Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/l709wLh2TNblyka6rfq8w0if_xM.roa
File: l709wLh2TNblyka6rfq8w0if_xM.roa (raw, json)
Hash identifier: VCR0edi9Y9vGi1qVe/89rutFs3EZ34Z/1Cp0HEmJyMo=
Subject key identifier: 97:BD:3D:C0:B8:76:4C:D6:E5:CA:46:BA:AD:FA:BC:C3:48:9F:FF:13
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 03F3C888
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/l709wLh2TNblyka6rfq8w0if_xM.roa
Signing time: Thu 21 Apr 2022 10:26:29 +0000
ROA not before: Thu 21 Apr 2022 10:26:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.236.24.0/22 maxlen: 24
185.239.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66308232 (0x3f3c888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Apr 21 10:26:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97bd3dc0b8764cd6e5ca46baadfabcc3489fff13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:9e:a3:5f:bc:79:3f:40:a1:97:03:1a:bb:
89:f7:56:a1:3a:3a:81:ff:0c:8c:32:84:37:53:77:
c4:d0:bc:3c:65:c7:e0:6d:6a:88:03:20:87:0b:89:
bd:81:80:29:1d:03:67:08:6c:11:eb:12:ee:18:7e:
5e:d2:b5:f0:52:85:5b:78:64:42:4f:b0:be:a1:25:
00:77:f4:1c:e1:8f:16:a6:35:26:93:58:11:76:34:
7c:e1:da:43:0b:f5:dd:fc:b0:cf:1a:fa:17:b3:5c:
fd:03:25:84:02:aa:0f:70:f0:8f:f1:67:a4:06:89:
36:b4:23:88:c4:d4:4d:fd:05:4c:ed:c4:cb:31:ce:
d8:34:2e:6e:ab:9a:ad:b2:eb:d9:25:a0:70:38:68:
68:6b:e1:d2:f5:3b:21:c8:21:87:af:57:e5:49:2c:
c1:b2:dd:7c:39:18:1c:c1:56:f6:5a:4c:f7:dd:b0:
f4:94:a2:d6:05:4b:11:3a:d3:4c:e8:0c:cd:df:27:
bc:8b:d0:ca:0a:94:a0:66:9c:e5:4e:1e:fe:94:a8:
d1:51:dd:3c:e0:3c:e0:68:1b:0d:c3:59:6e:b6:67:
5c:87:ae:04:a1:bf:77:11:89:78:d0:50:e0:4f:44:
4b:7a:b7:45:65:80:5b:1a:ca:69:28:ed:9e:43:3c:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BD:3D:C0:B8:76:4C:D6:E5:CA:46:BA:AD:FA:BC:C3:48:9F:FF:13
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/l709wLh2TNblyka6rfq8w0if_xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.24.0/22
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:01:a1:85:67:0f:42:61:bb:99:40:2e:7a:2b:51:c9:bc:c7:
be:f4:81:df:03:50:11:c6:d0:a8:10:97:81:85:af:6e:fb:df:
89:c9:26:d2:55:6e:b9:2d:27:98:eb:d4:42:cb:47:48:95:b0:
d6:cb:51:16:83:c4:17:61:98:bf:dd:b0:5f:ee:30:b3:11:d3:
70:2e:12:63:b3:8e:77:d9:5c:22:a7:7d:d8:dd:96:ed:f7:80:
9b:5b:57:d4:7e:4c:21:b4:cf:de:61:6a:71:b0:fc:7b:63:fc:
08:a2:f8:4b:45:20:76:9f:73:8c:bd:2e:48:36:34:ad:d7:20:
56:09:c9:81:67:a7:4f:ad:9b:04:c6:17:9b:83:b1:95:6a:9e:
5b:eb:61:be:55:30:63:14:ca:18:57:a5:18:c2:3f:59:51:71:
8f:05:86:60:2e:95:72:36:45:d7:e4:8a:a7:0f:e4:e1:82:04:
90:51:bc:ed:f3:59:7f:61:f2:9c:6d:19:6d:33:1e:66:da:5f:
b2:95:57:d5:62:2b:70:96:34:59:04:15:b5:c5:e3:95:b1:e5:
70:64:3b:4a:70:ac:bc:59:27:02:3b:20:7d:68:2b:43:8c:44:
e1:e4:fe:aa:52:a6:fe:cd:2a:53:54:28:e8:a9:d7:19:7e:8c:
c9:50:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org