Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/hUnEMMiRi93NvuDExVNp_s2cT_s.roa
File: hUnEMMiRi93NvuDExVNp_s2cT_s.roa (raw, json)
Hash identifier: 6mamI/deeYEQ1ghiXGoQ5GGxQ0T9Ng04u1AXDMZ4IOE=
Subject key identifier: 85:49:C4:30:C8:91:8B:DD:CD:BE:E0:C4:C5:53:69:FE:CD:9C:4F:FB
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 082E4771
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/hUnEMMiRi93NvuDExVNp_s2cT_s.roa
Signing time: Sat 01 Jan 2022 08:53:34 +0000
ROA not before: Sat 01 Jan 2022 08:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.71.219.0/24 maxlen: 24
185.71.216.0/24 maxlen: 24
185.71.217.0/24 maxlen: 24
185.71.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137250673 (0x82e4771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jan 1 08:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8549c430c8918bddcdbee0c4c55369fecd9c4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:cf:00:74:eb:ad:06:39:58:8c:ce:6f:3b:
07:13:bc:81:80:9e:72:87:35:00:96:1a:61:e5:5e:
c8:3b:8f:9e:90:7f:6a:29:62:f1:a3:5a:05:2e:ca:
c9:5a:51:d3:8c:b4:e5:ae:bc:d7:91:6b:85:a4:81:
f6:4b:f8:ca:e8:40:58:61:72:0c:6f:75:73:fc:63:
17:1c:2e:d5:b5:1c:a3:d5:16:65:2e:af:35:a4:d8:
27:6d:4f:6c:62:9a:43:eb:7d:45:4b:93:ea:90:b3:
2c:20:6e:c8:cc:fe:d1:ca:02:5f:4d:f8:6a:4f:e8:
4e:bf:39:b3:5e:56:b9:2e:bd:cb:48:e3:9d:69:75:
6b:31:c6:eb:7d:00:38:df:ba:82:b6:00:fa:75:07:
31:bf:e2:6e:b9:04:e7:68:1c:62:f2:e8:d8:f9:9c:
3a:2e:31:81:7a:0d:53:9c:34:52:5b:5d:e4:24:8b:
e7:28:7b:ae:de:22:21:d8:71:65:88:29:58:55:cb:
01:7e:e3:03:3d:59:b7:b9:e8:04:c5:fa:7c:62:e7:
3f:c6:a7:4c:19:70:f6:1c:91:fb:62:1c:be:1f:49:
02:b8:c2:7a:f6:bc:a0:bf:41:08:4f:08:cc:7a:b8:
c6:28:52:49:d0:43:60:8b:ed:d9:90:34:21:56:ff:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:C4:30:C8:91:8B:DD:CD:BE:E0:C4:C5:53:69:FE:CD:9C:4F:FB
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/hUnEMMiRi93NvuDExVNp_s2cT_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:51:c1:cc:d0:ef:57:81:2c:03:33:43:f6:59:06:c8:e2:c0:
89:26:40:ed:df:2a:d7:e4:31:eb:2d:44:81:ff:ae:d3:02:76:
37:e9:f2:29:9d:d1:d8:6c:8b:f7:3e:08:3c:47:6e:c2:87:95:
3e:1d:a6:5a:03:bb:39:04:64:a5:dd:ee:46:0d:88:2c:40:6d:
56:4b:23:c1:36:88:76:be:e9:e7:84:94:eb:a8:68:a8:1d:38:
7c:f7:cc:a9:df:e9:48:dd:f9:e5:f3:9b:c3:c2:24:3d:84:22:
38:6b:8a:26:c4:4d:1b:6b:17:71:5c:da:fa:f0:6d:c3:8a:2b:
66:03:4c:d0:3b:f6:31:65:26:e4:30:78:a0:ba:35:90:d5:27:
34:c5:bb:32:db:19:a9:bd:c5:f9:fb:52:79:a7:83:78:5c:b2:
16:69:f2:2d:d2:72:7f:36:71:a4:84:63:95:fd:b8:fa:16:33:
11:f2:68:1a:bb:4b:47:f2:be:c8:07:57:66:3b:c7:3a:53:76:
c7:72:64:42:4d:f3:2b:54:b0:d0:e4:4e:d6:39:fb:4a:f9:7c:
1d:8e:d6:78:ef:5a:10:14:97:34:c1:87:f9:89:db:51:8c:a2:
01:33:6b:11:c3:f5:3d:a6:18:65:4e:c3:1d:0d:c1:d6:cf:4f:
16:b4:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:00 2024 by rpki-client on console-ams.rpki-client.org