Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yrHzQIHdXY09DzbMjYjs3_wRe0w.roa
File: yrHzQIHdXY09DzbMjYjs3_wRe0w.roa (raw, json)
Hash identifier: a/kEtOB+fvV/5yCCGEOoiQ+rUdPqJnCkwxMyC61yMQU=
Subject key identifier: CA:B1:F3:40:81:DD:5D:8D:3D:0F:36:CC:8D:88:EC:DF:FC:11:7B:4C
Certificate issuer: /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial: 067FF967
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yrHzQIHdXY09DzbMjYjs3_wRe0w.roa
Signing time: Sat 01 Jan 2022 14:56:54 +0000
ROA not before: Sat 01 Jan 2022 14:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.226.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109050215 (0x67ff967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Validity
Not Before: Jan 1 14:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cab1f34081dd5d8d3d0f36cc8d88ecdffc117b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a1:4b:a4:0f:c4:11:c9:36:67:a9:6e:30:04:
18:e5:13:bb:b0:88:2c:78:47:b5:e0:fe:5a:e1:c0:
ae:d0:d8:4e:4a:da:9e:3b:d1:38:a9:2c:31:6c:d7:
7d:9c:38:2f:01:a2:c6:79:d0:51:15:60:09:b0:5d:
09:24:e0:a4:eb:7a:89:d1:f3:b0:c2:6e:50:18:f4:
be:4a:b5:4c:03:af:c2:e6:e1:3d:0d:bf:57:94:93:
fb:88:57:50:4e:61:17:fa:2e:ae:26:8a:7a:12:f7:
63:31:6b:30:03:a9:06:6c:6c:6a:d6:3f:3f:a9:16:
2b:93:d1:be:aa:39:32:53:45:f1:bc:2b:d5:38:03:
26:1a:0b:f3:9d:21:e6:bf:65:37:c9:5c:b3:dd:7f:
e9:ea:06:c8:aa:76:d5:77:eb:16:17:39:43:cd:fc:
a2:48:2c:89:8c:a6:dd:8c:50:5c:d8:fb:90:4b:44:
2e:8f:6b:cc:b2:cd:a5:e3:ef:6d:b5:1d:45:45:3f:
67:8a:11:d4:3b:4f:50:51:21:79:5c:18:24:48:5b:
0a:1f:b6:1e:9c:b5:a0:04:af:12:3e:04:24:39:fc:
51:c5:da:0e:fe:41:6e:4c:ae:62:2d:80:b0:10:af:
55:7e:f7:74:4a:08:cb:14:36:71:02:a4:40:9a:3e:
37:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:F3:40:81:DD:5D:8D:3D:0F:36:CC:8D:88:EC:DF:FC:11:7B:4C
X509v3 Authority Key Identifier:
keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/yrHzQIHdXY09DzbMjYjs3_wRe0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1e:d1:9d:4f:da:70:a7:43:07:d8:d2:79:22:53:73:dd:f2:
83:07:15:3f:03:4b:72:1f:f3:3a:d0:27:f5:40:ce:a2:6e:f1:
e3:1a:bc:87:53:a3:09:b3:e3:4a:dd:43:65:5e:fb:18:70:c2:
38:04:71:c7:4d:e1:15:b2:d5:e8:ab:e4:10:72:45:00:2f:29:
fa:3b:0c:a1:8c:38:8f:8d:34:7c:c8:e0:42:29:25:80:60:62:
50:f7:1d:6d:5c:98:47:9e:d0:da:cf:ca:9e:bc:c8:44:0c:31:
10:f9:6e:65:0a:30:79:fd:38:84:9c:55:9e:ed:eb:dd:cc:25:
0f:ef:97:8a:fc:75:a8:37:5f:20:f6:d1:ba:a4:27:7e:4d:0b:
06:d5:d5:a9:a7:73:7c:3b:85:a5:70:66:b4:7c:f3:9b:f4:e2:
33:d8:ff:65:5b:db:b1:7e:e9:79:91:74:6d:17:ed:fa:67:57:
1f:72:3d:25:cb:9c:9b:cc:da:b6:01:24:40:d8:d0:36:19:77:
f9:55:a4:3c:8a:c8:56:f7:31:e1:16:a2:2d:b5:93:ef:2d:51:
7a:10:1e:c8:1e:42:fd:b6:e6:dc:52:c1:72:a7:49:23:fb:0b:
0d:e3:e3:3b:07:10:13:3e:88:d6:56:65:24:1c:6f:50:72:b6:
66:ad:73:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:43 2024 by rpki-client on console-ams.rpki-client.org