Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Oq7r5D78eiUGPfNX8xFlAkFwAhY.roa
File: Oq7r5D78eiUGPfNX8xFlAkFwAhY.roa (raw, json)
Hash identifier: X6BJiUBUYtM5AOujn4LSt0Q1TaaVIhrIQXrxiLhP/MQ=
Subject key identifier: 3A:AE:EB:E4:3E:FC:7A:25:06:3D:F3:57:F3:11:65:02:41:70:02:16
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 16BA82
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Oq7r5D78eiUGPfNX8xFlAkFwAhY.roa
Signing time: Sat 01 Jan 2022 02:57:02 +0000
ROA not before: Sat 01 Jan 2022 02:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 185.208.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489538 (0x16ba82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jan 1 02:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aaeebe43efc7a25063df357f311650241700216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:94:27:44:58:69:de:0b:59:16:98:b5:a5:2e:
25:ca:86:49:64:23:85:80:a7:21:ab:72:f9:df:06:
1d:eb:45:2a:92:2e:af:ba:9e:7e:3a:da:78:e2:09:
80:07:86:bd:4f:8d:59:c7:90:77:c9:8e:31:10:7c:
f0:0e:08:80:c6:47:93:a1:a4:45:99:27:e6:d2:df:
e6:74:de:0b:95:f2:4c:a2:04:58:88:0a:a4:67:37:
88:5a:8d:6e:5b:c3:5a:38:95:fc:0f:cd:60:89:1e:
a0:12:85:77:7e:8d:cf:39:c7:fb:a9:c1:21:32:a2:
dd:4d:87:43:e0:16:28:63:aa:3d:d5:94:b6:ae:88:
26:be:7b:2b:f7:cb:e8:4f:91:86:da:45:19:52:64:
96:40:d3:90:2b:89:f6:0c:df:b2:b5:b0:85:04:4a:
1c:44:85:4e:2d:53:f8:c9:6f:a0:11:1a:3b:e9:d9:
80:b3:79:56:e7:a3:7c:10:2a:66:3d:4e:cb:d9:0f:
5f:19:4e:4e:9b:3c:07:b6:35:99:c2:4d:cb:4b:49:
f3:14:a4:63:c6:e3:81:0d:06:e0:9c:95:0e:ac:ce:
ee:e3:b6:94:0f:0c:38:ab:71:be:eb:03:cd:9c:f9:
05:bc:e7:c4:79:34:6d:c2:01:0a:76:34:c1:af:64:
ce:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AE:EB:E4:3E:FC:7A:25:06:3D:F3:57:F3:11:65:02:41:70:02:16
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Oq7r5D78eiUGPfNX8xFlAkFwAhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.11.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5e:d3:c6:9f:aa:d2:f1:62:8e:b9:57:92:ea:fe:a2:65:42:
de:c1:2a:93:20:e3:d2:46:80:55:e2:aa:0c:87:62:9f:47:88:
b8:34:b1:2c:10:2a:b0:7f:b1:07:5d:07:5f:53:1c:f2:2b:dc:
34:d4:ed:42:0e:a8:e3:e3:e2:e4:18:e1:93:1a:4b:a1:03:ca:
d6:9c:4e:8a:7a:c8:03:c0:c3:db:f8:0f:c2:b7:66:ed:ca:31:
20:ff:72:4f:71:cf:64:b7:3e:d4:20:a8:61:2d:75:42:9e:b3:
f4:06:bf:67:7b:55:67:a4:60:1f:c3:f9:cf:b8:8f:aa:8c:90:
67:58:2e:dc:79:2b:a3:0f:30:90:b2:cd:ee:9b:f7:99:29:3c:
d0:0c:cb:8f:e1:cf:5e:81:63:55:cc:78:c9:15:8a:48:2f:75:
d0:64:e7:ae:56:15:01:b3:0c:d4:7a:7e:d2:db:1a:37:9e:d7:
14:c9:f8:48:47:f3:c4:b0:e5:ef:ad:36:ad:1e:38:24:1b:3d:
22:cf:7c:01:47:91:37:3e:12:07:4d:68:a2:d7:5f:34:e7:fa:
a7:94:04:4b:d3:83:1b:a5:92:08:a5:72:6a:2b:4b:b4:de:50:
60:c4:ce:14:8a:1a:8c:c1:b8:a5:2c:db:95:33:34:0a:22:79:
5c:c2:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:01 2024 by rpki-client on console-ams.rpki-client.org