Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uN1lYR6nqPDqirK81_qQLYoPFRo.roa
File: uN1lYR6nqPDqirK81_qQLYoPFRo.roa (raw, json)
Hash identifier: 7pALXxFbwfyqt0xUAkzxZm4zZucuDu0dC7EMs+uZ9ek=
Subject key identifier: B8:DD:65:61:1E:A7:A8:F0:EA:8A:B2:BC:D7:FA:90:2D:8A:0F:15:1A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 063EE6E8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uN1lYR6nqPDqirK81_qQLYoPFRo.roa
Signing time: Sat 01 Jan 2022 06:52:36 +0000
ROA not before: Sat 01 Jan 2022 06:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 185.248.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104785640 (0x63ee6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8dd65611ea7a8f0ea8ab2bcd7fa902d8a0f151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:cf:78:25:32:64:2b:26:e9:d9:94:72:95:
6d:73:a9:01:13:ba:60:8b:b4:a1:f0:46:34:21:4e:
55:1c:68:01:d9:be:c5:e6:11:42:b2:5f:4e:ca:82:
11:db:df:de:33:d2:97:10:f8:2e:0f:0d:7d:09:91:
a5:fc:bd:9f:eb:ae:bb:10:f7:ac:b4:2f:85:3f:5f:
37:da:ba:30:db:ef:0f:52:d4:67:69:3a:6c:b2:a7:
f8:2d:80:93:b0:56:f2:d2:fc:97:e8:35:fe:80:e6:
82:4e:7a:f4:ec:40:7e:f7:06:f3:7a:8d:43:a7:a2:
3c:1c:e4:c2:c2:0e:ef:5b:72:37:38:cc:e5:0d:2a:
f2:f9:ba:c6:70:b4:9e:25:9c:d7:83:e7:e8:42:8f:
b4:3b:f9:82:2d:f9:78:59:39:6c:59:dd:c1:a7:bd:
68:4f:69:31:a6:ae:3a:86:8c:d3:9a:fb:5c:5c:ac:
c4:ed:e3:6a:aa:12:e6:89:97:25:46:65:fd:e4:25:
d2:ea:4f:51:8b:0a:03:e2:62:00:3d:4d:89:23:b9:
09:84:8a:7a:5a:7c:7f:fd:c2:a6:b2:30:05:47:e0:
74:38:62:fb:fe:6c:a2:8a:f2:9a:5f:f6:d6:5d:69:
f8:ad:7a:94:ff:f4:c4:bc:fb:0a:51:b1:84:c3:35:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DD:65:61:1E:A7:A8:F0:EA:8A:B2:BC:D7:FA:90:2D:8A:0F:15:1A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uN1lYR6nqPDqirK81_qQLYoPFRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.200.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ec:10:1b:c0:40:ee:63:70:62:ef:c3:24:ef:1b:f6:bf:54:
c1:d5:c6:86:ab:2d:d9:c4:17:92:d8:fa:ea:5e:f6:4a:6b:dd:
49:9a:fc:84:2e:b7:b6:92:eb:e8:e8:67:10:ea:f3:2c:a4:1d:
30:26:6a:15:2e:86:0f:8e:db:56:dc:4c:fc:90:9a:16:be:77:
aa:2c:96:06:16:fa:cb:a0:dd:a7:44:ab:43:5e:32:7f:81:1c:
47:80:ba:3f:cb:c1:46:37:e1:85:96:0d:9c:6d:c4:48:1e:19:
c7:0c:c2:02:27:ae:31:f9:a7:58:24:09:7e:c4:e1:19:7b:53:
e2:c6:37:03:5e:89:70:bd:b5:c5:fd:76:83:b3:4b:79:ca:3d:
d7:85:da:e7:05:23:c4:ed:52:8a:46:1c:97:4d:a8:e4:d4:50:
bb:d6:f5:8e:50:16:f6:ef:db:77:e8:3d:d5:b6:9e:a2:c3:7f:
a5:d1:c6:b3:96:a1:1d:83:ea:0d:42:f6:28:76:f6:21:e9:27:
af:ce:3e:b4:3b:7f:36:93:9d:4e:4f:ba:ba:39:0f:0e:60:74:
1c:3d:fd:1a:85:2a:9c:6b:4b:54:55:e7:27:a4:4e:54:21:ed:
01:91:4d:32:c3:ca:7e:fc:ea:65:1b:05:5e:b4:bf:af:ce:ee:
6d:2b:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org