Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/Xto8KAEvycGjoThSpceRfr4WcOc.roa
File: Xto8KAEvycGjoThSpceRfr4WcOc.roa (raw, json)
Hash identifier: Ev5zum9ydLSOE0h7oCZNmq2Kdbe7mRiDrIquOQ0r/no=
Subject key identifier: 5E:DA:3C:28:01:2F:C9:C1:A3:A1:38:52:A5:C7:91:7E:BE:16:70:E7
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 03DF27A2
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/Xto8KAEvycGjoThSpceRfr4WcOc.roa
Signing time: Sat 01 Jan 2022 09:58:34 +0000
ROA not before: Sat 01 Jan 2022 09:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21032
IP address blocks: 185.133.112.0/22 maxlen: 22
188.209.160.0/19 maxlen: 19
109.226.128.0/18 maxlen: 18
2a0d:c80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64956322 (0x3df27a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Jan 1 09:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5eda3c28012fc9c1a3a13852a5c7917ebe1670e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:91:43:54:eb:ab:19:1b:fe:2f:3b:17:4b:
5f:8f:d1:28:66:17:6f:be:8e:fe:9b:96:d7:10:1b:
8b:45:b3:d5:61:1e:16:62:e2:43:56:e5:f2:25:58:
72:ac:aa:ad:c3:31:eb:63:06:4f:70:d1:14:b5:5e:
57:a6:25:d2:8a:07:de:69:e7:85:de:1c:a3:ef:ea:
ba:1f:41:ab:e4:d0:5a:02:95:e0:3d:d9:7f:ef:68:
b2:8a:44:63:ee:78:ab:7c:46:99:41:22:a6:4f:44:
1f:5d:cd:62:f6:0e:49:34:0a:fd:a5:f4:d1:e3:a3:
0f:8c:e9:5a:f5:7f:29:e0:00:46:f3:02:ed:a0:09:
52:78:67:ec:70:cb:51:f7:f8:30:11:ba:9a:5a:16:
64:6b:36:5d:dc:41:62:c8:b4:04:e5:ce:06:2f:87:
5d:b9:b2:62:e3:e1:75:6e:6c:55:1f:b7:15:ba:45:
73:49:22:75:79:e1:24:10:7f:a7:08:a1:f2:8d:ee:
05:2c:1d:07:87:80:8b:55:ba:f7:1f:cd:25:57:5d:
6c:0b:00:d5:12:0d:b9:d9:e9:55:5b:19:54:09:b5:
a5:23:74:41:02:5e:29:07:26:a0:82:d3:91:31:e7:
20:d0:05:f4:5e:b8:04:ff:4c:44:49:74:da:bc:9e:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DA:3C:28:01:2F:C9:C1:A3:A1:38:52:A5:C7:91:7E:BE:16:70:E7
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/Xto8KAEvycGjoThSpceRfr4WcOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.226.128.0/18
185.133.112.0/22
188.209.160.0/19
IPv6:
2a0d:c80::/29
Signature Algorithm: sha256WithRSAEncryption
b3:ae:27:95:05:da:dc:72:17:f5:ca:c2:97:b2:69:d5:df:ed:
e0:cb:a7:f5:5b:0a:77:2f:cd:21:8d:6c:72:eb:3b:8b:7f:f9:
2e:1b:44:30:bb:b7:52:d5:b9:37:21:d2:1e:49:32:2c:cc:19:
f3:41:0d:2a:fb:e2:32:16:de:ca:3e:54:dd:33:c8:37:2c:bd:
ee:ca:b9:85:4d:72:3a:59:ff:63:e9:24:eb:6e:a4:6c:b6:52:
de:3e:9f:fa:ed:7b:65:90:1d:0e:c2:89:03:c5:d6:e2:bc:53:
84:a1:6a:4e:90:e5:93:5b:ad:ff:b9:fd:ea:9b:88:10:40:bc:
d8:b7:21:af:c9:bb:08:e1:55:e2:88:85:3c:d2:a0:65:aa:c4:
d6:13:dd:b5:cf:5c:03:20:31:b4:93:f8:04:37:e6:87:fd:55:
0a:16:38:49:08:28:15:fb:2d:8f:f0:17:06:50:92:bc:d3:aa:
a0:c2:ed:0d:66:06:42:f6:6f:67:be:79:66:bf:8c:87:c6:61:
79:09:f1:39:a2:96:cb:f8:51:98:62:c7:06:18:a8:18:9c:15:
87:74:3d:3f:f6:68:26:e6:c5:a4:06:1f:52:cc:ad:d2:bb:e8:
bd:84:12:cc:29:e3:1a:4f:9b:64:a1:48:59:04:86:29:3b:8c:
20:83:a1:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:26 2024 by rpki-client on console-ams.rpki-client.org