Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/Eab3ZI17oCQinmQ-oUN5lQx0L5c.roa
File: Eab3ZI17oCQinmQ-oUN5lQx0L5c.roa (raw, json)
Hash identifier: zXCqjnuZObzaCBDADpUlOPig4XsyWETo7Y3mf2+OF0Y=
Subject key identifier: 11:A6:F7:64:8D:7B:A0:24:22:9E:64:3E:A1:43:79:95:0C:74:2F:97
Certificate issuer: /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial: 8982C0
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/Eab3ZI17oCQinmQ-oUN5lQx0L5c.roa
Signing time: Sat 01 Jan 2022 02:59:48 +0000
ROA not before: Sat 01 Jan 2022 02:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206481
IP address blocks: 185.218.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9011904 (0x8982c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Validity
Not Before: Jan 1 02:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11a6f7648d7ba024229e643ea14379950c742f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:9d:62:8f:cc:7a:10:fa:29:16:66:03:45:
b0:aa:f8:63:03:55:cf:9f:af:cd:7d:b7:cf:78:d8:
52:2e:5c:0a:56:6f:ae:31:04:9f:f9:3c:bb:34:be:
af:21:39:01:a9:5d:2d:1a:9a:05:79:c8:90:e8:43:
3f:04:00:d0:0e:9c:29:56:93:2a:7e:2a:52:15:e6:
74:a9:52:34:b3:18:e2:88:3c:fd:a4:49:c7:4a:69:
c0:21:64:bf:f8:d7:89:db:f6:55:66:6d:ed:f2:d7:
11:3c:e1:22:80:29:b1:2f:d5:90:ec:25:49:f1:01:
b6:87:10:e4:be:ce:df:43:63:1c:dc:74:dc:c5:b3:
ff:31:94:82:ff:d0:c9:68:bc:6a:5c:78:b9:b4:fa:
5d:64:52:f3:da:e3:3d:15:5d:57:4a:be:4f:8a:ba:
47:d6:88:ce:85:a0:ea:0f:f4:ba:e1:27:7d:14:11:
73:18:49:6f:39:b8:16:8d:57:0d:7f:27:eb:a7:d1:
e2:be:58:4f:68:8b:0e:da:b0:92:30:10:b7:cf:78:
9a:e4:53:a4:86:3e:60:08:4e:bc:c4:d2:db:0c:ea:
ee:39:89:01:fd:18:b0:04:7f:73:64:3b:86:9b:fc:
7d:5b:3e:0b:76:1c:c4:bb:ff:85:e7:4f:da:16:a9:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:F7:64:8D:7B:A0:24:22:9E:64:3E:A1:43:79:95:0C:74:2F:97
X509v3 Authority Key Identifier:
keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/Eab3ZI17oCQinmQ-oUN5lQx0L5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:2f:a4:53:89:1e:d5:54:05:4f:37:3b:23:54:b3:3c:c9:79:
9e:99:68:59:c4:fc:fd:bf:6f:08:e2:97:ef:f0:d3:a9:fb:a6:
73:57:6e:fd:52:2b:cf:f6:c9:be:7c:f4:46:c2:81:43:fb:b1:
43:0e:59:08:56:62:01:5a:8d:d7:8c:49:fe:1c:25:22:13:9b:
40:99:b2:52:60:bd:de:0b:ce:d4:d9:38:8b:69:a6:e5:7d:82:
4c:81:1d:f9:0a:66:52:e6:60:56:d0:57:62:54:b5:f7:9b:21:
c8:75:6a:02:ec:e3:11:27:22:fa:2f:3b:23:b8:29:6d:9d:ca:
0d:ea:ab:a4:f3:68:19:cf:4f:56:a8:06:9f:fd:54:f7:bb:04:
ac:13:95:fa:bb:ca:93:8d:ff:6a:46:7d:63:5b:4b:a9:f7:e3:
98:8c:e8:84:74:be:cc:84:c2:c6:c4:47:04:35:e8:75:51:ac:
e5:00:3d:e8:5b:49:9b:d7:9e:e1:96:3f:20:4c:4c:24:c5:46:
05:96:ce:a2:7a:15:41:a2:ba:b7:6a:ca:a4:30:35:e9:66:5f:
42:02:be:5a:45:a2:70:ac:36:d0:9f:90:52:d8:00:ac:45:05:
18:1c:e0:78:c9:c9:af:ec:7f:71:93:97:30:14:0c:2a:64:85:
c8:ca:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:18 2024 by rpki-client on console-ams.rpki-client.org