Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RYAFdx90BPc8uGykuIMpNTHFm8I.roa
File: RYAFdx90BPc8uGykuIMpNTHFm8I.roa (raw, json)
Hash identifier: qvfntdheXI+11WAyJ1vQK5sswJ7BXRJclPzCZRjXQSI=
Subject key identifier: 45:80:05:77:1F:74:04:F7:3C:B8:6C:A4:B8:83:29:35:31:C5:9B:C2
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17BE97A0
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RYAFdx90BPc8uGykuIMpNTHFm8I.roa
Signing time: Sat 01 Jan 2022 04:54:18 +0000
ROA not before: Sat 01 Jan 2022 04:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51561
IP address blocks: 185.184.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398366624 (0x17be97a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=458005771f7404f73cb86ca4b883293531c59bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:01:cc:4b:40:d3:39:a6:0e:6d:97:1f:ee:
0d:a7:7e:11:f7:e3:6a:53:5d:25:14:61:f8:c6:6c:
94:86:ee:e3:b1:9f:20:d6:1a:59:7a:5c:41:02:4b:
39:ee:e9:11:05:cf:18:f1:a4:97:62:6e:d1:f1:52:
60:0b:f4:be:ea:ee:4f:96:49:f3:b4:50:83:c1:e7:
a4:1d:46:43:5e:1d:06:84:ee:51:ae:67:ef:d5:a7:
90:26:c7:45:95:4b:7e:16:96:e2:fa:66:c4:bf:53:
f8:5f:2c:c3:6d:37:ff:62:d6:18:f1:64:93:c3:34:
91:a4:3c:bf:a9:78:b0:c9:8b:20:e7:7a:d6:4f:f0:
99:02:db:fa:81:13:58:f4:f7:04:60:45:8a:17:8a:
53:e3:7d:14:ad:2a:b6:dd:88:8d:4d:bb:3c:de:65:
a2:2b:96:c8:39:57:d6:bc:e7:ca:17:ba:ea:01:75:
0c:aa:71:36:43:d4:a1:59:d7:52:01:89:7a:69:9e:
f3:da:1a:bd:64:d9:bd:37:39:af:c7:69:eb:90:cf:
3f:9e:10:58:31:ad:dd:25:4a:d3:b3:fa:df:49:f3:
78:8c:61:dc:25:26:ac:15:ae:e4:03:f1:7a:30:8c:
c2:47:e7:02:7f:ac:39:9d:a3:30:31:c0:78:10:66:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:05:77:1F:74:04:F7:3C:B8:6C:A4:B8:83:29:35:31:C5:9B:C2
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RYAFdx90BPc8uGykuIMpNTHFm8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:dc:09:a3:8d:fb:ad:80:a3:30:90:41:69:5d:09:4f:bc:0c:
69:47:93:66:fe:59:43:a4:8c:95:85:57:8d:68:e8:e2:7f:83:
2b:94:28:2c:5e:13:cf:b6:f7:7e:89:29:46:bc:d7:6c:5a:df:
8f:01:bb:f8:12:bb:7b:78:83:cb:0b:c8:b5:40:4b:a7:fb:dd:
33:16:d1:50:78:b6:54:e7:cf:06:2d:ec:9c:4c:01:90:fa:c6:
cd:41:4f:dd:06:d9:65:04:8f:9e:d2:d6:f6:94:1a:95:58:b3:
e7:af:27:fb:52:cc:05:17:0b:95:69:23:78:0a:1c:e4:b0:cb:
62:2d:03:ac:97:5c:f6:d0:8b:7b:1f:f2:4e:94:4d:a8:9c:a2:
c9:5f:3c:6d:82:4e:01:2a:0e:e0:04:f2:07:a5:e1:cc:0b:a4:
66:81:16:a8:c0:cd:66:cf:b7:e9:3c:bd:f5:f8:80:b4:7f:d1:
ad:68:fa:42:d8:e3:f3:2c:ac:5c:c8:16:c1:eb:42:cd:95:ac:
64:f5:02:9e:e4:0c:3b:24:c7:15:b3:9c:4b:93:61:5c:a5:e3:
10:50:43:39:d1:97:93:06:93:1d:2e:71:1f:42:e8:63:34:f4:
fa:fd:7b:08:f6:a6:e2:88:1f:b9:9c:8a:19:16:b2:71:9b:ea:
1d:9f:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org