Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/xfhxqJyluJ0QkgIhqeCNbAxRmFs.roa
File: xfhxqJyluJ0QkgIhqeCNbAxRmFs.roa (raw, json)
Hash identifier: tegeI65kpBeBgSIE8gAqkj2k9lWXqvL7SoO7KDU2cyQ=
Subject key identifier: C5:F8:71:A8:9C:A5:B8:9D:10:92:02:21:A9:E0:8D:6C:0C:51:98:5B
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 0E42AE4A
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/xfhxqJyluJ0QkgIhqeCNbAxRmFs.roa
Signing time: Sat 01 Jan 2022 05:00:31 +0000
ROA not before: Sat 01 Jan 2022 05:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.214.23.0/24 maxlen: 24
185.214.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239251018 (0xe42ae4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Jan 1 05:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f871a89ca5b89d10920221a9e08d6c0c51985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:26:bf:0a:a7:fa:8c:3e:06:42:ee:18:2e:9c:
11:0c:fb:97:61:89:f3:bf:67:28:e6:0c:19:66:c7:
e2:fb:e7:b7:94:3f:35:eb:40:c4:fd:0b:3b:cd:a7:
b1:fc:e8:fb:08:5c:a4:d1:ea:4f:4f:47:6e:cc:f3:
72:98:c7:c2:e2:28:19:a6:46:8f:5a:19:bc:3d:35:
9e:bf:00:0d:8b:ad:d4:96:f5:56:44:e1:51:59:5d:
da:5b:ff:e6:90:29:68:60:0d:b7:59:4a:b6:84:1d:
17:97:98:b9:b2:d6:4f:4f:8f:f4:82:c6:16:8a:d8:
b0:da:14:6f:55:19:57:a4:c7:b8:5a:74:1f:1b:88:
0c:4d:a2:64:cb:e4:fa:10:65:90:24:0e:f6:0d:8d:
89:5a:25:a6:46:50:af:e1:fb:f4:21:8b:7b:8d:10:
16:c4:39:f5:26:77:3e:59:08:cd:ac:53:4a:c8:c3:
2d:de:a6:9e:39:1d:95:dc:87:6d:96:ea:89:65:25:
b2:81:a4:a6:66:82:9e:c8:8b:40:ac:06:2a:7b:ed:
ae:12:c1:6f:96:02:91:b9:4c:30:54:f1:48:e4:df:
bd:a3:95:91:eb:b9:9c:d2:e9:dc:58:62:17:ed:d4:
e2:dd:5a:b9:51:9e:95:f0:8e:9d:d3:f2:a9:97:d2:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:71:A8:9C:A5:B8:9D:10:92:02:21:A9:E0:8D:6C:0C:51:98:5B
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/xfhxqJyluJ0QkgIhqeCNbAxRmFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.22.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c2:1a:35:6a:fc:10:7f:5e:84:28:58:1e:51:ee:da:05:fa:
89:5a:6e:b4:70:fb:10:af:37:21:41:20:43:99:c8:ef:21:37:
3f:35:2d:4f:aa:04:92:df:8d:09:c8:4c:f8:78:e4:6d:62:c7:
b0:9c:1e:b8:e9:d2:11:7f:92:06:d9:9c:4d:a0:9b:bf:0b:06:
49:99:a0:a7:9e:dc:01:69:a8:3e:e2:29:10:4c:7f:ff:6e:95:
17:28:e0:3e:12:3d:b7:9f:de:ca:cd:74:ae:8d:b5:fc:46:8d:
ab:96:9a:98:23:1b:65:04:2e:25:95:17:00:48:b0:82:13:3b:
25:1b:89:48:05:84:ff:52:19:84:83:26:e3:d7:0f:f1:b5:e0:
42:c7:85:a2:76:63:10:22:b5:1f:19:20:56:16:15:0d:e9:13:
9d:aa:44:b5:bf:c2:b1:f5:a2:21:16:02:ef:ac:56:4b:3c:f6:
46:89:26:b2:30:00:0b:63:a5:cb:a5:fb:4c:50:b7:0f:87:4a:
8c:24:5b:a6:5d:9e:40:4f:2b:f0:19:e4:a3:0c:6e:eb:28:bc:
ad:92:86:98:48:6d:86:5c:35:18:45:87:b8:18:88:18:f2:87:
6c:3c:37:20:56:b8:ec:e6:db:24:37:13:8e:30:1a:ed:4b:9f:
d5:68:c4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:34 2024 by rpki-client on console-fra.rpki-client.org