg1Js2JZZLJ3UUaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.20.0/24
185.234.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:bf:1b:e5:f5:57:8c:32:d5:d3:1f:18:e2:2b:32:ff:e1:1a:
13:5f:de:a6:cc:74:06:e5:a8:70:1a:34:2c:84:00:0c:68:b5:
90:7c:07:0c:6a:b6:68:59:4c:3d:0e:a1:e6:75:7f:b3:f3:8c:
ff:19:68:35:9f:fb:b8:70:45:20:53:80:01:7a:cd:2c:fc:ab:
20:58:58:fd:4a:e2:89:0e:c5:ae:30:71:da:fd:33:57:83:93:
76:95:d8:9a:f1:7c:e1:20:a3:a8:f9:f3:94:0e:4b:9d:9d:e3:
b2:d0:ae:3f:a1:18:03:a5:10:71:ff:ed:53:4a:fa:ac:47:62:
2e:90:78:7e:3e:56:4f:c8:11:ad:61:f3:dd:4b:6b:51:0a:59:
e2:70:cb:56:8d:89:e3:54:4c:c3:a4:23:91:76:7a:68:93:87:
4e:65:aa:7f:66:4f:14:e5:80:a3:38:db:c4:f4:0b:1a:d9:b4:
13:df:f3:1f:5f:04:02:f6:bb:ab:94:8c:4e:ac:ef:11:2e:b2:
9f:84:a6:70:9d:46:91:8b:13:9f:46:2c:05:2d:9b:67:ec:2f:
3c:e9:b0:bf:b1:bc:9d:49:e6:a2:76:fc:a8:8b:cb:62:73:0f:
8f:43:dd:c3:ae:fa:ce:a5:22:87:4d:81:1c:e2:77:0c:28:0e:
06:63:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org