Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/IGHMuEMiu1Sx82vS2_YqPphj1ak.roa
File: IGHMuEMiu1Sx82vS2_YqPphj1ak.roa (raw, json)
Hash identifier: opUegVzLJ+Qm9KBHPfk4RWyyjm8kddXSL2qun+h27o0=
Subject key identifier: 20:61:CC:B8:43:22:BB:54:B1:F3:6B:D2:DB:F6:2A:3E:98:63:D5:A9
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 01D63C1D
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/IGHMuEMiu1Sx82vS2_YqPphj1ak.roa
Signing time: Sat 01 Jan 2022 15:07:09 +0000
ROA not before: Sat 01 Jan 2022 15:07:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213329
IP address blocks: 185.220.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30817309 (0x1d63c1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Jan 1 15:07:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2061ccb84322bb54b1f36bd2dbf62a3e9863d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:59:6a:0e:5d:97:fd:eb:16:15:54:5a:5f:
bb:88:8c:9d:50:1e:71:f8:3d:0f:a4:d8:0f:2f:4e:
ca:14:96:12:3d:50:ec:f3:83:06:3b:ec:1c:cf:84:
84:40:3d:3b:72:7f:c7:3a:1f:d5:3e:02:98:ca:c6:
bf:d1:5d:b3:6e:1a:84:4e:7c:85:92:d1:1d:40:45:
dc:a1:eb:89:51:c3:1a:89:c7:c9:f8:35:35:30:62:
a6:e9:cb:03:5c:0c:87:d2:84:10:dc:09:ab:d8:e5:
6f:41:50:05:9a:c5:72:19:97:97:d2:90:11:d3:ab:
3c:91:e9:65:37:cc:9f:f3:9b:b4:3b:83:6a:2d:71:
55:e5:5d:bd:af:45:31:89:b0:d6:ac:bf:4a:84:00:
2e:97:c6:fb:0e:bb:01:d7:dd:37:c0:ff:53:db:af:
86:8f:73:85:f8:00:c4:ec:07:bd:62:f2:8e:80:74:
8f:93:6e:68:1e:3f:05:f6:81:2d:ac:96:01:a7:a2:
2e:2c:09:d8:17:d0:bc:cb:ef:6b:59:9c:92:e8:11:
65:96:b2:05:91:a8:dd:70:e2:5d:b0:4b:66:b5:80:
ee:01:80:23:ba:67:d4:41:f4:7a:3b:01:a3:b9:70:
62:63:99:64:f9:f0:24:a9:83:db:9d:89:ca:25:0f:
f8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:CC:B8:43:22:BB:54:B1:F3:6B:D2:DB:F6:2A:3E:98:63:D5:A9
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/IGHMuEMiu1Sx82vS2_YqPphj1ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.221.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d6:d7:22:5d:16:ec:9c:b6:4b:30:7d:30:81:95:63:e9:77:
dc:9d:18:63:78:24:f9:77:b3:c3:a2:f9:61:d8:c5:69:88:31:
b7:aa:c4:7a:cb:a1:5e:f7:89:7f:94:89:d9:50:ab:6f:a5:d3:
6d:a8:a1:eb:b6:65:3c:7d:1a:55:e9:59:ad:2b:2d:d0:ec:4e:
86:2b:87:4e:94:ca:04:9f:fe:91:5e:f9:21:c3:12:20:ef:8a:
b2:c9:05:9d:39:92:9c:72:92:b5:6b:7f:5e:92:b5:04:d1:d5:
e6:55:57:7a:6c:5e:39:f5:02:68:71:a8:6f:39:b3:43:f3:19:
f9:de:cf:03:f4:e9:6b:59:1c:60:4c:8a:a1:4f:b2:a7:f5:32:
23:89:0a:24:11:99:34:7c:a8:0b:eb:b2:18:b4:bc:a0:5f:00:
e1:13:62:93:7e:c4:24:f3:da:0c:f6:0e:e1:43:c5:df:ce:5a:
1f:ab:96:a3:b5:10:8c:dc:61:d8:a3:18:97:3c:66:a8:19:a7:
26:12:ce:bd:7a:5e:1a:00:04:5a:97:2b:06:84:1a:b0:91:54:
a2:c5:aa:59:47:4f:ca:8a:92:38:6a:83:a2:a6:ec:e8:ba:45:
2b:23:69:18:33:f4:28:a3:a2:0a:cf:f1:8d:6f:03:6d:2d:07:
aa:aa:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:23 2024 by rpki-client on console-fra.rpki-client.org