Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/OQb6IKdVLQWIF3YonkvmBg4pnQc.roa
File: OQb6IKdVLQWIF3YonkvmBg4pnQc.roa (raw, json)
Hash identifier: qOJI8QBf2fRvyeQ2YVss9RnU6r/kictylYpmFVf2fj8=
Subject key identifier: 39:06:FA:20:A7:55:2D:05:88:17:76:28:9E:4B:E6:06:0E:29:9D:07
Certificate issuer: /CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Certificate serial: 01851A56D020B725A426CD26A6AE2724F34C
Authority key identifier: F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/OQb6IKdVLQWIF3YonkvmBg4pnQc.roa
Signing time: Fri 16 Dec 2022 09:49:34 +0000
ROA not before: Fri 16 Dec 2022 09:49:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209026
IP address blocks: 185.159.144.0/22 maxlen: 22
185.226.165.0/24 maxlen: 24
2a0d:e200::/29 maxlen: 29
2a0f:d540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:56:d0:20:b7:25:a4:26:cd:26:a6:ae:27:24:f3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c86ea2995e934b65041911cb9eb65872c2289f
Validity
Not Before: Dec 16 09:49:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3906fa20a7552d05881776289e4be6060e299d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:ca:cc:98:f9:6b:91:1b:98:90:7b:5a:ca:
00:fc:bb:2c:91:b9:d8:76:4f:1a:f2:ea:e4:b8:b5:
6c:cf:fd:cf:20:06:65:8d:37:76:e8:65:18:d4:e8:
4c:06:75:d3:66:04:74:69:ef:67:41:a6:20:13:eb:
fe:d7:3b:44:5d:bf:02:7a:6c:3e:76:13:36:87:a0:
b5:8b:fd:c9:04:bb:f5:b5:b5:87:b8:11:15:97:ed:
35:a2:22:00:df:38:6c:aa:d0:95:78:0b:45:8e:65:
84:c3:32:0b:d0:c2:86:2c:b0:a6:79:8a:a0:09:ba:
f1:6a:d7:47:55:09:ce:d5:9c:7d:d7:95:73:e9:ac:
14:c2:60:8e:70:1f:15:3f:4b:a0:81:5a:93:00:8f:
d3:0e:45:6c:ee:ba:b8:2d:d1:c8:1d:a3:17:9c:34:
ac:9f:a6:0e:92:8a:7e:2d:fd:62:08:dc:5b:c0:52:
7a:16:be:29:1d:55:5c:e4:dd:24:aa:24:19:bd:a2:
89:c0:76:d8:77:7d:6e:75:32:d7:9b:9d:68:04:23:
89:49:6c:8d:5a:8e:94:a3:b1:84:10:1b:fb:5f:9b:
dc:7f:ff:34:29:78:f7:91:83:ab:77:b8:c2:0c:9d:
88:a2:ea:4e:6f:09:1e:ba:40:72:ca:13:9c:ee:69:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:06:FA:20:A7:55:2D:05:88:17:76:28:9E:4B:E6:06:0E:29:9D:07
X509v3 Authority Key Identifier:
keyid:F3:C8:6E:A2:99:5E:93:4B:65:04:19:11:CB:9E:B6:58:72:C2:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88huoplek0tlBBkRy562WHLCKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/OQb6IKdVLQWIF3YonkvmBg4pnQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e554aa-e4ed-4948-b6fc-c635d8eed447/1/88huoplek0tlBBkRy562WHLCKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.144.0/22
185.226.165.0/24
IPv6:
2a0d:e200::/29
2a0f:d540::/29
Signature Algorithm: sha256WithRSAEncryption
1f:c3:da:9e:cb:2d:91:c8:59:cd:04:c4:02:97:53:1b:48:70:
da:db:58:66:66:39:45:f0:e2:c7:7b:10:3f:76:86:60:8a:ca:
6f:e8:b7:65:bb:70:14:89:da:03:f8:ed:b5:d6:22:8b:6a:f3:
84:aa:7c:31:0f:63:89:79:1d:16:4f:2f:c7:6d:cd:0c:9b:37:
de:80:e2:3c:92:a6:1c:4c:28:46:35:59:9d:6b:cd:00:3d:89:
e1:79:27:99:7c:9c:8b:93:a1:3b:cb:8a:62:f7:6d:67:00:e5:
f6:dd:d7:1c:2f:4f:87:d3:48:2b:04:d8:7c:66:d2:ad:89:d2:
6e:ab:d1:3f:94:fd:d1:88:0b:43:a0:dd:bb:c5:3e:32:1f:13:
49:3e:8f:ac:29:0c:a3:e6:39:c6:9d:56:78:10:46:0c:79:d3:
dd:37:e2:fd:f7:94:a6:93:cd:36:2f:fa:22:9c:10:11:c9:eb:
fe:0d:fc:cd:c8:a2:ac:47:f5:c1:71:ec:e1:6b:d0:1e:7c:75:
60:96:e0:66:12:01:7a:5c:cb:35:1f:88:c5:eb:a8:0a:52:48:
c1:fa:4b:89:16:7c:67:ed:9c:88:c3:2b:29:4f:b8:f2:89:89:
d0:fb:47:fa:86:5b:c2:3c:b6:e2:6c:dd:7c:56:a0:71:b6:ca:
7f:f2:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:15 2024 by rpki-client on console-ams.rpki-client.org