Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v2ZJ_69h1RJVJ_FrLzE-WjeGkQI.roa
File: v2ZJ_69h1RJVJ_FrLzE-WjeGkQI.roa (raw, json)
Hash identifier: wJnulO7NOXOBXlOdGA9WA5i9hmoCDZzmBZmhOwK+hIo=
Subject key identifier: BF:66:49:FF:AF:61:D5:12:55:27:F1:6B:2F:31:3E:5A:37:86:91:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0182C7F23F027AB00079CB2212B2BF73A37B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v2ZJ_69h1RJVJ_FrLzE-WjeGkQI.roa
Signing time: Mon 22 Aug 2022 23:45:17 +0000
ROA not before: Mon 22 Aug 2022 23:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 185.223.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c7:f2:3f:02:7a:b0:00:79:cb:22:12:b2:bf:73:a3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 22 23:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6649ffaf61d5125527f16b2f313e5a37869102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:91:df:c4:63:b3:6a:e4:cf:4e:4e:29:54:
9a:8a:b4:61:11:39:d8:b9:c1:a3:e9:3e:05:cc:f5:
a7:4f:29:1d:a6:5d:ee:d2:c8:8e:24:d6:3a:e5:57:
61:6e:2e:51:6c:b4:0c:13:e1:4d:3d:64:1e:a6:55:
27:0e:9f:28:06:2b:02:1b:0a:4c:7d:fc:23:91:c7:
9b:b9:b1:a9:df:06:ac:9b:cb:c0:69:8d:71:6d:8d:
a2:c1:d6:53:46:0b:38:a6:6a:99:50:79:87:2e:13:
e7:4d:14:c1:58:78:66:0f:c3:da:73:e1:1b:2e:74:
75:4a:9b:b4:b8:8c:5b:17:63:ee:19:0e:85:d1:e3:
3d:c4:17:60:83:fd:ca:19:38:db:e4:3b:c2:cd:ae:
31:c8:4c:9e:64:d9:6f:7f:32:b3:32:ce:16:c6:fc:
e1:da:f9:a7:36:29:e0:3e:15:21:f5:05:7c:13:bd:
a0:93:7d:1f:cd:28:7e:0e:43:59:e9:8d:db:16:a1:
1a:5e:91:ac:b5:e1:49:2c:68:82:9a:04:0d:b8:d5:
15:11:84:26:61:bf:f7:bd:08:d2:72:de:27:e9:de:
f1:68:fd:6a:6d:e5:a3:51:42:f9:11:8a:1f:4d:e0:
05:12:ef:ac:18:fa:43:d3:91:59:c9:7b:be:8c:e5:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:49:FF:AF:61:D5:12:55:27:F1:6B:2F:31:3E:5A:37:86:91:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v2ZJ_69h1RJVJ_FrLzE-WjeGkQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:49:5e:8d:07:1a:76:d0:8f:95:ca:45:4e:80:f0:3c:78:59:
23:6b:18:f7:72:07:0c:8b:86:66:bc:a9:87:62:0e:65:62:de:
f5:4b:61:0d:fe:40:eb:d1:3c:6a:dc:54:db:a0:9f:19:2c:14:
93:22:7c:4b:1a:44:e4:90:53:3e:ea:a9:80:cf:27:db:c3:fd:
12:af:22:c6:1d:72:77:31:91:9b:27:fb:5f:22:91:ce:7b:6f:
59:06:cc:e4:f9:3d:a7:ea:7c:8f:7c:68:9f:8a:ed:b3:35:65:
2e:9f:cc:ce:ed:e2:6a:9d:a0:22:89:41:53:40:b9:63:de:ed:
85:48:46:f0:19:fc:a5:89:47:f2:24:f3:e9:56:8b:75:c1:df:
8b:79:b2:9d:81:f4:30:bf:77:f3:78:27:69:87:53:f9:ba:6b:
87:ad:57:67:d4:22:b1:fd:fd:2e:24:18:db:73:c0:68:de:4d:
f6:0e:be:3f:b4:a7:7e:cb:0f:f0:03:0b:21:11:ee:3c:fc:46:
e0:b3:b8:ba:cc:fa:96:20:ee:ee:18:a4:69:f6:62:57:da:17:
d9:77:0f:c5:34:e1:42:03:68:dd:a4:87:21:7e:5b:cf:54:0c:
6e:aa:05:fb:f4:42:d1:38:97:ea:de:69:85:ad:09:b6:8a:bf:
69:23:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org