Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/ACRdHC6d83UhI5k0MAssjEVvf4I.roa
File: ACRdHC6d83UhI5k0MAssjEVvf4I.roa (raw, json)
Hash identifier: Jf+3ZvlFdQs/c7eo26Tj3oz2afIfyZSzgkt2kZs1ov8=
Subject key identifier: 00:24:5D:1C:2E:9D:F3:75:21:23:99:34:30:0B:2C:8C:45:6F:7F:82
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 06926053
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/ACRdHC6d83UhI5k0MAssjEVvf4I.roa
Signing time: Wed 06 Apr 2022 10:33:10 +0000
ROA not before: Wed 06 Apr 2022 10:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.163.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.160.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110256211 (0x6926053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Apr 6 10:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00245d1c2e9df37521239934300b2c8c456f7f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:5a:5a:49:12:4d:5c:32:69:bc:8f:cc:32:
fb:e1:32:f7:f1:f2:15:6e:d0:3b:94:08:2b:14:6b:
14:2d:7a:83:23:1b:fb:33:63:3f:dd:97:b1:28:d7:
ad:5d:14:87:07:69:4e:a1:59:1c:25:00:38:ae:fe:
ae:11:86:93:1f:04:5f:b2:23:3e:13:0e:f8:2d:f6:
b1:8d:86:53:7d:9d:fc:bb:ee:2c:9a:f6:9b:38:d8:
76:87:05:fb:b1:27:4d:45:ef:89:b2:8f:7c:ec:66:
61:57:b1:a5:15:92:cd:6b:43:ec:3a:b9:a8:0a:03:
07:47:96:ff:e0:d9:1f:be:81:bc:ad:89:9a:87:d0:
99:3b:85:ab:9f:15:b7:3c:3c:b1:24:a8:c7:4f:ee:
3b:8b:9e:62:63:44:26:65:65:ff:b9:1b:60:78:34:
6a:e5:c4:4e:96:40:74:64:b0:88:fb:50:d7:f3:57:
55:54:c2:79:51:ca:3c:42:ec:57:2d:8b:9d:fc:ec:
30:24:c9:a3:16:c3:9d:38:f5:5a:fb:a5:72:f7:54:
82:cc:cc:bb:9f:ca:f6:1a:0f:af:b0:47:99:ae:89:
6d:6e:7d:cd:2e:bd:bc:24:39:5f:8c:d1:0e:d4:5a:
8d:26:95:ff:21:8d:ed:af:d4:21:c1:a8:96:a4:9c:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:24:5D:1C:2E:9D:F3:75:21:23:99:34:30:0B:2C:8C:45:6F:7F:82
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/ACRdHC6d83UhI5k0MAssjEVvf4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.91.0/24
Signature Algorithm: sha256WithRSAEncryption
21:64:de:01:a9:47:75:81:5f:25:26:08:af:c6:6d:70:2f:f2:
d5:5a:bc:91:fc:6a:d3:36:4c:d3:ab:b3:60:2e:10:9a:b5:1a:
7a:ef:b3:fe:7d:9a:1b:c6:17:f7:46:5f:9e:b6:9a:21:99:11:
14:16:6a:0d:53:1a:cd:50:71:bf:60:79:7e:0f:90:bb:c1:a8:
48:2b:eb:3c:1c:aa:25:f7:a7:a7:db:be:7a:19:76:f9:91:bc:
3d:c5:8e:b8:3e:f5:c9:5f:48:f2:72:48:53:c2:43:8e:a6:51:
72:ff:d1:22:6e:3c:e3:2f:9e:e1:6d:7a:72:ac:39:53:a2:56:
36:f6:d1:f3:ad:72:b8:cd:0e:d1:49:52:9f:e9:5b:cd:67:e4:
2b:33:18:bd:92:ca:66:a3:80:8d:3e:3c:f0:91:8f:18:0c:5c:
37:dc:bc:17:7d:6e:2e:30:3e:c3:b2:11:c0:12:c7:8f:40:d2:
6b:7d:34:90:d4:d1:6c:12:79:c2:34:a9:7d:fb:f3:c1:11:47:
54:5c:27:dd:e2:fc:6d:a5:f0:a8:63:4e:96:cb:b3:b7:b6:1e:
3f:6a:8c:17:e4:c4:5b:1f:33:bf:b4:97:8a:26:ab:0d:81:8c:
2a:85:8c:bc:49:03:78:6b:0f:19:9e:9e:41:ff:45:19:dd:f7:
ce:bc:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org