Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EmCQX7JjlIN7Pv6lqhDK6UTrt3Q.roa
File: EmCQX7JjlIN7Pv6lqhDK6UTrt3Q.roa (raw, json)
Hash identifier: 3EqRtUi//5bVMZhwbUXe3tPsVs2t8cZgRUPG40xxY7Y=
Subject key identifier: 12:60:90:5F:B2:63:94:83:7B:3E:FE:A5:AA:10:CA:E9:44:EB:B7:74
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 0952C9F6
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EmCQX7JjlIN7Pv6lqhDK6UTrt3Q.roa
Signing time: Sat 01 Jan 2022 09:00:17 +0000
ROA not before: Sat 01 Jan 2022 09:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201031
IP address blocks: 185.88.24.0/22 maxlen: 22
185.88.24.0/24 maxlen: 24
185.88.24.0/23 maxlen: 23
185.88.26.0/24 maxlen: 24
185.88.26.0/23 maxlen: 23
185.88.25.0/24 maxlen: 24
185.88.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156420598 (0x952c9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jan 1 09:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1260905fb26394837b3efea5aa10cae944ebb774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:dd:a3:d0:4c:39:3e:56:5d:c4:d7:85:ed:
5b:98:46:f6:23:70:81:2d:f8:0d:ea:4a:82:bb:64:
d9:a1:5f:2c:48:4d:9e:5b:e5:27:7a:2b:db:fb:9c:
7c:1e:46:8b:50:02:65:9d:23:d6:f9:b1:1d:83:ce:
17:11:86:49:be:c7:d0:ee:36:a9:2b:7a:15:bb:12:
47:70:1f:70:3b:49:1b:a8:3d:17:5c:74:ec:90:11:
d5:bb:f7:e4:28:50:c6:87:89:c1:f0:91:1f:0e:67:
eb:e4:1c:1d:af:9f:77:bb:c2:b4:db:5e:55:af:73:
af:52:da:33:71:b8:69:14:a0:a6:11:af:b7:46:7d:
29:39:f1:74:2e:77:de:12:f2:59:82:dd:79:cc:51:
6f:9d:92:a7:a2:6b:4d:72:99:3e:92:ea:e8:5a:06:
2c:b1:a8:6a:a4:62:07:61:8b:26:36:8d:28:81:71:
5b:e4:ca:b9:ca:d1:4b:2c:10:bb:77:4c:11:33:06:
9c:f3:58:00:53:42:ff:30:97:9c:12:cf:bc:4c:c9:
03:83:bb:32:8d:a3:72:36:8a:d6:31:75:99:32:2f:
7c:96:6d:c5:06:5e:c7:a5:2e:05:58:18:0b:41:0f:
1f:4f:e9:ff:46:09:ed:d1:87:3b:47:ba:5a:2a:30:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:60:90:5F:B2:63:94:83:7B:3E:FE:A5:AA:10:CA:E9:44:EB:B7:74
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/EmCQX7JjlIN7Pv6lqhDK6UTrt3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:5e:33:f3:9f:d8:d8:25:9a:48:ef:2f:a5:13:fe:57:b6:36:
c5:ee:2a:31:9f:e3:d9:85:97:57:e0:b1:e2:63:9e:97:f5:6d:
3a:22:37:1c:cc:5f:06:c1:da:2f:b7:01:a5:92:23:8b:06:96:
85:e2:63:8f:46:13:63:1e:a4:e0:19:36:f9:49:a6:c5:49:80:
d4:fa:25:80:3b:d3:38:e6:03:a6:88:89:89:98:b2:51:78:44:
b5:47:c5:13:fa:10:66:2d:3b:a1:a9:a2:63:3e:9b:9d:ed:ff:
b1:2d:a0:44:be:d3:da:a7:dd:fc:b4:ed:d3:2f:b1:51:73:7f:
58:ed:6a:83:2b:48:1f:67:60:99:8a:3b:0d:78:3e:44:d2:aa:
cd:c3:1f:28:66:42:b3:3f:6c:f5:ca:bd:b3:6c:10:15:5c:df:
6c:05:b5:46:1e:0b:e3:5d:e4:eb:17:e6:e3:25:4e:89:dc:39:
b4:15:d0:11:74:0e:04:a8:56:9e:96:1e:0d:b0:f1:bc:17:c3:
77:29:c2:18:60:e8:df:6d:ca:23:43:d5:c0:d5:04:55:74:bb:
5b:26:2c:d2:d7:59:d5:9a:5e:0d:3a:aa:ce:a2:88:56:be:f3:
2d:53:c7:21:d0:62:a7:c0:10:6a:ab:e7:7e:f2:de:19:34:93:
54:1b:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:19 2024 by rpki-client on console-fra.rpki-client.org