Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/66IpSndMPy77X_gQCs6dfGc4DyY.roa
File: 66IpSndMPy77X_gQCs6dfGc4DyY.roa (raw, json)
Hash identifier: NNsw1Twknr0mDxjvhuGSOxNEiwvekvEg2LBhEDcyFLM=
Subject key identifier: EB:A2:29:4A:77:4C:3F:2E:FB:5F:F8:10:0A:CE:9D:7C:67:38:0F:26
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01838EDD40BF1D2768C86E0CF911DC83BF0A
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/66IpSndMPy77X_gQCs6dfGc4DyY.roa
Signing time: Fri 30 Sep 2022 14:46:48 +0000
ROA not before: Fri 30 Sep 2022 14:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.191.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:dd:40:bf:1d:27:68:c8:6e:0c:f9:11:dc:83:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Sep 30 14:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eba2294a774c3f2efb5ff8100ace9d7c67380f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:a0:92:45:d5:6a:70:c0:f9:c1:fb:77:08:
c6:6c:d2:d1:8e:0c:bb:f1:7f:d1:d2:f1:6d:9f:93:
95:98:46:fb:c7:4c:29:3a:24:16:e7:65:36:fa:32:
30:8b:b9:15:bd:28:4c:db:97:12:4f:8b:81:83:51:
bd:ec:11:71:30:19:ff:08:7a:cc:10:bd:7e:6f:b0:
38:68:cd:5e:9d:80:ef:e8:58:d0:f3:86:64:93:8b:
42:35:a3:1c:19:5c:bc:00:ae:de:97:e9:fe:fb:09:
2c:01:47:e8:2e:1e:bf:65:9b:00:6c:92:5c:ba:e6:
b1:38:68:c0:9c:ee:59:7b:40:de:8d:a4:21:f4:1c:
f1:31:40:fc:8b:82:55:9c:19:e4:bc:fb:de:ac:a4:
4d:ba:32:62:7f:f7:4e:c8:a6:04:48:36:82:0c:33:
3e:ab:92:f2:91:14:34:ae:d9:88:22:aa:f8:19:99:
db:7b:af:f8:64:cb:a0:f4:41:6b:d9:39:84:61:47:
dc:41:99:cc:16:70:f6:b9:6f:ee:5d:42:e9:b2:7a:
cf:86:6f:e8:c4:e1:1c:a6:49:84:91:f0:76:6c:10:
d9:14:76:55:30:11:d5:01:4d:1a:4b:4e:29:53:81:
0c:9b:37:6b:58:0b:73:1f:19:22:59:b1:55:bb:b8:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A2:29:4A:77:4C:3F:2E:FB:5F:F8:10:0A:CE:9D:7C:67:38:0F:26
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/66IpSndMPy77X_gQCs6dfGc4DyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.144.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:50:2f:57:68:2c:ab:01:8d:4b:29:9c:23:61:bd:f1:c4:78:
bd:58:75:71:2d:21:26:d9:ad:b6:9b:27:34:5e:0c:7a:3a:af:
9e:06:c8:cb:21:c1:4e:74:c0:44:d9:f5:2c:7f:2d:9b:d6:04:
08:50:be:58:cb:91:c2:71:55:6e:f1:93:82:8d:97:93:78:c6:
0c:00:c1:23:84:77:65:38:c0:20:0f:b6:a4:94:1d:db:13:ae:
d7:08:e4:69:11:47:30:0b:a3:7a:fa:44:2d:87:8d:16:68:5b:
87:74:7b:80:34:27:7e:f4:10:8a:ee:3e:b3:cf:8f:85:5b:88:
f8:46:73:23:38:55:63:c2:4a:48:01:c8:47:b8:b2:22:9c:23:
e4:eb:85:e8:0e:0d:0b:23:17:79:20:0b:9b:57:39:5c:41:43:
b6:f5:ca:c5:e1:db:e1:fa:6b:2c:4e:a9:06:a0:62:30:5a:ca:
89:c8:c3:9a:a4:db:9a:db:09:ad:e0:bd:eb:6c:7b:cd:85:fa:
3a:84:42:43:41:15:e5:97:ca:dd:cc:59:ae:fe:67:97:83:c0:
a9:59:b8:69:ff:2c:8c:13:ba:53:8f:fe:f8:1e:02:18:25:cb:
55:44:5a:9a:22:62:93:b8:90:99:5e:46:71:d4:c1:ad:77:39:
83:08:dc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:05 2024 by rpki-client on console-ams.rpki-client.org