Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/DAdDi0YVrEp2HAGln-oHtFNfjH8.roa
File: DAdDi0YVrEp2HAGln-oHtFNfjH8.roa (raw, json)
Hash identifier: m11bf+Mbecme7J/WiJOB6ScxFJiHh9BO0frxqXJIRc4=
Subject key identifier: 0C:07:43:8B:46:15:AC:4A:76:1C:01:A5:9F:EA:07:B4:53:5F:8C:7F
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 09220BC6
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/DAdDi0YVrEp2HAGln-oHtFNfjH8.roa
Signing time: Sat 01 Jan 2022 01:54:15 +0000
ROA not before: Sat 01 Jan 2022 01:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204529
IP address blocks: 185.114.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153226182 (0x9220bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jan 1 01:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c07438b4615ac4a761c01a59fea07b4535f8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:00:2d:d8:24:2b:36:be:1e:e3:b4:70:66:
5a:20:57:c0:9e:d6:77:2d:3d:d6:68:ce:e9:69:f6:
4d:f1:80:2c:4f:b1:b1:bc:0b:c8:37:cd:a1:58:e2:
da:9b:51:85:4d:95:c4:e9:74:6f:93:f8:c2:c1:37:
19:c2:6b:44:0f:2b:61:bf:b6:ba:85:e8:a9:93:b4:
8c:b1:5f:f4:40:2e:a5:3d:84:78:40:8f:67:ec:93:
cc:ee:af:50:ad:74:22:8e:a6:96:9b:67:99:36:2a:
78:4a:73:ac:ab:bf:e3:96:d7:0f:f1:72:3e:78:34:
cb:33:c1:1b:bd:6a:b0:d0:84:5f:be:76:68:95:76:
10:f5:77:0a:58:27:35:d9:d3:ba:99:53:fd:cd:31:
a6:d4:a8:f1:71:3a:e1:c9:5a:51:8a:57:ec:f7:ea:
d7:dd:ed:0a:f6:0b:5b:6f:7e:59:bc:be:b5:4d:1d:
1a:7c:a5:ed:d9:e2:63:b6:74:a6:df:a8:69:9f:81:
a0:c7:84:16:8e:53:50:1b:b8:26:49:bc:d4:61:c4:
43:fb:e6:ee:49:17:b2:80:fc:08:0a:33:16:33:24:
61:3e:48:29:ed:18:22:0a:dd:48:8e:c8:4d:6c:ba:
63:69:15:5e:bf:dc:73:ad:44:2d:5f:ca:b0:8a:0e:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:43:8B:46:15:AC:4A:76:1C:01:A5:9F:EA:07:B4:53:5F:8C:7F
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/DAdDi0YVrEp2HAGln-oHtFNfjH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.218.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2a:37:1e:22:bf:fc:af:00:f3:30:c6:da:26:46:8b:a6:c4:
67:9b:98:78:73:39:1b:d1:15:bd:b7:13:3d:dd:76:ec:87:18:
46:db:23:38:0e:0f:2c:08:44:23:0d:9f:57:69:d1:8f:65:9d:
0c:bf:2d:e9:1e:fe:99:6c:b3:3f:5f:5f:03:64:db:8c:ac:14:
b1:cb:9c:bd:d5:95:c8:eb:ec:dc:7b:dd:2b:d7:05:4e:3e:e1:
d8:f0:12:97:81:b7:01:db:d2:e4:05:97:a3:05:71:69:2b:d6:
a3:32:27:d4:4b:85:23:67:c8:6d:53:c0:7a:c6:03:d2:21:f9:
e9:f3:7b:bf:67:c2:ac:69:16:13:29:63:dd:48:69:48:18:92:
26:83:1d:5b:f7:b7:6a:3d:05:3b:13:54:1c:03:e5:31:2b:7d:
79:58:02:74:b5:8b:1d:72:85:8d:04:29:a7:72:f3:ac:8e:b5:
05:60:85:8c:d8:87:6b:83:17:be:73:e7:2e:a7:0b:6d:95:cb:
23:d7:ef:4e:b8:76:b6:5e:a0:d0:6a:25:8d:78:2b:92:7c:94:
fa:c2:cd:23:48:0c:1f:9c:8a:2b:12:4b:70:a5:b5:7f:17:ff:
93:62:3e:2a:4f:62:56:cd:46:b7:36:06:aa:2e:58:e0:0b:2a:
76:8e:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:15 2024 by rpki-client on console-fra.rpki-client.org