Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/yPVbfOQm8AO9cdiE6I0rQN4tNnk.roa
File: yPVbfOQm8AO9cdiE6I0rQN4tNnk.roa (raw, json)
Hash identifier: VRQnAQDpEvivt4ctCho9fltSmowCg5jEHqLCwBProWY=
Subject key identifier: C8:F5:5B:7C:E4:26:F0:03:BD:71:D8:84:E8:8D:2B:40:DE:2D:36:79
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 02E36465
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/yPVbfOQm8AO9cdiE6I0rQN4tNnk.roa
Signing time: Sat 01 Jan 2022 10:04:31 +0000
ROA not before: Sat 01 Jan 2022 10:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.239.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48456805 (0x2e36465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 1 10:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8f55b7ce426f003bd71d884e88d2b40de2d3679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:30:90:cd:90:04:3e:bd:7e:52:b6:4a:ff:
64:6b:1e:7d:99:23:00:d3:57:9f:99:d4:04:fa:47:
18:01:2c:a0:c6:9c:05:e0:0c:8b:3e:e2:aa:37:16:
f0:91:e0:2f:a0:a7:71:b3:ca:9c:d7:ba:82:32:ea:
0c:c7:50:97:52:5e:93:4f:cf:eb:a4:8d:7e:07:37:
17:c8:86:9a:ba:10:99:6c:47:4f:6f:64:8e:2f:b8:
2a:44:70:67:d7:7c:53:f4:01:4c:23:71:5c:4f:0f:
62:50:c6:2b:f7:b5:57:4c:a7:88:a2:b0:3d:39:09:
51:a3:3e:b8:df:c3:27:d7:d0:c7:a1:fa:66:c2:f4:
f9:8b:48:12:78:c0:4c:77:fb:5d:64:31:fb:27:d8:
cd:c0:13:38:38:a4:dc:32:a9:c5:ee:c1:36:16:eb:
69:ad:d8:5c:f5:3e:8d:81:48:f6:02:90:f6:14:e5:
6f:35:87:62:cd:94:7c:9e:73:04:22:0f:9a:29:f4:
e0:e8:8b:01:92:53:09:cc:51:0b:15:b4:a6:c4:ac:
73:fd:d3:67:ad:85:d3:3b:8e:41:e8:bd:14:82:8d:
4b:c4:86:54:11:09:07:7a:55:a5:f2:db:0c:b7:07:
5f:4e:9d:b3:7f:1b:e6:b2:e3:3a:21:3f:41:30:c8:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:5B:7C:E4:26:F0:03:BD:71:D8:84:E8:8D:2B:40:DE:2D:36:79
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/yPVbfOQm8AO9cdiE6I0rQN4tNnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
26:65:17:54:58:5c:82:9c:5a:60:1b:9c:59:2f:04:42:aa:55:
75:ed:3f:4e:16:a3:d7:7f:b1:19:a0:e8:67:bb:42:62:08:f6:
9d:ff:e2:3a:5e:27:41:6e:d9:1c:ec:c0:95:69:d3:10:33:0b:
24:cd:12:56:6a:98:19:f5:1e:25:e2:78:48:b0:8c:dc:d1:5a:
cc:41:30:9a:e7:9e:33:cb:de:7f:9a:95:f9:9e:fc:5a:b2:82:
e0:97:29:d9:12:69:89:f6:ee:8e:e6:75:66:35:be:ab:f2:ea:
89:06:16:b6:f0:83:b1:16:50:40:f2:8b:ef:03:f2:30:c2:e8:
f5:12:f3:32:2f:07:f8:dc:de:aa:37:17:27:02:70:11:06:24:
b2:a9:a4:f5:33:39:9c:c1:ae:3d:89:2d:e8:21:f4:8b:97:43:
e9:61:80:9d:69:7d:d9:05:42:74:f1:2e:d6:4d:95:bf:d9:db:
f1:cd:d2:6d:91:7a:00:63:f1:b8:d1:e3:2b:76:c5:82:af:92:
02:1a:48:32:68:e9:c2:b7:78:33:77:ae:cd:b4:63:e7:a9:44:
ed:12:e3:68:b1:2a:e3:61:71:f4:77:b2:fd:d5:f8:71:05:a2:
31:fd:9c:50:e1:f0:8b:a9:70:87:71:a4:a8:bf:7b:52:38:3d:
5c:ae:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:34 2023 by rpki-client on console-fra.rpki-client.org