Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vU8vpw9TPWsR1V7hM4d4j76cszs.roa
File: vU8vpw9TPWsR1V7hM4d4j76cszs.roa (raw, json)
Hash identifier: C1HTspO2+lScSPxBulYGWoaJ8rPFe8ORX8zpY9HqRHk=
Subject key identifier: BD:4F:2F:A7:0F:53:3D:6B:11:D5:5E:E1:33:87:78:8F:BE:9C:B3:3B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018484EC86857CB4EC5F1C1DEFA8E9332215
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vU8vpw9TPWsR1V7hM4d4j76cszs.roa
Signing time: Thu 17 Nov 2022 09:30:04 +0000
ROA not before: Thu 17 Nov 2022 09:30:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.240.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:84:ec:86:85:7c:b4:ec:5f:1c:1d:ef:a8:e9:33:22:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 17 09:30:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd4f2fa70f533d6b11d55ee13387788fbe9cb33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:4c:0e:3b:43:cf:05:b4:6c:66:25:f5:1e:
4a:22:7a:82:ee:d2:72:f6:dd:d5:e3:5a:71:7c:11:
d5:e9:2a:a3:3c:df:90:ac:69:b2:82:af:6f:99:d6:
24:df:b9:63:5d:1a:54:a7:a0:47:75:42:fc:c6:41:
fb:8e:a9:b0:72:77:5c:0a:c6:32:86:3a:63:ab:8a:
80:49:20:35:96:e3:15:09:df:e0:c1:54:0d:fd:00:
51:c2:4f:f9:36:e0:51:bb:1a:36:45:4f:f0:89:da:
68:9d:c3:2d:6b:a1:fc:03:1d:16:89:6d:94:c0:3f:
61:c6:10:27:7e:21:2b:8a:5e:87:40:02:ad:62:15:
13:c7:c0:ee:f2:0c:e1:0a:24:90:47:33:3d:23:3d:
cc:8e:54:38:83:31:92:a4:e2:50:27:8f:71:5a:89:
b9:b0:ac:b5:da:d0:ac:9b:58:51:bf:6e:4f:96:f0:
cf:8a:2d:e1:5b:d5:ad:67:b4:1a:35:7c:fd:64:a4:
ba:7d:8a:8e:72:4f:2d:b9:e0:9e:a4:b4:3d:9e:a0:
0c:1c:a7:9a:4c:18:af:9d:ae:60:4a:2a:dc:6f:02:
c0:5f:3c:a6:c4:8a:38:c6:a9:1e:98:eb:8f:81:76:
30:b1:84:88:a6:ef:42:8f:f8:e1:30:d1:7a:7c:04:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:2F:A7:0F:53:3D:6B:11:D5:5E:E1:33:87:78:8F:BE:9C:B3:3B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vU8vpw9TPWsR1V7hM4d4j76cszs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:1d:1a:99:0d:98:66:f6:9c:da:8a:2b:78:dd:7c:07:57:e0:
12:d9:0f:98:f4:2f:30:51:34:be:48:b9:68:24:73:45:66:01:
ab:85:91:05:64:e0:de:18:61:9b:50:4c:b2:ef:76:90:71:8a:
20:34:b5:c7:ad:12:8b:1f:f6:57:a3:e7:5e:dd:ac:d8:6f:0c:
6b:dd:15:14:22:3a:58:e2:99:25:67:49:bf:f5:f2:eb:a5:ba:
1a:3d:19:b9:0c:0c:78:6f:2d:12:1a:35:9f:7f:a7:20:28:69:
fb:27:68:6a:bb:35:3b:1e:25:a0:dc:06:3b:ec:29:6a:8b:f9:
ff:6d:84:c2:77:44:25:c5:2b:9c:3c:b5:66:5f:5b:e2:ad:6e:
88:7c:a5:ce:d7:2c:66:b4:3b:35:38:d5:3a:bd:a1:0c:bd:3f:
df:e4:23:a5:58:5a:2b:e6:08:94:9c:c0:e5:7c:59:89:8f:1f:
6c:6c:19:e1:57:68:70:89:5c:d5:11:07:3b:57:74:95:a7:d3:
ec:0f:b6:dd:c4:78:76:32:7e:c4:0b:2f:f8:2b:5c:e9:55:6a:
62:f5:81:1b:a0:ff:d1:07:f0:08:78:71:6d:24:15:ae:58:ae:
8c:17:bd:41:d5:3f:a7:3f:c2:57:11:5f:99:d7:64:5a:c1:2c:
bd:fd:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org