Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/a_DEZBDcby9M3PpoeHKrWRdj8FQ.roa
File: a_DEZBDcby9M3PpoeHKrWRdj8FQ.roa (raw, json)
Hash identifier: WHLQEMz7p0vuvH2NzgtSM2MMq2Iz/gGjMEnbfuQ/1go=
Subject key identifier: 6B:F0:C4:64:10:DC:6F:2F:4C:DC:FA:68:78:72:AB:59:17:63:F0:54
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 029AAED2
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/a_DEZBDcby9M3PpoeHKrWRdj8FQ.roa
Signing time: Sat 01 Jan 2022 08:56:04 +0000
ROA not before: Sat 01 Jan 2022 08:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202085
IP address blocks: 185.160.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43691730 (0x29aaed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jan 1 08:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bf0c46410dc6f2f4cdcfa687872ab591763f054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:58:6d:54:c8:8b:b4:fe:38:e1:ea:72:f1:
cc:86:a2:e4:82:19:d5:a6:05:18:50:96:f1:9b:23:
38:b2:4b:ec:13:a7:67:2f:ce:f7:08:61:71:87:d7:
69:a8:2b:5b:8e:44:80:54:c8:64:43:dd:90:3b:ea:
6e:e9:2a:d7:5c:31:b6:0a:f8:1f:28:75:99:30:31:
92:3f:6d:62:45:17:83:af:77:b0:0d:a5:b0:a5:8b:
11:33:88:f2:f3:2e:3e:b5:e7:aa:b2:21:74:a9:e8:
07:da:90:8b:df:48:41:97:75:d1:64:19:f0:b5:8d:
36:68:25:7a:ae:21:be:30:c5:06:f7:60:0a:b3:41:
f3:11:fb:cb:f4:e1:d4:ac:e7:bf:d9:15:15:63:57:
45:8b:cc:00:56:36:c7:d1:89:d0:65:6f:80:87:13:
a0:2e:99:4e:97:0d:32:68:07:65:5f:0c:3f:3d:ce:
fc:91:4b:dd:d6:ad:99:af:5c:4b:e8:c6:0f:5e:74:
b3:5c:9a:9f:9f:06:f4:d8:c7:01:f3:f6:6c:91:74:
f2:46:0e:a7:f1:47:1e:a6:e8:b0:4d:12:b3:77:ad:
45:c3:ab:5a:9b:dc:e4:13:1a:b1:b0:da:17:02:01:
c4:03:41:b6:c3:2f:f5:52:15:49:73:a8:67:0b:f7:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:C4:64:10:DC:6F:2F:4C:DC:FA:68:78:72:AB:59:17:63:F0:54
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/a_DEZBDcby9M3PpoeHKrWRdj8FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.140.0/24
Signature Algorithm: sha256WithRSAEncryption
20:39:7b:3e:62:99:92:31:64:c6:5e:fb:1b:65:d6:0f:04:02:
e7:54:a4:1a:92:c6:7f:a4:a5:67:2e:9f:db:d5:bd:8b:16:aa:
40:a8:3d:2a:76:be:40:9a:4d:4a:32:76:85:31:c3:c6:ad:32:
58:78:86:0c:d2:5a:bb:03:8f:94:84:5a:74:24:77:ed:2c:30:
b0:e6:b4:30:36:7b:3b:b4:51:77:4d:4a:27:90:87:14:2e:14:
80:91:c4:eb:ad:ad:9c:c8:2c:ba:77:18:86:15:32:08:9e:b3:
ae:02:52:9b:2b:19:f9:09:0c:a5:1b:41:1a:96:91:ae:76:b3:
2e:8b:fd:bf:ea:e9:a3:b2:f7:97:00:32:13:07:91:45:57:67:
ff:00:8b:55:0c:af:45:3a:2d:a3:82:81:da:77:3e:a7:4d:c8:
23:a2:16:6d:1a:b8:ca:19:b3:cf:60:e8:97:d8:6b:7d:72:4b:
26:c0:8f:12:58:f3:74:e7:b3:26:b0:14:fd:9b:4b:f5:9d:b9:
a5:67:ae:c4:f1:81:ab:19:2d:74:c7:06:ca:dc:63:6c:54:dd:
f0:f7:dd:95:d6:98:d2:cf:33:0b:00:d0:ae:1a:75:0a:44:11:
d5:01:12:ac:3d:b8:7e:57:17:10:d9:24:cd:bc:8f:aa:e7:df:
9c:13:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:39 2024 by rpki-client on console-ams.rpki-client.org