Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tvGJbIh2SrdMQee5TNbiWg2NUqY.roa
File: tvGJbIh2SrdMQee5TNbiWg2NUqY.roa (raw, json)
Hash identifier: Oln87YnHaIN2SYQxoQlYvIP11wx2bfM2Zve8seQcszw=
Subject key identifier: B6:F1:89:6C:88:76:4A:B7:4C:41:E7:B9:4C:D6:E2:5A:0D:8D:52:A6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 074E638D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tvGJbIh2SrdMQee5TNbiWg2NUqY.roa
Signing time: Sat 26 Mar 2022 12:26:13 +0000
ROA not before: Sat 26 Mar 2022 12:26:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 185.225.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122577805 (0x74e638d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 26 12:26:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6f1896c88764ab74c41e7b94cd6e25a0d8d52a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:09:7c:cc:64:ba:61:e8:bc:a5:4b:46:96:
6e:56:7d:da:d0:34:d3:03:14:af:ec:fc:01:d0:f3:
d7:73:54:3e:b4:5d:6f:56:23:de:9f:8c:00:6c:66:
05:c7:b2:4a:8c:dc:4c:44:41:79:81:44:04:6f:24:
fc:87:99:b1:9f:43:c7:e6:ab:23:41:8e:46:69:27:
da:26:ae:f0:5c:b3:d9:2c:0c:da:c4:cd:4a:42:dc:
d3:22:9c:1a:6a:58:19:c3:a3:44:74:7e:20:58:a9:
67:b2:37:f9:36:0b:fd:ac:e1:9b:81:d9:08:cd:f5:
4f:28:76:08:e7:05:91:6c:a7:aa:f8:ff:89:50:c3:
5b:60:23:3b:e9:e6:b0:50:4b:f8:f0:7b:be:30:a3:
40:b9:b9:0c:1a:ca:75:6c:29:a7:20:56:ae:76:ee:
e9:e4:ff:e8:10:72:f4:77:7b:02:a2:f1:45:b9:9e:
37:99:6e:76:ff:f6:97:a3:e9:97:c1:f9:3d:18:14:
20:4e:4c:e4:9d:c7:fc:48:6d:fd:d7:a4:56:b9:26:
c6:bd:14:ed:36:e2:88:f9:4f:be:9f:b3:c6:7a:b4:
65:22:f5:32:52:6c:c9:20:18:28:45:6a:79:f0:18:
9d:b4:25:af:9c:8e:84:4c:f5:73:06:cc:db:bf:e5:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:89:6C:88:76:4A:B7:4C:41:E7:B9:4C:D6:E2:5A:0D:8D:52:A6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tvGJbIh2SrdMQee5TNbiWg2NUqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:30:4d:6a:70:18:c9:bc:f0:c3:d3:2d:b9:90:03:7b:a1:61:
8a:45:0f:65:fe:96:fc:ee:aa:fd:0e:90:0f:9d:1d:d4:75:31:
57:21:99:d1:bf:2a:3d:d6:f9:19:71:3c:7e:1a:73:3c:8c:80:
73:85:bc:f8:5a:52:78:69:69:08:39:ba:e6:4c:a7:f5:f3:ae:
9d:e2:40:46:76:b5:72:35:f1:35:6d:cb:25:9e:1c:7f:87:97:
35:51:06:af:75:89:8e:8b:ff:87:81:9e:92:7f:a5:b6:4f:89:
e6:0d:46:7c:24:a3:a1:b2:c6:d2:e2:24:43:0d:a3:c0:ba:80:
9f:f6:b2:33:0f:69:f6:d3:11:85:80:14:cd:94:0e:84:4e:2f:
51:da:22:e9:0a:94:2b:41:58:5b:68:0a:8f:7d:4e:27:66:be:
05:15:91:7b:5c:0c:ac:16:e2:aa:d3:7a:80:de:79:4b:35:e2:
37:5a:55:fe:d3:ec:6c:a5:eb:27:71:6a:a8:d9:27:f4:8d:3a:
9a:1d:48:9c:e7:7b:79:a1:1e:f4:28:6b:2e:90:ed:65:ce:62:
58:2a:75:79:64:93:81:82:b1:32:d4:b9:8c:d2:56:d2:93:d8:
80:2c:2c:4d:c9:56:85:5d:2e:33:f2:fc:04:ba:9b:99:5a:b6:
9d:82:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org