Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/Cl9Bc_SHlkIWH0RN9DPluhhVrlk.roa
File: Cl9Bc_SHlkIWH0RN9DPluhhVrlk.roa (raw, json)
Hash identifier: N8+oOwsBofr/KCQnFWmYD33pFF/hOF/yXbcZAwfzp7E=
Subject key identifier: 0A:5F:41:73:F4:87:96:42:16:1F:44:4D:F4:33:E5:BA:18:55:AE:59
Certificate issuer: /CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Certificate serial: 01851F82AA357B7761D23B77159941944663
Authority key identifier: 53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/Cl9Bc_SHlkIWH0RN9DPluhhVrlk.roa
Signing time: Sat 17 Dec 2022 09:55:34 +0000
ROA not before: Sat 17 Dec 2022 09:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205176
IP address blocks: 185.227.116.0/22 maxlen: 22
185.227.116.0/24 maxlen: 24
2a0c:aa00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:82:aa:35:7b:77:61:d2:3b:77:15:99:41:94:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53799560453dcf4af31f9b2a40cd238b8457c5de
Validity
Not Before: Dec 17 09:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a5f4173f4879642161f444df433e5ba1855ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:56:a3:ba:31:fc:f6:69:e4:c3:c1:df:90:
ab:44:8c:45:4d:b2:87:30:f7:80:db:43:a8:28:40:
9f:a8:eb:fd:b6:d2:59:ba:70:a7:2d:c2:4a:8a:4c:
cd:03:fa:b7:a9:05:c3:49:95:9c:b0:0f:b6:aa:29:
bf:36:73:dc:cd:7b:ef:74:fa:71:8e:4a:60:47:ad:
a4:5b:65:0a:3a:5e:82:08:6d:fc:04:84:42:d0:99:
ed:ee:8d:e1:19:40:8a:f2:e7:27:bc:d4:09:31:73:
31:96:f7:d1:a3:28:cd:2e:ec:14:5e:b1:12:4d:9e:
b3:65:48:0e:56:88:27:f7:a9:99:cf:d4:27:8d:4b:
6f:cb:54:64:be:e2:a0:56:11:b0:f8:65:9b:d6:38:
ac:8c:0c:fe:4f:e6:90:c2:c7:ec:3d:5e:d5:a0:f2:
8d:41:7c:3c:eb:83:2c:9b:d5:d0:c5:58:49:38:b2:
3f:d8:36:d5:5e:9e:de:4b:f4:cf:ce:b0:e9:7c:cc:
8f:01:9b:18:d6:16:9a:3c:a3:0d:5c:01:3a:05:9f:
12:0d:55:05:c2:c9:01:60:2e:e6:1b:54:5f:2c:35:
4f:7a:a9:ab:93:4e:3f:1e:be:19:d5:b0:76:24:9a:
57:a1:85:c7:18:d7:32:e4:8e:f3:52:39:cc:a6:6d:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5F:41:73:F4:87:96:42:16:1F:44:4D:F4:33:E5:BA:18:55:AE:59
X509v3 Authority Key Identifier:
keyid:53:79:95:60:45:3D:CF:4A:F3:1F:9B:2A:40:CD:23:8B:84:57:C5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3mVYEU9z0rzH5sqQM0ji4RXxd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/Cl9Bc_SHlkIWH0RN9DPluhhVrlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/d8771a-e753-406c-a1d8-39ab77b833ea/1/U3mVYEU9z0rzH5sqQM0ji4RXxd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.116.0/22
IPv6:
2a0c:aa00::/29
Signature Algorithm: sha256WithRSAEncryption
8f:be:24:f4:2a:4a:d7:49:3b:2c:db:fd:38:80:ab:d4:97:b0:
d3:97:ca:7c:80:b9:02:57:33:4c:d4:16:f7:ca:26:3f:5b:a3:
43:70:ff:0e:5c:08:d5:c3:3d:77:75:a2:86:ba:cc:0b:73:96:
4d:ef:a8:08:d8:14:25:e5:a3:11:41:35:a4:4c:6a:9d:19:0d:
cc:96:ca:b0:66:d2:e6:53:35:4b:65:91:8f:db:a7:a6:43:1d:
e5:ae:85:9a:ae:ed:bf:01:c5:5c:0f:98:27:44:63:bb:22:0c:
19:7f:57:57:c8:3a:1a:8c:dd:a3:7d:1f:f8:4f:61:2d:0d:5a:
9c:34:a8:26:38:78:36:fa:73:a4:86:20:f2:e3:fe:e4:95:6c:
5e:96:79:ce:c2:8f:a7:6e:35:a7:d1:4d:1d:8f:bf:e1:bb:d6:
69:39:5c:ad:70:79:6c:1e:d8:cd:92:25:7c:94:05:bd:de:d2:
c7:f5:80:e1:c2:6f:d7:55:a0:fa:85:a2:51:45:89:cb:71:7e:
db:84:c2:c6:fd:df:51:8b:fd:35:40:f7:63:09:eb:8b:a0:74:
dd:44:87:19:41:73:4b:9e:c2:56:46:91:47:7d:43:24:8e:6c:
50:cb:b2:ca:9c:5a:d6:a9:41:63:69:a7:5d:10:0c:0d:12:6c:
ba:b3:9d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:43 2024 by rpki-client on console-ams.rpki-client.org