Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uB0b4PbIhsIUiNd5xeooMaEMMj4.roa
File: uB0b4PbIhsIUiNd5xeooMaEMMj4.roa (raw, json)
Hash identifier: UY5sUgoYT6UGImCWqqTdYJz7TrRFr+4YM63e6vzHCsE=
Subject key identifier: B8:1D:1B:E0:F6:C8:86:C2:14:88:D7:79:C5:EA:28:31:A1:0C:32:3E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07CC7E0D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uB0b4PbIhsIUiNd5xeooMaEMMj4.roa
Signing time: Thu 05 May 2022 10:03:49 +0000
ROA not before: Thu 05 May 2022 10:03:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.194.29.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130842125 (0x7cc7e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 5 10:03:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b81d1be0f6c886c21488d779c5ea2831a10c323e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:31:c4:34:e3:c1:e9:b5:e8:d6:f3:e1:11:
b7:a8:8f:54:bc:35:12:90:02:04:13:43:9c:00:25:
36:1a:b4:3a:87:a2:c0:d0:c8:cf:77:51:37:43:14:
46:c9:df:b9:d2:3a:14:1a:b7:ff:3f:f6:84:a7:8b:
95:df:59:61:41:1f:b9:46:35:da:44:a9:84:92:ed:
d4:87:a9:4a:72:bd:e8:44:7c:9c:cd:f6:b8:88:e2:
db:76:5b:cc:4f:03:1b:1c:ea:dd:ec:93:7f:ac:f2:
3d:6b:bc:4b:42:95:62:a0:4f:4a:56:37:fb:36:79:
90:0a:8b:b2:eb:59:c8:04:e8:65:00:34:19:60:47:
4a:76:76:15:de:33:82:70:a2:36:83:c9:c8:58:f0:
62:82:61:d6:79:be:dd:09:a2:aa:74:a4:c9:26:e2:
91:71:01:08:1c:b9:7a:61:f1:b8:ae:62:d8:11:49:
47:1e:3f:b1:77:e1:19:42:0e:f3:26:2e:18:5b:d6:
85:db:f0:44:0f:7a:78:84:33:95:9c:da:30:e1:5c:
23:46:49:c2:e7:70:b9:2b:05:52:2e:af:e5:fc:19:
42:30:97:e7:af:26:67:76:56:ae:b8:72:74:6a:5e:
98:33:85:9e:22:75:40:94:b4:3f:20:b9:d9:9e:77:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:1B:E0:F6:C8:86:C2:14:88:D7:79:C5:EA:28:31:A1:0C:32:3E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uB0b4PbIhsIUiNd5xeooMaEMMj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a9:33:42:e0:32:22:8f:4e:22:73:62:82:93:44:a3:d6:0a:
47:8c:e3:a6:9a:87:27:ef:dc:d0:72:49:b5:44:00:c4:3d:fd:
b8:39:c2:00:a6:3c:26:ea:51:ec:3c:eb:f3:fc:c2:d2:ec:13:
04:21:8b:aa:02:7f:a9:75:4b:ae:d9:e9:00:ce:50:8f:e7:86:
4f:9b:4d:7a:8f:03:16:8b:2b:59:c6:26:7e:cc:c6:48:99:44:
72:b0:72:7f:06:53:2f:85:d8:b6:a2:55:0f:56:83:e3:a4:03:
db:c4:2c:a2:58:76:60:09:09:1d:28:c2:7d:98:45:11:51:c5:
7c:9d:8d:21:cc:3f:7a:64:e9:21:cc:c9:b3:3c:7c:f4:87:b8:
58:10:e6:27:cc:59:52:81:d2:73:8b:6d:d7:bc:51:5c:14:b2:
2b:55:37:52:c9:ec:12:8b:4d:0a:d7:37:6d:6f:c8:3e:20:ad:
60:07:fc:2a:78:ed:f3:f5:32:20:98:fe:58:50:d3:f0:7b:eb:
42:b7:e1:ce:6f:43:4d:fd:36:32:67:07:54:ac:32:94:98:0d:
7b:a5:13:31:2d:38:db:9d:38:51:29:67:31:3b:2b:47:76:13:
61:5c:3f:bd:2c:b5:85:27:35:48:13:a5:dd:20:7c:41:db:1f:
8e:ed:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org