Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-b9oMDdfL2FhcJrCCqSuR9dQ8uE.roa
File: 1-b9oMDdfL2FhcJrCCqSuR9dQ8uE.roa (raw, json)
Hash identifier: Q0fhxwginmsmzL9/EaCqSedHm28/8U3kqnw3KDycfsE=
Subject key identifier: F9:BF:68:30:37:5F:2F:61:61:70:9A:C2:0A:A4:AE:47:D7:50:F2:E1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C18B91
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-b9oMDdfL2FhcJrCCqSuR9dQ8uE.roa
Signing time: Sat 01 Jan 2022 04:54:20 +0000
ROA not before: Sat 01 Jan 2022 04:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55081
IP address blocks: 185.114.226.0/24 maxlen: 32
87.239.51.0/24 maxlen: 32
185.166.236.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398560145 (0x17c18b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bf6830375f2f6161709ac20aa4ae47d750f2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:cc:a8:d2:cf:e8:45:38:6c:12:e8:b3:e8:
00:55:b1:c4:4f:a2:df:23:00:8f:e2:3d:b0:5c:e3:
6d:39:b6:d0:b2:3e:fd:e9:e6:43:e6:1f:5b:ed:cd:
b4:8d:1c:6b:47:60:cf:37:19:cd:7d:5d:63:7e:0d:
2c:e5:ce:18:95:2e:44:8c:d6:9b:87:ed:93:1f:c5:
7d:ac:2b:3e:00:30:44:63:ec:db:45:d8:43:1d:b5:
f2:62:50:8a:d7:ae:bc:5d:8a:e7:72:e5:06:83:d6:
b4:73:17:39:00:8a:4e:c6:05:ff:11:4a:86:a1:08:
f3:4d:b2:65:88:8e:21:04:21:99:c1:a1:be:7a:93:
a8:f8:cd:75:bd:36:11:f3:d9:02:e0:54:a0:32:db:
5d:13:dc:ba:30:18:45:d7:4e:71:c8:e1:25:d5:9e:
ec:e6:dc:92:b0:f9:9f:11:b6:e2:41:03:6e:62:16:
ba:94:74:a2:bb:57:25:57:4d:f7:7a:b8:c8:19:45:
1c:31:b2:f1:fd:54:77:7b:07:30:fc:86:8a:7f:7c:
71:c4:0a:7a:60:16:9c:dc:9c:d1:ba:4e:81:6f:df:
89:5e:c6:60:44:d0:0b:64:39:6f:ea:ee:b2:1a:bf:
a3:cc:35:39:73:2b:8b:e1:99:d0:dd:57:ac:57:26:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:68:30:37:5F:2F:61:61:70:9A:C2:0A:A4:AE:47:D7:50:F2:E1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-b9oMDdfL2FhcJrCCqSuR9dQ8uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.51.0/24
185.114.226.0/24
185.166.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ea:43:ee:c3:c3:5d:22:2c:2d:d6:f8:b8:a3:aa:32:92:f3:
fd:50:1d:89:c2:2b:b9:02:8c:79:58:29:de:74:f5:f2:e2:75:
04:f5:5b:ba:93:bf:97:00:b8:54:ea:9e:9e:21:1b:76:b7:28:
05:05:e9:6d:39:d0:84:7d:db:a9:7c:7a:67:8a:df:2a:f7:ca:
13:c8:d4:30:f4:13:13:37:9b:6e:53:34:5c:a3:2e:52:ae:2e:
f3:f0:e3:7e:9b:34:57:19:34:d2:ad:1e:b3:06:4c:25:9a:49:
74:e6:dd:94:c3:6f:15:34:c9:e1:08:c1:5f:06:7a:89:8b:96:
d5:88:2c:b0:d5:6b:55:b2:ad:65:e3:b1:56:fd:96:c1:61:63:
e5:7d:3a:a3:a8:fc:6d:de:5d:ad:c0:cb:c8:07:21:89:62:ed:
88:b4:ba:ac:f9:c6:62:3d:b6:95:5f:c4:96:e7:c9:5b:ea:90:
48:8b:e7:8a:02:a8:5a:ea:83:35:18:88:3f:84:2b:b1:24:4d:
06:ec:1b:32:97:1b:7a:97:3e:e3:6c:30:23:f7:96:e4:42:a4:
49:a1:9f:9c:e2:e9:47:93:a0:78:dc:c7:76:f1:35:32:8c:0f:
93:c5:b7:dc:c7:d2:4e:05:be:cb:4d:23:aa:bb:19:66:8c:42:
ed:f7:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org