Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSsI3GOo2w66uzqHviMz-p3nFs4.roa
File: oSsI3GOo2w66uzqHviMz-p3nFs4.roa (raw, json)
Hash identifier: sSToJva5pzstJUo7/ciNaw8bsLLKSjoVuSrwSjE4swc=
Subject key identifier: A1:2B:08:DC:63:A8:DB:0E:BA:BB:3A:87:BE:23:33:FA:9D:E7:16:CE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0648289D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSsI3GOo2w66uzqHviMz-p3nFs4.roa
Signing time: Sat 01 Jan 2022 06:52:41 +0000
ROA not before: Sat 01 Jan 2022 06:52:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 185.206.251.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.246.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105392285 (0x648289d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12b08dc63a8db0ebabb3a87be2333fa9de716ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:5c:c7:f0:89:04:28:87:a6:ab:ee:40:60:
29:f1:22:81:14:e3:83:74:96:42:fd:79:38:4d:0d:
01:e2:7a:93:4a:24:d5:f7:a7:0b:78:d5:5d:68:23:
06:96:4d:a9:21:f3:27:df:91:a0:7b:25:49:ee:e0:
2c:38:13:de:c8:2a:54:44:32:49:13:39:8d:d8:78:
e3:a3:7b:68:9e:b9:be:b3:26:69:1e:43:14:2d:34:
f1:99:ef:41:82:03:af:fc:c7:9d:15:cb:c1:8b:b0:
14:b4:8a:f0:d5:76:8b:87:a9:80:92:58:52:23:4c:
97:69:95:24:88:df:7d:90:a8:2d:6a:4a:9b:32:e5:
14:58:d0:8e:d5:69:d6:b7:89:59:8a:1e:74:5b:9a:
bb:55:9d:33:5a:7a:00:6a:6b:ec:3a:29:c5:a0:d5:
8d:3b:33:a7:76:fd:f3:76:12:4e:65:ae:20:61:0e:
d7:01:e6:9b:8c:c9:ea:dd:e8:78:47:5b:69:85:86:
cf:8f:0f:91:73:60:d2:6c:3f:29:2e:0f:ed:eb:3b:
e4:ef:cb:62:45:86:b4:3e:fa:08:ad:39:c4:72:d2:
c0:20:54:43:7d:19:48:b0:4e:34:9e:0a:fa:74:6c:
4a:fe:90:23:e3:20:5c:0d:b2:94:75:e9:da:4b:5b:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:08:DC:63:A8:DB:0E:BA:BB:3A:87:BE:23:33:FA:9D:E7:16:CE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oSsI3GOo2w66uzqHviMz-p3nFs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
185.246.114.0/23
Signature Algorithm: sha256WithRSAEncryption
51:b9:0d:54:9e:ec:9d:c2:26:24:2f:04:68:dd:be:fe:18:32:
ad:b4:a3:80:f9:9c:f9:f1:3e:58:bd:93:c9:93:01:09:f4:5d:
e6:81:bc:45:59:3b:57:00:f5:24:64:ec:f5:4d:b9:e9:ce:5c:
3d:5e:8d:40:9e:60:d5:e8:87:7c:3d:14:0a:ef:8b:77:14:19:
93:6e:4b:9e:47:ae:01:65:74:36:0e:88:d7:45:fd:7f:67:95:
e7:56:db:89:7f:66:6b:3a:2b:4f:07:19:a4:1f:26:97:53:f9:
13:61:f3:a7:2d:85:88:cf:83:e0:df:1a:b7:90:c5:6c:0f:83:
11:03:08:e0:c1:d9:64:b6:1c:f8:53:15:35:05:4c:f9:70:ad:
32:38:49:da:71:3a:c5:b8:9b:4b:bc:2d:b3:a9:5e:a4:a0:cc:
49:78:9a:8d:d9:c1:0d:32:07:46:2c:e0:69:42:84:ba:60:87:
fe:88:1d:64:43:23:5d:dd:a9:62:6b:09:06:db:22:88:5e:84:
bf:9f:2f:c2:d9:04:96:a9:e5:45:04:ed:73:71:0c:f5:03:0e:
d3:79:ba:dc:e5:d9:8a:3b:d9:a2:00:bb:28:fb:de:af:50:d0:
d9:18:3d:53:d3:f0:37:14:ba:52:90:a7:cf:bb:e5:28:6c:8a:
87:fd:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org