Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwpQZc26GDuaPBf6fsUunKLUqIA.roa
File: uwpQZc26GDuaPBf6fsUunKLUqIA.roa (raw, json)
Hash identifier: AqfpBXQrZ0/kD1OOGR/RwoM3GE1T6FYJy0tAK9OkIDk=
Subject key identifier: BB:0A:50:65:CD:BA:18:3B:9A:3C:17:FA:7E:C5:2E:9C:A2:D4:A8:80
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01845D4FD593AC40168A884A8074C230A1FD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwpQZc26GDuaPBf6fsUunKLUqIA.roa
Signing time: Wed 09 Nov 2022 16:53:43 +0000
ROA not before: Wed 09 Nov 2022 16:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 185.206.250.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:4f:d5:93:ac:40:16:8a:88:4a:80:74:c2:30:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 9 16:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb0a5065cdba183b9a3c17fa7ec52e9ca2d4a880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:49:60:96:75:d2:4f:81:43:74:86:47:8b:46:
4c:05:a4:84:27:86:9d:4f:2d:56:78:34:e3:02:62:
da:f2:61:91:8d:4b:6d:ef:d7:f8:b4:9a:8c:2d:ff:
ab:04:dd:61:51:85:03:73:95:9a:eb:29:38:db:86:
d9:49:d6:1c:bd:f0:2b:a4:b4:62:9e:cd:65:a2:00:
67:22:56:fd:9a:53:a7:d3:25:d7:28:b5:c5:c1:96:
3c:8d:84:29:35:e8:6e:c8:da:20:88:e6:59:72:af:
19:9b:9f:fd:66:73:6f:2f:aa:36:be:3a:42:5a:ba:
20:f1:0c:a7:c6:71:16:3c:06:2c:e7:1b:05:9d:c1:
21:71:e2:aa:36:9f:ff:93:e3:00:38:23:59:44:e1:
92:ec:97:72:cb:ed:58:d1:31:e4:7e:0d:42:fe:17:
29:f3:f7:4f:82:42:e0:26:c3:6c:81:83:25:b4:22:
32:6a:74:a9:33:a9:75:47:3d:a2:50:a4:b4:48:fe:
3e:3c:f0:22:d2:44:45:e1:96:1e:0d:cc:51:80:af:
08:28:d0:92:ee:45:0a:38:3d:d4:01:54:d6:99:f8:
ca:83:3f:55:b2:84:00:e7:f1:8b:f1:41:fb:3c:06:
1a:c9:ee:8b:33:fb:98:a4:48:0c:ff:e9:9f:d6:bb:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0A:50:65:CD:BA:18:3B:9A:3C:17:FA:7E:C5:2E:9C:A2:D4:A8:80
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwpQZc26GDuaPBf6fsUunKLUqIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
185.223.155.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:04:ba:ab:0d:d4:fb:81:76:1f:51:20:87:f7:16:ad:4e:66:
4c:64:91:c8:70:67:44:0e:b5:e5:bb:8c:0a:75:c0:24:d8:33:
f2:5c:b0:a2:db:7a:2b:60:99:11:4a:56:0b:a7:1a:c4:1e:50:
5c:b0:f4:c6:6d:36:2d:89:7c:1b:50:41:1e:22:bb:7b:e4:8b:
47:a0:de:dd:9c:fd:89:9d:4c:8f:72:84:b1:f0:e4:01:26:db:
cf:80:b6:b5:1a:b2:ef:1c:2a:c9:cd:9b:e2:c1:e6:f2:e1:7e:
f4:c2:31:e1:da:c4:50:41:8b:d3:16:dc:e4:20:6b:a2:92:2f:
17:5a:dd:fe:79:d2:f5:3b:53:2a:98:06:32:19:29:f6:34:29:
53:e8:43:8f:95:bc:7d:53:c1:27:1e:ea:07:a3:72:4f:b6:fd:
82:c5:42:84:00:24:64:83:b7:25:d9:5f:07:6b:2b:b0:99:83:
49:41:38:df:3c:21:a9:91:36:95:98:7a:06:d9:95:18:c9:e1:
44:1d:3b:6e:5f:92:10:d5:67:7b:dd:2f:b6:46:1a:08:c4:d1:
fd:ee:6d:e5:eb:74:27:96:ec:cc:0d:0c:13:79:aa:29:2b:1a:
9e:8c:07:0a:f8:1c:59:e8:6a:ee:17:0e:60:8d:a9:ff:fe:fb:
38:a6:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org