Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tto-eMXN4tTsahyP571pKullY64.roa
File: tto-eMXN4tTsahyP571pKullY64.roa (raw, json)
Hash identifier: pMstEXAnlfqK81mxVq4cddwfjfve31IswORlpl8F8tk=
Subject key identifier: B6:DA:3E:78:C5:CD:E2:D4:EC:6A:1C:8F:E7:BD:69:2A:E9:65:63:AE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07ACDD12
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tto-eMXN4tTsahyP571pKullY64.roa
Signing time: Thu 28 Apr 2022 19:33:02 +0000
ROA not before: Thu 28 Apr 2022 19:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128769298 (0x7acdd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 28 19:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6da3e78c5cde2d4ec6a1c8fe7bd692ae96563ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:c7:6e:27:d3:b7:bd:fa:5a:f6:e3:9e:69:
ba:69:87:36:53:f2:03:fe:9c:2c:2c:cb:4c:34:6a:
66:c6:42:1f:12:c9:ae:82:db:93:24:72:7f:03:34:
0f:cc:02:3d:e2:77:0f:ec:f1:66:0a:40:ea:2b:76:
f9:ee:0f:d0:50:92:06:05:0a:aa:c3:9e:05:3a:e8:
da:10:ce:51:49:ae:29:a2:4c:f9:bb:eb:4e:ed:8c:
63:13:4d:fd:2b:49:df:64:ad:81:a0:9d:eb:71:21:
65:83:b0:0d:15:4f:6e:66:3e:18:5f:33:12:96:cd:
1b:a6:26:55:8d:84:20:ca:4c:58:6b:fa:3f:93:bc:
42:6b:48:5c:3b:e7:ba:7f:96:b1:32:ff:6a:07:a4:
99:f9:50:52:1b:00:c3:ee:ab:d6:bf:0b:aa:9b:c1:
14:93:a9:52:cc:58:77:fd:ed:1a:79:1f:35:c4:94:
e1:10:c5:7b:08:6a:0c:35:1d:98:90:e3:92:53:99:
2f:16:d4:ea:2f:88:ac:20:8b:28:dd:19:9c:47:c1:
ee:1f:86:42:d1:ea:5e:45:70:e3:dc:7e:f1:9e:fa:
8f:45:74:73:1e:f0:28:21:31:89:0b:ff:32:1c:53:
03:9d:8c:1c:5b:4d:69:42:4f:6f:ff:45:c0:bb:c7:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:3E:78:C5:CD:E2:D4:EC:6A:1C:8F:E7:BD:69:2A:E9:65:63:AE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tto-eMXN4tTsahyP571pKullY64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
185.223.76.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b3:2c:df:0c:9b:a8:55:ac:c8:2c:94:89:36:81:3e:27:bc:
0d:74:9b:13:cd:92:e2:57:7e:51:7d:00:cc:c4:b5:44:e1:39:
b5:ec:d8:09:cf:b9:ae:5f:31:5e:d4:9c:7e:82:5f:0c:bf:e2:
24:af:83:03:7d:6c:86:c9:d6:17:da:d1:8e:c1:f2:1b:b5:ac:
a6:2a:a2:c7:3d:87:7b:28:17:b0:3f:6d:69:a8:40:80:71:5d:
25:fd:65:a3:19:b2:2c:3c:ea:dc:0b:75:1f:09:fb:aa:95:de:
90:d0:f0:63:35:18:e9:47:03:56:a2:a4:73:c3:d5:d9:d9:0e:
d2:28:00:1a:ae:8a:56:9b:5a:00:6f:70:17:1e:46:9d:d8:78:
23:7a:a9:8a:53:b0:37:59:3f:b6:e4:83:19:3c:a5:1b:6b:37:
22:c2:58:9e:78:cf:45:b7:66:b7:49:dc:65:46:49:bc:76:a6:
6b:7f:75:a9:50:33:ab:2e:4a:cb:af:05:8e:d0:a9:ce:03:3c:
02:0e:44:81:b8:c7:96:f7:61:0a:df:3f:7d:49:eb:75:fd:6b:
ea:1d:17:dd:bc:f5:a2:0d:77:3c:60:9f:b7:6a:cc:e2:55:52:
1f:3f:9e:53:b5:3e:35:c8:1c:7e:af:0b:16:6f:45:c9:9a:0d:
fd:d7:49:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org