Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_xQGdLjNbfFLUcg7roOP004VTL4.roa
File: _xQGdLjNbfFLUcg7roOP004VTL4.roa (raw, json)
Hash identifier: 6O9MAnZOfcpwcSEMK6aqq01wJunOhCgoudnNxp3DfL8=
Subject key identifier: FF:14:06:74:B8:CD:6D:F1:4B:51:C8:3B:AE:83:8F:D3:4E:15:4C:BE
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01820E4D1A096729D3D6827753559876F80E
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_xQGdLjNbfFLUcg7roOP004VTL4.roa
Signing time: Sun 17 Jul 2022 22:35:10 +0000
ROA not before: Sun 17 Jul 2022 22:35:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58212
IP address blocks: 185.236.8.0/24 maxlen: 24
185.236.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0e:4d:1a:09:67:29:d3:d6:82:77:53:55:98:76:f8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 17 22:35:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff140674b8cd6df14b51c83bae838fd34e154cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:87:5c:f0:83:e4:58:c8:be:77:e6:22:e6:cd:
42:4b:21:c3:65:6f:ea:eb:c4:b1:da:59:17:5b:9e:
7a:87:ea:46:58:17:c2:60:93:b2:f6:65:96:ed:9a:
57:4e:95:17:8e:e1:9f:c7:4f:2e:03:1b:18:c0:45:
aa:97:ed:43:1a:a2:7d:da:ff:e7:38:6d:9a:c1:ec:
6f:08:85:51:e3:cb:bc:8d:17:3c:f2:4b:61:c7:60:
5d:ff:d5:4f:83:94:97:6e:8d:40:db:93:b4:0d:f8:
2d:54:da:e8:53:0d:0b:21:91:db:b3:47:51:c5:7b:
17:12:79:16:43:18:ed:1f:ae:6f:f8:51:07:77:f9:
a3:b0:44:e4:13:7d:15:83:40:a0:ac:83:04:32:aa:
90:41:bd:45:0d:ec:66:fc:4e:3b:12:a1:af:e2:63:
83:7a:a6:76:3e:5c:95:4c:f2:3e:03:4d:7f:68:45:
73:6d:67:56:05:13:77:b7:b1:3e:5b:25:0f:32:c6:
3e:b8:19:3d:9d:fe:cb:55:b8:15:3e:13:97:93:f9:
54:bf:da:ee:a2:9d:48:f3:e9:2a:eb:65:1d:43:26:
ac:05:45:47:f2:3b:08:62:b7:5f:e2:49:43:c8:6d:
3e:b9:da:58:2a:20:62:f1:45:13:db:d4:4d:2c:b4:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:06:74:B8:CD:6D:F1:4B:51:C8:3B:AE:83:8F:D3:4E:15:4C:BE
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/_xQGdLjNbfFLUcg7roOP004VTL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.8.0/24
185.236.11.0/24
Signature Algorithm: sha256WithRSAEncryption
59:28:56:b9:e7:85:05:3d:cd:01:7d:a4:1c:8b:f4:f1:e7:16:
ce:63:dc:74:4a:5d:50:60:9d:90:ab:b3:4a:1f:bc:89:45:55:
f7:e2:54:6a:cc:5c:be:69:43:49:20:fe:d7:6b:75:e5:6e:e9:
54:63:c9:b0:71:72:7c:de:15:0f:f1:fe:bc:4e:34:eb:a1:df:
7f:8a:b3:26:d5:9a:49:92:df:aa:ca:98:f3:ac:a4:8a:ef:c1:
3c:ef:8d:aa:1a:6e:12:fb:d7:af:2b:74:00:69:c5:fc:96:ec:
ea:95:be:d8:c5:56:11:a9:e1:12:f7:7e:b1:1e:28:ac:2d:50:
5e:e3:30:89:57:06:93:e3:0f:72:6d:86:8c:49:73:8a:4f:a7:
e1:66:28:eb:77:a2:b3:2e:96:bb:39:ef:0d:f7:ba:68:9e:fa:
8f:95:10:3a:41:e0:25:10:2e:2c:95:fa:ca:fc:09:d7:ca:19:
95:3b:64:96:b7:75:cd:85:e5:c5:3e:45:99:43:60:a7:82:eb:
62:b0:78:6b:4d:35:ab:2e:bd:88:a7:68:0a:4f:da:bc:fc:c9:
29:38:df:db:6b:a9:53:0b:5f:fd:b8:ec:7f:c8:b2:fd:77:37:
bc:2f:1c:6c:6c:f4:2e:1f:63:c8:fc:3d:e1:87:b4:76:2c:99:
e7:57:55:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:27 2023 by rpki-client on console-ams.rpki-client.org