Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rq91DOX0DkmnHMDM6NPNzA3K6s8.roa
File: rq91DOX0DkmnHMDM6NPNzA3K6s8.roa (raw, json)
Hash identifier: L2+gvoN65DfQbtZYZwj9Nq6CYAukv7789vK0lOS2DGc=
Subject key identifier: AE:AF:75:0C:E5:F4:0E:49:A7:1C:C0:CC:E8:D3:CD:CC:0D:CA:EA:CF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 06E0FB6A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rq91DOX0DkmnHMDM6NPNzA3K6s8.roa
Signing time: Sun 13 Feb 2022 13:03:48 +0000
ROA not before: Sun 13 Feb 2022 13:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.226.104.0/24 maxlen: 24
185.238.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115407722 (0x6e0fb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 13 13:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeaf750ce5f40e49a71cc0cce8d3cdcc0dcaeacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:5a:be:44:cf:7e:46:46:a5:bf:98:d6:51:
f3:89:d4:ee:94:ce:9a:85:3f:7f:51:ae:80:12:c3:
4e:cc:a4:bb:ca:28:f8:a3:69:e2:75:53:81:59:82:
0a:60:b3:f3:0d:dc:1b:46:64:3d:ed:a3:84:3a:8a:
bd:29:81:bf:98:e1:a7:62:72:93:59:ff:d2:c5:50:
a6:8f:c8:8f:9d:4e:f7:30:5a:3d:83:c3:d9:91:64:
4e:42:7d:82:56:09:10:c7:b6:62:6a:88:53:7e:25:
50:20:f1:83:9e:ca:1d:c1:70:e8:52:c5:65:32:eb:
9b:42:91:ed:74:1f:bf:35:dc:19:9c:af:00:82:0b:
7f:62:0b:21:bc:40:31:d5:b5:ea:88:65:26:f2:d8:
23:da:67:e2:3e:cd:6f:24:37:52:ce:23:e5:54:0e:
ff:28:a9:12:ea:19:50:2d:2b:8c:27:f5:4e:5e:df:
f2:26:22:e1:25:81:74:3f:f2:be:72:c4:2b:d9:22:
0c:d8:be:e6:e1:ac:95:31:2b:29:3c:65:72:a4:0a:
0b:a5:7c:8a:ef:68:66:0f:2d:6a:9a:db:e4:75:21:
a6:ec:21:27:57:bc:d0:68:62:df:08:32:8e:b1:ef:
61:55:32:67:30:41:7a:e2:f5:7b:f5:b2:c2:2f:d3:
c1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AF:75:0C:E5:F4:0E:49:A7:1C:C0:CC:E8:D3:CD:CC:0D:CA:EA:CF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rq91DOX0DkmnHMDM6NPNzA3K6s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.104.0/24
185.238.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:05:d4:ce:96:18:02:6d:0d:19:4b:80:4f:99:64:e6:31:e4:
d7:d3:13:c5:22:4f:3c:28:34:5a:48:79:b4:f8:29:5e:9d:63:
00:1c:0a:b6:31:3f:a6:da:28:02:dc:40:87:0d:df:62:b5:0a:
04:21:be:83:30:53:6f:57:5b:d8:32:4d:ad:be:f6:43:a7:b7:
9c:9f:19:3b:a5:69:fa:ee:3d:d8:a2:22:eb:9e:06:e1:cd:b6:
2e:85:e6:a7:df:07:1d:9e:35:0e:6d:e2:ac:eb:27:8d:ca:14:
e3:54:1b:6a:3f:30:ef:e6:2f:f2:55:7d:46:77:0f:4a:99:5e:
10:34:eb:5b:55:74:9e:80:43:6c:86:48:d8:7e:00:ca:c3:2a:
01:bb:67:b0:ad:72:d0:40:82:94:86:61:d0:70:0f:6e:6b:61:
00:3e:73:20:6e:d4:43:08:81:12:4f:a4:06:7b:78:2c:fe:37:
f1:7e:4f:70:03:89:20:af:bd:c4:3d:43:f1:ab:f6:c0:1e:bf:
8f:ed:d9:f9:0a:5f:c9:92:af:0b:f4:04:0a:e6:5e:76:69:76:
63:35:25:7a:d3:fc:e1:b0:c3:1a:9f:8a:a1:18:eb:74:38:fb:
85:aa:f7:69:fc:33:8c:09:f3:cc:ec:92:01:73:2a:bf:7a:0e:
f9:e3:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org