Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/foRIkMe85Jqps6_bE00AH7lzQ6A.roa
File: foRIkMe85Jqps6_bE00AH7lzQ6A.roa (raw, json)
Hash identifier: dTV6Z60U+0TUpLBnhvzh4ChmX1e7BfIYd41I7TALqIg=
Subject key identifier: 7E:84:48:90:C7:BC:E4:9A:A9:B3:AF:DB:13:4D:00:1F:B9:73:43:A0
Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Certificate serial: 118AD067
Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/foRIkMe85Jqps6_bE00AH7lzQ6A.roa
Signing time: Sat 01 Jan 2022 11:04:05 +0000
ROA not before: Sat 01 Jan 2022 11:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57758
IP address blocks: 185.167.207.0/24 maxlen: 24
2a0b:b600:3804::/48 maxlen: 48
2a0b:b600:3802::/48 maxlen: 48
2a0b:b602::/32 maxlen: 48
2a0b:b600:3803::/48 maxlen: 48
2a0b:b600:2000::/38 maxlen: 48
2a0b:b600:3400::/38 maxlen: 48
2a0b:b600:400::/38 maxlen: 48
2a0b:b600::/36 maxlen: 36
2a0b:b600:1800::/38 maxlen: 38
2a0b:b600:1400::/38 maxlen: 38
2a0b:b600:800::/38 maxlen: 38
2a0b:b600:3800::/38 maxlen: 38
2a0b:b600:3400::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294309991 (0x118ad067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6
Validity
Not Before: Jan 1 11:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e844890c7bce49aa9b3afdb134d001fb97343a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:2c:b2:33:b2:77:5c:e0:6b:a8:5f:9d:48:
10:a8:6c:af:44:96:d7:37:d4:0d:ab:fc:d5:f7:62:
2f:3c:43:0d:09:58:0d:26:3e:12:b6:fb:8b:13:c4:
df:90:22:19:01:5f:cd:56:9f:5f:60:81:c4:15:44:
fa:c5:f0:12:1d:80:b1:e1:9f:8a:8e:86:93:1d:49:
a9:55:62:15:83:69:88:07:ee:bf:17:77:ba:cd:8c:
4e:0e:aa:50:d5:63:c7:51:9c:76:2e:4f:ef:6b:60:
73:ce:d5:cb:13:a0:7c:99:10:e1:2c:70:a6:cc:9b:
b0:7b:49:2f:bc:b4:5f:03:fc:ad:19:d8:13:9a:42:
76:86:03:00:a2:d8:3e:fc:f4:8a:5e:2b:c3:e1:c0:
b5:b1:ac:d2:c0:b0:37:c7:b0:ce:1e:f2:66:43:12:
9b:e3:70:9f:9b:58:0c:dd:c7:d4:6c:2a:43:11:cc:
4d:b0:d2:cd:89:aa:cf:9a:2f:86:85:0c:64:42:88:
c6:2f:96:2b:fd:08:3e:ce:72:f7:c2:79:e9:6c:73:
0d:50:65:ac:68:98:de:a8:f3:8b:8d:ed:c3:53:42:
42:0f:ac:99:cc:bd:94:bb:03:95:09:35:a5:80:f5:
eb:cf:d1:ab:02:d2:87:a7:16:2e:b3:95:30:16:26:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:84:48:90:C7:BC:E4:9A:A9:B3:AF:DB:13:4D:00:1F:B9:73:43:A0
X509v3 Authority Key Identifier:
keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/foRIkMe85Jqps6_bE00AH7lzQ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.207.0/24
IPv6:
2a0b:b600::/36
2a0b:b600:1400::-2a0b:b600:1bff:ffff:ffff:ffff:ffff:ffff
2a0b:b600:2000::/38
2a0b:b600:3400::-2a0b:b600:3bff:ffff:ffff:ffff:ffff:ffff
2a0b:b602::/32
Signature Algorithm: sha256WithRSAEncryption
33:ea:20:3e:68:17:f5:7c:53:f3:21:58:59:88:c0:ee:be:14:
f1:d6:68:ce:91:24:a9:38:8d:f3:5d:03:46:73:8e:07:93:6d:
e8:d0:3d:52:fe:13:13:f1:4a:1c:64:e3:3e:44:5a:30:b7:c5:
26:90:81:af:86:71:48:04:6b:50:c3:85:86:6d:c0:80:d3:77:
4a:1d:ee:03:e3:d5:98:dd:e7:17:f1:62:93:2c:56:7c:b3:ed:
86:cb:9c:76:30:c5:ba:df:38:17:fe:16:d2:86:91:79:f6:9a:
0e:7c:3e:60:1b:a9:22:6a:cf:b0:c4:fe:e4:0e:d4:d8:70:c1:
5c:26:f7:6f:ec:68:e3:64:ab:f8:3e:7d:9e:e3:62:b9:41:dd:
2e:d1:33:b2:fd:4d:87:9d:8a:d8:47:a3:68:ff:4a:71:16:a4:
a0:d7:b0:62:0e:f6:10:ce:d0:60:28:61:09:df:8d:41:be:84:
0f:3f:fe:12:50:b2:ae:ed:7e:76:c1:4e:77:05:7b:23:e5:f3:
8c:3b:b4:76:01:1b:2f:32:d8:86:5b:39:cd:95:07:02:c4:5f:
f0:9a:56:8d:d5:70:eb:b9:ab:fa:61:10:22:4d:59:c9:a6:7e:
58:c2:68:c9:d7:cc:18:43:e5:8b:38:1c:24:15:cd:21:aa:93:
15:e5:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org