Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/gOTEKLBa9Il-_ebqgDCQfmzFuRw.roa
File: gOTEKLBa9Il-_ebqgDCQfmzFuRw.roa (raw, json)
Hash identifier: XrFpTbw48rHyLarceXowdBU2fFgM4hIGXu8RTVbibeA=
Subject key identifier: 80:E4:C4:28:B0:5A:F4:89:7E:FD:E6:EA:80:30:90:7E:6C:C5:B9:1C
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 0182ACB156E6BA922754649B28ADB1A32EFB
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/gOTEKLBa9Il-_ebqgDCQfmzFuRw.roa
Signing time: Wed 17 Aug 2022 16:44:39 +0000
ROA not before: Wed 17 Aug 2022 16:44:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 185.155.233.0/24 maxlen: 24
185.155.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:b1:56:e6:ba:92:27:54:64:9b:28:ad:b1:a3:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Aug 17 16:44:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80e4c428b05af4897efde6ea8030907e6cc5b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:12:03:b3:b1:a8:16:34:3d:3b:ee:d4:d9:9d:
11:48:26:cc:13:23:85:77:90:ba:4c:64:b9:d0:cd:
b5:63:d5:37:b6:8d:88:4c:5e:5f:00:19:26:8d:39:
37:c2:cb:fd:6b:64:67:08:c9:94:49:c5:75:77:e9:
6f:ce:bd:c8:09:a0:45:d3:d7:c1:2a:d7:5d:2d:45:
be:8f:93:e3:f4:49:42:93:9f:25:29:66:6e:9b:32:
b3:12:ae:16:6f:68:84:1a:e9:85:76:4d:db:e1:a4:
9b:fe:00:2b:d6:2c:07:40:80:76:a5:9d:2e:7e:d0:
bf:5c:dc:0d:3c:a3:6d:21:d9:32:ce:d4:54:b2:42:
f1:c4:9b:48:55:b9:d0:5d:81:47:ef:9f:1d:df:3c:
a7:eb:bf:7c:ba:c9:a6:c1:b3:8a:12:9f:3a:8e:96:
96:87:10:f4:b0:36:b0:fe:b2:3f:f5:05:7e:f0:fe:
6f:50:77:12:9d:42:7b:a3:41:5e:38:b7:4e:8f:24:
08:63:64:08:7a:24:fb:6d:ed:1a:92:bb:d1:c2:6d:
77:02:12:79:9d:4e:10:71:72:d0:af:74:d0:4d:92:
e5:f3:07:9d:07:b5:c6:76:f5:ed:71:8c:bd:e9:86:
4c:c8:9a:f4:17:0d:d6:c8:4d:69:18:db:69:a2:e1:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:C4:28:B0:5A:F4:89:7E:FD:E6:EA:80:30:90:7E:6C:C5:B9:1C
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/gOTEKLBa9Il-_ebqgDCQfmzFuRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.233.0-185.155.234.255
Signature Algorithm: sha256WithRSAEncryption
31:c7:7a:ca:97:ef:84:fe:84:25:3c:5a:cf:9d:ce:16:9a:91:
15:bc:82:fa:81:00:34:93:95:9f:c2:9a:42:c1:04:da:aa:a7:
8e:2b:70:83:ef:50:5d:0f:1b:0c:dc:e5:df:e6:20:b5:3b:7e:
57:02:4b:da:66:39:2f:a8:c3:b4:04:67:83:fc:99:f3:ef:03:
c0:31:45:86:80:59:25:fa:95:73:a3:b3:1b:ae:ff:a1:31:76:
6d:1c:81:37:d8:d0:68:a0:cf:e7:86:49:8b:7b:c9:e6:4e:ca:
a0:2c:05:32:eb:15:5c:96:0c:ee:27:e2:75:e6:e5:13:09:d0:
e2:bf:e5:ce:e4:9f:b4:84:ea:ad:83:50:d5:49:3c:d5:e0:27:
cb:4b:90:f1:d6:f9:63:9c:d4:5c:5f:db:5b:13:80:60:f0:10:
0d:a4:81:86:64:87:d8:c4:1b:f8:26:0b:a6:7d:83:df:ad:b7:
21:ea:34:ce:1d:b9:a7:17:7e:aa:07:53:3d:e2:1e:8b:99:1f:
f3:38:ee:a1:25:9c:8b:c1:8c:40:04:c2:0d:61:03:b3:e9:e4:
61:56:34:23:d6:76:ad:c3:26:3c:62:34:8e:9c:d0:fe:db:3b:
d1:84:f5:07:7d:b2:b3:91:1b:55:10:76:79:46:ce:5d:8a:48:
bf:09:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org