Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vpqj4kC_n-z88UolAu0rZ7Q-lmg.roa
File: vpqj4kC_n-z88UolAu0rZ7Q-lmg.roa (raw, json)
Hash identifier: od7cpxUuqxHBdCVvVgEV3Kh3DWftXY5jw73srZutaVk=
Subject key identifier: BE:9A:A3:E2:40:BF:9F:EC:FC:F1:4A:25:02:ED:2B:67:B4:3E:96:68
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01824F197A5EEA6D73A1B20471DB82F76B43
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vpqj4kC_n-z88UolAu0rZ7Q-lmg.roa
Signing time: Sat 30 Jul 2022 12:34:05 +0000
ROA not before: Sat 30 Jul 2022 12:34:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 185.206.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:19:7a:5e:ea:6d:73:a1:b2:04:71:db:82:f7:6b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 30 12:34:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be9aa3e240bf9fecfcf14a2502ed2b67b43e9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:7d:05:31:bc:6a:37:74:3d:79:19:4c:81:
43:72:9e:11:a5:33:ca:16:5b:a0:35:aa:e4:77:ee:
b6:da:e4:aa:5a:e1:8c:a8:f8:89:e5:1f:79:49:73:
bd:13:6d:48:c0:1e:44:99:07:bf:31:6d:c9:c3:fa:
29:ae:0c:11:e8:4a:f6:09:e1:2a:33:20:a6:f9:db:
4e:be:06:d7:61:18:f1:99:8b:ad:ed:d0:cb:77:18:
8c:0b:1f:ca:20:0a:48:f1:c8:6a:75:f9:f1:fc:75:
f8:53:dd:6b:c2:b3:cc:bc:64:9a:5e:7c:73:23:ae:
b3:16:34:19:eb:36:43:ce:83:74:2c:3d:77:22:57:
41:63:60:7e:a2:6b:98:84:8b:37:c2:b3:77:12:1c:
39:e6:d3:2d:f8:f0:6a:c1:0b:e6:6b:a0:ee:35:b9:
57:f5:77:e1:1f:59:26:a6:bf:09:f1:59:26:33:2b:
44:80:52:a5:ba:c2:a2:6e:f6:48:e2:1d:1e:83:85:
be:91:5d:7d:22:26:16:68:2e:04:d8:07:5a:ef:11:
cf:75:25:02:b7:c1:8a:23:16:a3:eb:c9:d9:72:f0:
75:e8:9b:6a:a5:8f:aa:31:e6:1e:11:a6:a7:61:51:
a4:ff:05:87:75:df:1f:67:ba:82:8d:54:8a:37:6a:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9A:A3:E2:40:BF:9F:EC:FC:F1:4A:25:02:ED:2B:67:B4:3E:96:68
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vpqj4kC_n-z88UolAu0rZ7Q-lmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9e:62:4e:f0:0b:d0:b5:26:a5:9d:0f:43:a3:13:5f:bb:98:
da:5f:53:c7:50:8d:61:47:5e:63:5d:31:c7:80:cc:f0:e0:62:
61:e9:26:72:c1:a9:70:b5:00:0c:db:b5:f6:4f:14:3b:06:16:
50:74:5f:ce:0b:da:93:11:48:4c:94:e5:d8:a1:4d:ae:c7:f7:
78:61:42:53:e5:87:2a:7d:37:fe:df:07:d1:ec:fc:2b:a4:00:
61:a7:96:5c:35:f6:22:6f:8b:f1:c5:b6:99:d0:32:47:bf:72:
ba:c1:88:56:31:c1:60:88:6e:a4:74:65:0f:41:ed:82:d0:d0:
c4:66:96:d3:f2:a8:d8:82:41:46:60:8d:0e:91:c2:47:bf:f3:
af:ad:35:e6:54:e1:7b:dc:e1:92:bc:65:f1:e0:df:e1:b8:81:
70:c9:ef:f7:a8:06:b3:86:e1:96:c5:82:a7:09:73:11:06:55:
85:d9:f7:ed:25:55:f1:a3:88:cc:fc:46:a0:0a:4c:51:b6:81:
0e:58:21:f0:11:2e:43:6d:ce:75:ff:8f:a0:80:bf:35:c7:c3:
f1:c8:a4:eb:d6:af:53:66:6e:bb:24:a7:9f:a6:71:22:8e:be:
3c:e3:a5:95:4a:3f:d6:13:e3:c4:df:d8:fb:b5:e8:a4:f1:29:
6c:9f:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org