Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/9XyOXSQB1HrYuOO47wew9flFc5c.roa
File: 9XyOXSQB1HrYuOO47wew9flFc5c.roa (raw, json)
Hash identifier: GRkuw7DauKyx7f7nCLJ6tOscL/ofnbcm0bojFFx9oUg=
Subject key identifier: F5:7C:8E:5D:24:01:D4:7A:D8:B8:E3:B8:EF:07:B0:F5:F9:45:73:97
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 18AD88CB
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/9XyOXSQB1HrYuOO47wew9flFc5c.roa
Signing time: Sat 01 Jan 2022 04:03:12 +0000
ROA not before: Sat 01 Jan 2022 04:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60145
IP address blocks: 185.55.184.0/24 maxlen: 24
185.55.185.0/24 maxlen: 24
185.55.186.0/24 maxlen: 24
185.55.184.0/22 maxlen: 22
185.55.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414025931 (0x18ad88cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Jan 1 04:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f57c8e5d2401d47ad8b8e3b8ef07b0f5f9457397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:bb:e5:4b:db:b0:07:7a:ac:b8:59:da:b3:
50:49:2e:cf:2e:66:b5:da:b1:2c:5a:ae:40:ff:02:
89:ce:a7:6d:12:3a:94:23:47:1b:a8:12:ca:d4:41:
af:72:75:41:17:05:12:4e:92:cf:24:d1:f0:ed:ed:
8c:df:71:8f:2f:f3:86:04:3d:74:72:f3:44:6d:e1:
e3:09:33:48:67:5f:d2:05:5a:71:59:e4:cd:47:42:
72:b7:5f:f5:25:31:5c:80:04:f5:4e:a7:78:b5:7b:
9a:b4:0e:fc:20:7b:63:00:9e:5e:69:a7:6e:46:6a:
18:34:58:05:5e:30:3f:7b:75:75:ee:01:12:8e:f9:
53:ba:58:9e:12:9f:18:9c:3f:87:ed:8c:cc:a4:ec:
1d:04:5f:9d:5e:da:23:32:45:b8:8b:fc:39:0b:d3:
b4:84:44:d7:76:c8:1f:8b:b3:b2:d4:04:63:6a:65:
06:21:85:83:fe:a2:37:3e:06:64:bb:f3:e5:6f:18:
6e:f5:07:7e:5c:cc:fc:33:01:86:9b:4e:ae:1c:db:
06:74:56:9a:a8:71:c1:8e:17:07:1a:79:2b:81:a2:
18:6a:96:0c:33:c1:34:5f:7c:37:fc:99:5e:c7:f8:
0d:ce:43:71:39:5b:79:d0:49:0d:ed:77:d2:1f:09:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:8E:5D:24:01:D4:7A:D8:B8:E3:B8:EF:07:B0:F5:F9:45:73:97
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/9XyOXSQB1HrYuOO47wew9flFc5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.184.0/22
Signature Algorithm: sha256WithRSAEncryption
31:94:b7:37:b5:4d:3a:44:a6:43:02:a2:68:58:76:c7:85:72:
b4:f9:2f:97:b0:a9:48:89:a5:47:a6:43:b3:98:91:7e:65:02:
20:9a:a2:0d:03:ef:03:b8:81:2e:ab:12:bd:c5:85:97:b3:11:
37:ff:4d:ea:73:37:b9:a9:77:d6:b3:b4:09:3f:d3:7a:e1:73:
27:71:c1:f3:c7:c2:4e:f1:1c:31:60:cc:bc:be:45:91:4e:e3:
57:24:57:7f:8b:7f:f2:5e:b6:fd:33:ad:f0:e1:26:85:d7:3a:
f5:a1:d3:9d:b6:23:8c:ab:d0:72:fc:95:27:f1:8c:8c:43:d5:
b4:a5:42:9f:45:9f:bd:c3:91:84:31:be:c0:42:15:42:91:9d:
40:40:10:76:a0:82:ce:c8:7f:de:bd:95:63:56:e8:3b:bd:6d:
b4:6b:c6:53:5c:20:ad:df:88:9f:44:24:e8:13:03:35:6f:96:
af:de:0e:eb:e7:a4:2b:79:3e:f5:3f:ff:f3:f6:bb:b8:00:98:
95:b7:87:65:07:d6:e2:7e:13:4f:17:2c:50:c8:d4:66:13:d4:
4f:e4:05:84:d6:f0:7f:1b:c9:75:95:df:0d:65:80:8d:98:01:
2a:a3:2c:95:57:75:8a:d5:3c:e7:98:4b:04:5e:a3:7d:01:0f:
01:63:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org