Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/J28U_QgaWCnnDWmX0pZC_UKAdxw.roa
File: J28U_QgaWCnnDWmX0pZC_UKAdxw.roa (raw, json)
Hash identifier: BTRoHX8Vlq7gYInfO5BZ6JdV0h9fZ2uAQXqWFQJM40Y=
Subject key identifier: 27:6F:14:FD:08:1A:58:29:E7:0D:69:97:D2:96:42:FD:42:80:77:1C
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 055A2E7C
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/J28U_QgaWCnnDWmX0pZC_UKAdxw.roa
Signing time: Sat 01 Jan 2022 05:52:06 +0000
ROA not before: Sat 01 Jan 2022 05:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64428
IP address blocks: 185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.40.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
185.165.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89796220 (0x55a2e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jan 1 05:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=276f14fd081a5829e70d6997d29642fd4280771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:bf:c8:39:6b:73:9f:a3:5b:42:5a:23:91:
f1:07:b7:76:4f:62:dc:cc:d2:ac:f4:d6:82:24:9f:
d6:8f:56:2b:f4:04:4a:f1:97:99:ec:af:e5:fa:6f:
9a:82:aa:d1:57:13:0b:7b:6a:dd:c9:c7:2e:38:4c:
a8:cc:47:d4:21:ac:59:35:65:e1:d3:67:fe:5b:bd:
95:a3:c4:33:f1:22:ca:e7:98:37:2c:b9:46:fa:58:
40:8f:ec:d2:3e:68:20:c8:2d:7b:99:78:bf:6c:64:
b1:c8:11:de:0d:18:73:4b:75:ce:d0:13:ed:d5:f7:
45:78:e8:95:56:f1:b4:7b:55:12:d1:7c:e4:b7:cc:
2a:b1:a6:32:e9:53:c1:14:46:95:c7:bf:69:76:5e:
77:db:dd:f5:9a:ac:38:5a:cf:d3:d7:cb:14:5d:29:
e9:1e:36:7c:bf:f1:7b:90:86:99:db:cd:a0:2d:4c:
2a:ce:da:2d:bc:08:78:1e:fd:af:50:5d:95:fa:f8:
b4:de:98:f8:91:92:fc:3b:88:2c:6d:49:b0:a9:95:
72:32:7e:40:d9:64:cf:ad:97:35:be:bc:9f:c3:88:
f7:db:8a:e5:8a:dc:b7:24:d8:c5:4e:05:34:5f:a1:
fe:4c:7c:f1:6a:8a:07:2a:9d:ad:7b:89:34:af:4f:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6F:14:FD:08:1A:58:29:E7:0D:69:97:D2:96:42:FD:42:80:77:1C
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/J28U_QgaWCnnDWmX0pZC_UKAdxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.40.0/22
Signature Algorithm: sha256WithRSAEncryption
28:1a:10:4a:44:46:ad:b2:8b:cc:3f:8c:e7:21:58:5e:b3:e1:
8b:09:73:ba:7a:f8:58:28:f6:84:a2:36:ba:b2:68:5d:14:f0:
25:eb:d1:17:ef:1a:16:79:65:a2:d5:86:00:75:5f:65:0e:7f:
5e:05:2d:48:c8:64:b2:e1:b2:86:f6:aa:33:6e:9d:46:c4:87:
32:7a:b3:c0:2b:16:1c:3f:70:24:9e:7b:1f:b5:5c:3b:c8:89:
7c:f1:be:99:c1:24:60:64:52:10:51:42:b3:35:38:93:c4:15:
26:ac:6a:37:67:4a:ea:c9:40:be:f0:e8:ec:ca:3f:52:e1:77:
fb:f2:33:d9:28:b3:8e:88:b5:aa:0d:dc:4c:8f:f4:cb:85:0f:
62:84:2a:ec:cd:c5:39:2b:fd:7e:50:f0:a7:82:fb:17:bf:aa:
5c:22:cd:f1:e6:97:2e:60:60:8c:0c:a4:e0:9d:29:d9:d9:44:
70:33:33:90:4c:e2:b1:ab:96:13:a5:b5:b1:06:03:fd:bf:3b:
14:36:72:18:02:f0:e2:51:8a:17:3e:8b:a8:6c:97:04:39:71:
6a:61:f6:13:5f:aa:a9:61:35:d6:57:f8:4f:62:ec:0f:a3:41:
00:36:35:a2:be:ba:85:f0:91:24:4d:bb:7e:1c:67:2f:9f:46:
8d:57:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:11 2024 by rpki-client on console-fra.rpki-client.org