Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xhI26v7YALYcThGdhFoa3iMvCGE.roa
File: xhI26v7YALYcThGdhFoa3iMvCGE.roa (raw, json)
Hash identifier: RIDXj9JXtczdgH9kGoH9oPhqFqHjJlMTV+WC4j/UPVI=
Subject key identifier: C6:12:36:EA:FE:D8:00:B6:1C:4E:11:9D:84:5A:1A:DE:23:2F:08:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 086F5E4F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xhI26v7YALYcThGdhFoa3iMvCGE.roa
Signing time: Mon 27 Jun 2022 09:30:40 +0000
ROA not before: Mon 27 Jun 2022 09:30:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141516367 (0x86f5e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 27 09:30:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c61236eafed800b61c4e119d845a1ade232f0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:5d:a8:26:ae:ab:ea:44:0a:a0:d0:8d:99:
9a:bf:9c:0e:af:72:40:62:51:ff:f5:1c:f4:fd:1e:
61:d3:b0:c4:fe:b5:31:b1:d7:2d:9b:4a:45:f9:ed:
08:a3:28:ab:ea:f3:30:bd:3f:83:d2:68:f2:6f:db:
0f:8a:8d:29:5b:9c:b1:f3:65:06:e6:5b:84:f5:c0:
e8:b2:0a:81:b4:37:82:33:dc:e2:72:f0:ba:ae:9c:
a6:fb:7e:a2:e9:b6:fc:b4:e3:f7:82:a8:b3:b0:45:
7e:0b:0e:09:7b:75:ea:09:4e:52:39:5c:df:92:75:
b9:b4:83:ad:9a:7d:2e:bf:21:54:b9:56:83:b3:ba:
5b:26:52:88:79:d1:85:c1:5a:5a:c1:bf:52:59:4c:
ed:01:1d:0d:21:67:51:15:9d:25:2e:61:99:79:98:
df:93:83:b2:c3:eb:a2:84:2c:fb:0a:86:64:88:1a:
bf:e7:cf:a1:91:3f:b7:c9:2f:37:b6:de:40:db:67:
98:b2:8e:4d:da:8f:6c:85:74:ad:a2:3c:91:c4:a3:
80:7d:b8:7f:8a:fe:e6:02:2c:c0:32:32:17:6a:37:
0f:a8:2a:7c:01:07:35:72:dd:9c:8b:d1:b8:9d:0d:
c3:0d:69:35:45:a8:27:7a:93:04:70:42:e2:b8:04:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:36:EA:FE:D8:00:B6:1C:4E:11:9D:84:5A:1A:DE:23:2F:08:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xhI26v7YALYcThGdhFoa3iMvCGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f8:e4:5d:74:1c:04:4f:e6:fc:6d:3e:f1:cc:11:0a:61:b4:
f4:57:e7:50:5d:42:7d:44:ff:72:63:50:33:53:2e:c3:07:ad:
65:58:12:e5:74:f2:27:76:0f:e4:22:ff:f2:47:46:50:37:37:
ab:63:d5:e9:f5:95:04:77:33:64:be:d7:7b:4d:47:9a:d9:c3:
c0:d6:a4:59:b5:5a:d5:25:05:4a:90:76:f5:f9:5e:28:87:9d:
0b:38:bd:19:79:61:6a:63:bb:5e:0f:1d:80:86:df:99:0f:09:
ae:ba:b9:c4:f9:17:a3:d7:e4:80:55:6f:f0:72:78:bc:55:6e:
a6:65:74:17:67:f9:85:bf:f5:8f:c9:b0:ce:fc:24:44:2c:fb:
4f:be:ac:50:f9:59:39:58:5c:08:80:47:bc:74:c9:a7:42:ca:
12:bb:08:cc:5d:89:aa:df:a0:d9:bf:91:db:be:90:58:0c:45:
93:71:5d:79:6a:cd:e1:45:7c:9f:00:75:e4:96:52:34:e6:b6:
6c:1c:c4:94:86:db:c7:d4:26:84:c3:03:ea:a6:00:21:b9:b2:
84:11:84:c7:1e:82:87:54:37:81:ec:24:71:86:50:34:5b:0f:
b7:60:c2:f5:f8:5a:4f:1c:39:3c:5a:4d:3a:dc:38:4d:ba:4f:
b2:1b:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:44 2024 by rpki-client on console-fra.rpki-client.org