Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/dHv2MSIaO2_M6rMWmZtorTyTsMk.roa
File: dHv2MSIaO2_M6rMWmZtorTyTsMk.roa (raw, json)
Hash identifier: U/u6BTVRRIEvjD1o+ajXoG1sUtj9P6kLr32aoVuW6qk=
Subject key identifier: 74:7B:F6:31:22:1A:3B:6F:CC:EA:B3:16:99:9B:68:AD:3C:93:B0:C9
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 018277DE8A3C65D43F86FE360DAC6C50F7D1
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/dHv2MSIaO2_M6rMWmZtorTyTsMk.roa
Signing time: Sun 07 Aug 2022 10:34:09 +0000
ROA not before: Sun 07 Aug 2022 10:34:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48659
IP address blocks: 185.29.84.0/24 maxlen: 24
185.29.85.0/24 maxlen: 24
185.29.86.0/24 maxlen: 24
185.29.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:77:de:8a:3c:65:d4:3f:86:fe:36:0d:ac:6c:50:f7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Aug 7 10:34:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=747bf631221a3b6fcceab316999b68ad3c93b0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:44:95:20:47:7d:09:c0:83:76:b0:10:00:
5f:bd:49:f5:f4:c4:e4:73:48:95:fe:19:fc:15:6c:
df:40:30:72:22:ba:98:81:77:1a:2d:f0:6b:15:a6:
7d:7a:58:1b:38:b4:d3:17:fa:b7:0b:4d:4b:4d:0f:
f7:f9:2b:17:a8:f2:8c:5b:71:0f:7d:dc:5c:d6:dc:
bd:e1:e0:48:6e:5b:55:4d:fb:2d:9c:1a:b7:82:9a:
81:0a:db:d3:98:fa:b5:ab:2e:e9:77:58:69:93:cf:
3d:54:eb:fb:2b:d3:c5:13:3d:da:c6:c8:76:a7:5d:
4a:c2:83:31:82:54:59:15:54:7b:1a:ae:66:fc:7d:
21:a8:ac:7f:5f:72:13:f3:a9:ab:4e:70:e1:45:96:
52:ea:58:2f:f4:5f:71:82:ba:15:7d:b2:47:0f:e2:
6a:0f:79:f3:62:63:e7:b6:7b:b2:e4:43:0e:6b:06:
e0:2e:70:eb:bb:5a:19:db:50:79:b0:22:8a:1f:9a:
78:5c:c7:a8:69:34:45:96:29:dc:34:5b:19:87:ab:
38:61:97:7e:b5:6a:43:03:e3:5f:b8:ca:8d:ab:88:
92:94:a1:3a:b7:c5:58:a9:b9:d1:2c:30:31:14:29:
d3:dd:04:61:ba:9f:57:8b:e4:f4:12:35:9c:ab:29:
d9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7B:F6:31:22:1A:3B:6F:CC:EA:B3:16:99:9B:68:AD:3C:93:B0:C9
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/dHv2MSIaO2_M6rMWmZtorTyTsMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.84.0/22
Signature Algorithm: sha256WithRSAEncryption
13:3a:f0:70:99:2a:5d:01:4e:c8:59:bc:3e:2c:85:1a:4e:6d:
d7:18:77:f8:c4:df:5c:ec:c3:8f:e8:52:ce:54:e1:92:2b:c0:
50:1f:54:31:07:89:90:0e:5b:4f:ee:f1:4f:26:0c:91:22:8a:
18:c2:4a:a6:93:65:67:d0:8f:75:26:b8:9b:40:f5:1a:68:bc:
21:0d:1e:17:d1:7c:d5:4d:de:f1:44:58:8d:41:b6:d2:de:ec:
5c:80:5a:7a:17:4f:52:67:82:52:95:83:b5:b5:dc:09:08:0a:
32:5f:40:bc:6e:bd:b1:3d:57:2d:29:9b:7f:2e:06:5c:cf:bd:
6c:72:fb:03:bb:26:62:41:5d:32:ad:2a:75:bf:90:b1:22:19:
0e:e4:93:cd:92:fd:90:3a:64:7c:8a:8b:0b:9b:44:e2:df:b9:
6f:95:3f:32:73:fe:df:d8:71:8a:d8:08:73:fa:d0:2b:b1:66:
c0:46:c2:44:7b:11:0d:14:07:40:4e:78:00:db:5d:13:9a:8a:
5b:81:82:6c:55:be:98:bf:64:09:d6:bf:6e:1e:fb:45:1b:a8:
55:9a:3b:c3:79:ec:1d:2e:33:93:ef:b5:d0:5a:ac:6f:a1:12:
97:05:f5:d2:ce:c6:67:a8:1d:26:72:25:cc:72:6e:43:a6:fe:
d1:5c:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:58 2024 by rpki-client on console-ams.rpki-client.org