Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/ct_XoXelwfPlefcxXDXRFXWlKDg.roa
File: ct_XoXelwfPlefcxXDXRFXWlKDg.roa (raw, json)
Hash identifier: jb9w/37eobwyslH1A4uvJEYSN7ivsxDsABZMFkNXjEk=
Subject key identifier: 72:DF:D7:A1:77:A5:C1:F3:E5:79:F7:31:5C:35:D1:15:75:A5:28:38
Certificate issuer: /CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Certificate serial: 08C0EDFB
Authority key identifier: EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/ct_XoXelwfPlefcxXDXRFXWlKDg.roa
Signing time: Sat 01 Jan 2022 12:03:02 +0000
ROA not before: Sat 01 Jan 2022 12:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39655
IP address blocks: 5.61.27.0/24 maxlen: 24
185.73.113.0/24 maxlen: 24
185.73.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146861563 (0x8c0edfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4af6fdc16d68ae26aa0eab5623e6be217036c1
Validity
Not Before: Jan 1 12:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72dfd7a177a5c1f3e579f7315c35d11575a52838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:1c:ff:3c:d0:c4:68:c1:03:e5:2b:f1:76:
89:f5:fe:32:86:0a:97:e3:58:cf:92:10:63:8c:03:
d3:66:e7:62:3d:be:06:b4:35:1b:98:ad:22:bd:b7:
b6:16:d6:10:e5:7b:03:5f:d3:c9:24:89:46:39:2d:
01:08:23:0c:e6:f6:cd:e2:fe:11:a0:96:d1:2b:b0:
b5:8f:25:80:75:17:b2:99:35:89:53:13:06:ab:78:
e6:e9:e4:42:fd:da:90:f0:82:54:ce:c7:8e:d1:d4:
67:79:a6:3e:c3:e6:07:dd:93:b6:23:72:6a:0a:f4:
89:c3:25:a0:47:64:c0:14:d6:f7:8b:c4:54:07:f9:
c5:ac:8e:ab:4c:68:33:ee:d1:8a:90:55:d2:c2:a9:
3b:08:00:9f:70:85:34:3e:d5:de:b9:f6:5c:11:21:
89:3c:1d:6b:6b:44:03:c4:7f:88:9b:53:49:f0:47:
6d:00:b4:71:fe:26:7e:00:fa:b5:6d:aa:52:ed:17:
3a:9d:cc:62:f1:f8:0a:be:f6:46:65:65:a6:c8:6a:
c2:42:8f:43:8a:12:f2:a2:38:5a:36:d2:1f:68:40:
f8:43:96:08:b2:7e:14:84:33:70:32:e6:dd:20:ce:
4b:a4:1b:53:45:d5:46:71:5a:8a:00:c2:b7:f9:3d:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:D7:A1:77:A5:C1:F3:E5:79:F7:31:5C:35:D1:15:75:A5:28:38
X509v3 Authority Key Identifier:
keyid:EC:4A:F6:FD:C1:6D:68:AE:26:AA:0E:AB:56:23:E6:BE:21:70:36:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Er2_cFtaK4mqg6rViPmviFwNsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/ct_XoXelwfPlefcxXDXRFXWlKDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/7dc85c-b0a1-48d9-9870-3825bf33e4ec/1/7Er2_cFtaK4mqg6rViPmviFwNsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.27.0/24
185.73.113.0/24
185.73.115.0/24
Signature Algorithm: sha256WithRSAEncryption
58:56:2f:0b:ca:94:25:26:80:87:04:f7:62:a7:8e:2b:68:a8:
f2:bc:64:78:4b:f1:e2:6b:e5:93:60:fb:59:4a:e3:c7:18:3e:
cb:fa:fd:c4:54:55:88:5f:05:be:f3:5f:ea:99:9f:37:5c:09:
8f:fe:4b:1e:8d:61:15:f8:37:ba:9e:42:ce:16:a8:d5:e4:00:
9b:0e:0c:10:99:bf:1b:b4:b5:31:b8:65:e5:61:17:3f:68:6d:
25:26:50:1d:a8:ef:f7:a2:1b:22:a2:bb:4f:78:bd:17:5c:eb:
57:1a:0a:df:48:81:0c:55:c7:b5:3e:da:97:47:66:e7:de:7f:
80:66:a0:ed:d2:04:05:ef:c9:5e:1e:89:31:fe:f6:8b:3f:e4:
27:4d:73:b5:c3:6d:4f:28:52:0c:e7:3d:e9:61:c3:e7:b3:2d:
a8:d2:9b:f9:9f:72:fa:fa:6a:fe:3a:b5:e0:e0:27:0c:96:e1:
24:26:c5:ac:e7:ad:c4:fa:e4:ce:df:e7:81:ae:73:d4:88:5e:
97:b3:c7:a4:ad:92:77:23:f3:7a:c8:22:ad:1c:5a:5d:2e:3c:
73:d8:4e:8f:9f:34:de:bb:3d:4e:04:31:63:6b:f8:20:cb:68:
ec:a7:33:e2:70:ea:9b:5c:fd:20:35:cc:66:72:c3:51:c5:f9:
16:cf:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:42 2024 by rpki-client on console-ams.rpki-client.org