Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/FCq2byT9kYJYGusx5MfErRTNQy0.roa
File: FCq2byT9kYJYGusx5MfErRTNQy0.roa (raw, json)
Hash identifier: 4o+QeRmHQ2jEnPeK/tdCltsNPDRsbw34J+0jeuciUtQ=
Subject key identifier: 14:2A:B6:6F:24:FD:91:82:58:1A:EB:31:E4:C7:C4:AD:14:CD:43:2D
Certificate issuer: /CN=011d88246ab57e204dea51e9243c67252dcba585
Certificate serial: 0184FE45669C31CF672C32304B2D2034C307
Authority key identifier: 01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/FCq2byT9kYJYGusx5MfErRTNQy0.roa
Signing time: Sat 10 Dec 2022 23:01:11 +0000
ROA not before: Sat 10 Dec 2022 23:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206530
IP address blocks: 185.180.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fe:45:66:9c:31:cf:67:2c:32:30:4b:2d:20:34:c3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011d88246ab57e204dea51e9243c67252dcba585
Validity
Not Before: Dec 10 23:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142ab66f24fd9182581aeb31e4c7c4ad14cd432d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:ae:70:d7:9c:26:21:52:a1:76:d7:f8:ed:
fc:ef:da:42:78:13:be:31:9d:58:d8:fe:02:69:b5:
be:49:7f:b2:4f:53:57:45:03:91:a1:3b:62:f3:94:
79:70:16:91:f8:3b:30:69:62:fb:45:d5:75:7d:1e:
4f:dc:0c:c6:53:53:24:77:39:3c:e1:26:1d:d0:89:
97:fd:08:b8:58:d7:e7:e5:de:28:49:fd:9b:1e:a8:
ee:f2:09:24:35:bb:99:cf:1e:ca:14:fd:2b:3d:ba:
17:8f:08:2d:67:f4:06:5f:ad:51:19:f9:a8:58:a9:
2a:02:4d:44:12:f5:0f:a5:a1:e4:5c:93:4e:83:df:
e8:6c:10:09:d8:23:bf:10:4d:0a:b8:b1:c1:8c:ea:
f1:e8:f1:c3:af:71:f0:94:7d:79:58:b8:af:d6:48:
26:1b:ef:c6:dd:53:06:74:dc:28:9f:71:c9:6c:c5:
e2:60:87:02:64:99:0d:f1:16:86:64:cd:b5:4d:b7:
87:e7:f8:ba:e8:f9:d4:dd:e6:c2:09:24:5c:a8:83:
4e:85:63:e4:f6:9a:9a:1d:da:c0:3f:bf:ca:bf:ca:
5f:49:70:0d:3e:a7:97:ba:f8:95:59:b6:52:c4:5a:
27:b0:fd:71:5d:f8:41:b6:e8:15:73:41:fe:42:c0:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:B6:6F:24:FD:91:82:58:1A:EB:31:E4:C7:C4:AD:14:CD:43:2D
X509v3 Authority Key Identifier:
keyid:01:1D:88:24:6A:B5:7E:20:4D:EA:51:E9:24:3C:67:25:2D:CB:A5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR2IJGq1fiBN6lHpJDxnJS3LpYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/FCq2byT9kYJYGusx5MfErRTNQy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd9976-2cd2-466f-abe7-008a80f6ff11/1/AR2IJGq1fiBN6lHpJDxnJS3LpYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:9e:10:2d:2b:dc:db:35:54:91:bd:c9:f0:64:bb:01:e2:
45:9f:e9:ce:96:a6:e1:00:9d:4f:59:55:99:b5:d0:7f:bf:29:
74:75:ae:17:4d:f6:80:8b:5f:81:c8:a7:75:46:00:68:79:f6:
a3:55:c6:eb:1b:8d:25:b4:a6:3d:03:b5:ec:d6:79:cd:65:b6:
9f:70:25:ae:dc:d3:6b:11:e6:c0:1e:75:21:4c:9f:db:b5:a3:
8c:ca:e4:51:28:51:ad:9e:94:df:c1:a3:26:5c:0c:f7:3f:d3:
0a:c9:47:95:cb:a1:be:46:c0:d1:a7:ee:d9:3d:5f:e9:99:b4:
fe:65:63:2e:03:31:84:c0:6f:17:f0:28:d2:18:66:53:54:4e:
2e:98:f5:9b:c1:83:0f:43:93:88:cb:09:82:60:01:04:03:d1:
5f:17:da:a2:23:45:e5:40:66:06:ba:f6:44:7c:b6:fb:13:3c:
cc:d5:cd:0c:80:f6:65:be:91:93:b5:9d:6b:10:c0:59:2a:3c:
ba:c2:9f:d5:4d:96:29:1b:4f:a6:f7:cc:a5:ab:e9:2a:a8:f2:
9e:91:a3:1c:81:c0:b2:9d:d5:9c:99:2a:a7:32:7d:67:17:44:
53:fa:3d:f5:d3:c1:6c:94:cd:2a:4d:98:5f:24:53:fe:ea:f5:
af:4d:a1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:50 2024 by rpki-client on console-fra.rpki-client.org