Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/Cca1mVVOqUK-ZJYl8L3ulRSKLZ0.roa
File: Cca1mVVOqUK-ZJYl8L3ulRSKLZ0.roa (raw, json)
Hash identifier: 76ij9pXqGbXAibbROqoCk8GXIEa/eeuCw/OAzUauW/I=
Subject key identifier: 09:C6:B5:99:55:4E:A9:42:BE:64:96:25:F0:BD:EE:95:14:8A:2D:9D
Certificate issuer: /CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Certificate serial: 0182C57E28431584ECEB2473B42CE6C06EB2
Authority key identifier: 60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/Cca1mVVOqUK-ZJYl8L3ulRSKLZ0.roa
Signing time: Mon 22 Aug 2022 12:19:15 +0000
ROA not before: Mon 22 Aug 2022 12:19:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203982
IP address blocks: 185.118.8.0/22 maxlen: 22
185.118.11.0/24 maxlen: 24
185.118.8.0/24 maxlen: 24
185.118.10.0/24 maxlen: 24
185.118.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:7e:28:43:15:84:ec:eb:24:73:b4:2c:e6:c0:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6052e1592b12ad2cd39f5be57c058535edb12b9c
Validity
Not Before: Aug 22 12:19:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09c6b599554ea942be649625f0bdee95148a2d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:ac:65:de:44:3f:38:53:49:43:8a:36:24:
11:49:0e:ce:d5:38:31:cf:18:49:03:52:08:c0:ff:
0a:83:cc:2b:42:f0:06:bc:ec:3e:5b:3c:15:28:59:
83:75:cc:06:e7:e0:25:e2:7b:a2:d3:f9:40:3b:23:
4d:a9:55:3a:21:f4:68:24:67:6a:d8:fb:4f:d0:42:
e4:55:33:0b:e3:b2:fd:5f:19:d5:0f:c2:41:0e:44:
48:04:d7:2d:7e:ec:4d:61:39:07:ea:fa:cb:73:60:
b0:19:03:ff:b9:24:f2:49:2a:17:aa:7c:47:d9:ba:
73:c1:e5:61:85:52:49:f0:c9:be:0d:09:bb:38:d5:
25:20:97:9e:8c:c2:b1:81:c0:ec:fb:46:3c:b8:f6:
cd:ca:a6:b0:49:66:69:57:ec:ed:a6:70:dd:fa:da:
1b:ec:b6:77:60:2d:3c:13:04:04:5f:74:96:c5:e3:
8d:70:18:9e:61:3e:d4:2e:a6:c7:f3:4b:9f:5b:3b:
af:ae:5f:c8:79:6f:a0:42:da:7d:e5:37:cb:af:a2:
38:62:6e:b2:bd:bc:b7:a4:3a:a6:93:01:28:31:2b:
76:24:11:52:85:1a:4d:5c:ff:ac:21:14:ea:a6:4f:
7a:b0:a8:f7:c3:66:41:87:b2:d9:16:69:6d:66:88:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:B5:99:55:4E:A9:42:BE:64:96:25:F0:BD:EE:95:14:8A:2D:9D
X509v3 Authority Key Identifier:
keyid:60:52:E1:59:2B:12:AD:2C:D3:9F:5B:E5:7C:05:85:35:ED:B1:2B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFLhWSsSrSzTn1vlfAWFNe2xK5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/Cca1mVVOqUK-ZJYl8L3ulRSKLZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/583a2c-946d-4517-8083-26985ce45978/1/YFLhWSsSrSzTn1vlfAWFNe2xK5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.8.0/22
Signature Algorithm: sha256WithRSAEncryption
44:38:0c:b9:5f:ed:de:c2:13:d3:d8:e5:17:4e:cd:81:4b:11:
09:ba:00:e3:d6:0a:3b:16:6f:cf:ff:4a:6e:7a:06:75:07:8e:
e4:ab:9b:d5:45:b5:e6:1f:a6:ad:dc:a3:2c:02:c1:df:4d:22:
77:cc:28:e8:4d:3e:b4:ea:30:02:5b:47:82:71:df:69:ae:d0:
ac:2a:04:7b:39:48:52:d9:0d:0b:1d:63:ea:91:40:2f:6b:7c:
2b:95:21:dc:ff:19:da:a9:04:4f:42:49:61:76:f6:80:38:27:
86:2a:a7:b2:3b:ca:af:ce:be:16:65:8c:e2:5e:0e:1f:82:d0:
9e:22:24:7a:04:48:92:cd:a3:21:83:a2:6f:1e:1a:e0:0e:6e:
96:0d:80:5f:78:9c:63:10:46:97:77:5f:41:27:c8:7b:b7:f5:
e2:13:f0:4f:5e:32:03:31:e5:ea:56:87:fe:e3:fa:cb:90:d5:
f3:8e:72:cd:81:c2:cb:7a:38:9e:a1:38:37:cf:c4:32:8c:82:
e3:29:93:fb:38:e7:b9:72:e3:1d:8b:c4:b1:de:25:66:8e:fc:
72:9e:8c:cb:c4:a1:4b:3d:78:e7:39:f7:e5:79:22:9a:90:00:
e5:af:ff:c0:1a:c4:fa:0b:d1:e3:8d:c3:26:68:56:7b:d2:c6:
6f:0e:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org