Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ooVqif-bIFhcucbbnYbepBaZVl0.roa
File: ooVqif-bIFhcucbbnYbepBaZVl0.roa (raw, json)
Hash identifier: Ce9iwQQ1baPDzm9fVVA8oJ0+FVgmybFbj2yJyOqvcu4=
Subject key identifier: A2:85:6A:89:FF:9B:20:58:5C:B9:C6:DB:9D:86:DE:A4:16:99:56:5D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06521066
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ooVqif-bIFhcucbbnYbepBaZVl0.roa
Signing time: Sat 01 Jan 2022 06:52:45 +0000
ROA not before: Sat 01 Jan 2022 06:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212849
IP address blocks: 185.254.156.0/22 maxlen: 24
185.230.48.0/22 maxlen: 24
92.60.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106041446 (0x6521066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2856a89ff9b20585cb9c6db9d86dea41699565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:4d:17:c0:af:ff:5b:71:23:21:0c:c4:48:
95:05:00:1b:7a:e1:be:d4:a1:aa:24:7d:d6:1a:1d:
24:0e:b8:a2:24:12:27:42:ba:96:d3:d1:c9:7f:88:
a8:30:f2:80:90:8e:e6:2c:4a:65:f5:d0:9c:e3:2b:
0c:72:66:64:d3:9d:28:46:e0:21:60:49:51:95:18:
c0:09:07:74:9e:64:6c:04:64:6c:30:fa:f9:35:45:
f2:16:c7:42:1b:42:f9:33:15:c8:53:99:ab:4c:4f:
2a:e2:71:f0:39:05:cd:0a:40:1a:32:a1:89:2a:d1:
8c:24:dc:45:81:e3:0d:27:3a:af:e7:b4:b6:d2:af:
28:b5:97:7b:9b:3f:cf:c3:e6:a4:ec:77:5c:82:c2:
24:9e:f3:2f:fe:7d:7d:45:2e:10:20:3b:7d:db:d0:
68:69:72:2c:32:ca:f7:16:f3:81:de:90:7d:aa:d5:
1f:f0:92:fd:b6:7b:52:07:4a:2a:23:20:75:68:e9:
f1:e6:a0:19:20:67:2f:fb:e5:d8:58:9c:a5:b7:b5:
3e:cd:d4:88:8a:ac:15:14:b2:05:66:3f:e7:14:18:
15:d5:59:5d:73:29:64:85:a3:ef:3f:1f:00:e8:59:
e8:3e:f7:2c:c4:e0:22:f4:fe:9b:73:96:2c:43:06:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:6A:89:FF:9B:20:58:5C:B9:C6:DB:9D:86:DE:A4:16:99:56:5D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ooVqif-bIFhcucbbnYbepBaZVl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.35.0/24
185.230.48.0/22
185.254.156.0/22
Signature Algorithm: sha256WithRSAEncryption
51:0e:6c:bb:d1:c9:91:b4:0b:43:33:12:cf:cd:1b:cd:00:d5:
1f:cd:49:f3:bf:01:90:99:80:b8:79:74:41:3e:98:a2:ac:a7:
7b:bc:75:13:74:22:93:d4:24:66:c0:5e:c5:67:30:91:ac:db:
76:39:cc:d7:33:e8:86:f7:16:af:a4:4c:b8:47:01:cd:66:c1:
e4:e2:16:ab:d5:1d:39:ac:89:e5:22:4e:99:6e:2f:f5:64:f3:
c4:de:d3:b0:4b:10:de:33:9c:b2:3a:8b:51:ab:01:8c:e6:83:
ef:7d:98:fb:c0:aa:24:5a:27:e3:26:97:1b:a9:9a:15:c6:12:
a2:5b:c8:87:ed:18:35:7a:fe:55:2d:d9:26:24:4c:c0:6e:78:
cd:75:b4:2f:ba:9b:44:f3:04:cc:a5:b0:46:7e:88:10:1a:0a:
7e:55:05:11:cd:27:d0:3a:8d:42:04:9a:0f:d0:e3:0a:41:ba:
a9:29:8d:6f:d8:2c:28:29:a3:80:24:e7:ea:e6:4b:2c:bd:cd:
0d:10:30:a5:5a:30:84:49:1f:15:f1:0f:58:1f:d3:7b:4b:7d:
f1:27:95:df:cb:e8:a1:b2:cd:8d:7d:d7:73:7b:93:0f:d0:da:
15:df:a9:43:ff:45:de:35:54:b0:24:81:54:76:68:25:54:5a:
3b:73:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org