Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/h8Vs_sCjXDOgWEx7XoLocnW77MA.roa
File: h8Vs_sCjXDOgWEx7XoLocnW77MA.roa (raw, json)
Hash identifier: OxD80GnOMDBYEPcRU7dS5jq5DixkeXFciPXsm7hGyMI=
Subject key identifier: 87:C5:6C:FE:C0:A3:5C:33:A0:58:4C:7B:5E:82:E8:72:75:BB:EC:C0
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 0EE6A5EA
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/h8Vs_sCjXDOgWEx7XoLocnW77MA.roa
Signing time: Sat 01 Jan 2022 13:56:03 +0000
ROA not before: Sat 01 Jan 2022 13:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59872
IP address blocks: 185.68.44.0/22 maxlen: 22
185.68.44.0/24 maxlen: 24
185.68.47.0/24 maxlen: 24
185.68.46.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
91.206.20.0/23 maxlen: 23
2a07:c880::/29 maxlen: 29
2a07:c883::/32 maxlen: 32
2a05:1600::/29 maxlen: 29
2a05:1603::/32 maxlen: 32
2a07:c881::/32 maxlen: 32
2a07:c884::/32 maxlen: 32
2a07:c882::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249996778 (0xee6a5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 13:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c56cfec0a35c33a0584c7b5e82e87275bbecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:55:d0:d0:39:7a:ce:cf:c9:02:4a:55:cb:
76:a8:d2:86:6d:5a:77:23:03:c7:b0:a6:5e:75:73:
10:2a:7e:77:20:a6:ba:64:bf:21:81:b5:96:eb:d5:
96:fe:86:da:51:1c:85:75:ee:0d:04:27:68:6f:fc:
24:9f:41:0a:8d:3f:11:6d:b2:90:a9:b8:f2:8d:ff:
0e:67:9b:b9:96:0d:46:c6:aa:73:57:5a:0d:8e:0e:
6a:8c:4c:ab:77:45:51:06:67:b1:d9:a1:bf:17:3b:
d6:09:08:0a:17:7a:c7:76:20:ce:e7:27:2c:31:ef:
1c:e7:a1:e5:5d:a9:e6:0c:cf:fb:b7:4b:82:25:3d:
5d:ca:49:43:cb:b0:dc:0a:cc:4d:ba:55:87:0a:76:
21:98:df:2a:4c:d0:be:09:eb:11:8c:91:13:29:35:
2e:bf:1b:b2:a1:bb:33:c6:14:40:8c:44:52:f5:8c:
1c:01:cb:dc:e4:ef:bf:b0:d1:08:21:06:29:78:10:
0d:c3:c6:fe:d0:da:21:51:39:ff:6b:81:aa:85:99:
e2:73:c8:e8:85:02:48:bd:54:ca:5f:52:ca:45:76:
b3:16:be:8b:a9:fb:67:18:94:e0:2a:2d:16:cb:52:
cd:9e:68:a3:16:1d:b4:07:1b:32:e0:30:a6:4b:09:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C5:6C:FE:C0:A3:5C:33:A0:58:4C:7B:5E:82:E8:72:75:BB:EC:C0
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/h8Vs_sCjXDOgWEx7XoLocnW77MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.20.0/23
185.68.44.0/22
IPv6:
2a05:1600::/29
2a07:c880::/29
Signature Algorithm: sha256WithRSAEncryption
cb:75:31:8d:82:59:f5:a5:a2:43:42:5b:bc:68:87:f9:f9:ad:
eb:2e:b8:3a:01:04:0a:03:d2:03:e8:34:51:06:ee:c0:70:d6:
8b:07:20:ee:6f:c4:a1:1a:e7:a6:ac:5d:e8:c7:fb:28:8d:84:
1b:d1:c7:b2:49:10:4d:fe:3e:0e:60:64:c7:36:d6:90:3d:84:
78:62:e1:28:f8:a7:ea:73:4e:8c:10:28:86:c3:4a:30:ca:dd:
41:0b:4e:6b:af:3b:95:08:95:16:c0:33:1a:27:6e:55:86:88:
fc:6a:80:7c:d6:df:4c:c0:77:34:cc:f5:93:3d:52:e0:61:26:
83:51:a9:56:e0:04:b4:4f:be:eb:56:b7:21:69:f6:11:19:01:
3f:c9:9b:2a:f3:ca:01:05:96:12:d1:1c:0d:0e:60:7d:ab:a3:
99:66:8f:c7:50:c0:1e:6d:b9:13:96:2c:2b:4d:f0:db:f9:3b:
32:35:6e:2a:38:10:76:9f:b6:a2:68:94:45:32:ac:84:54:31:
fd:f0:45:eb:e4:a5:16:3c:03:5e:15:30:90:50:09:84:e4:15:
31:6f:de:07:a3:87:46:4f:be:cb:d7:75:a4:57:b3:cd:45:7b:
26:0c:d8:f3:a7:58:ac:00:c6:e6:00:ad:c1:bc:9e:a2:3a:49:
62:ca:14:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:39 2024 by rpki-client on console-fra.rpki-client.org