Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/2HJ1aWcSDKbvc4qKZ-QVMt2xz9E.roa
File: 2HJ1aWcSDKbvc4qKZ-QVMt2xz9E.roa (raw, json)
Hash identifier: d7Zr7SVlEkFtnfkcxuep03/34gAQCDK2HXFPa05t/YM=
Subject key identifier: D8:72:75:69:67:12:0C:A6:EF:73:8A:8A:67:E4:15:32:DD:B1:CF:D1
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 04CCC416
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/2HJ1aWcSDKbvc4qKZ-QVMt2xz9E.roa
Signing time: Sat 01 Jan 2022 12:02:21 +0000
ROA not before: Sat 01 Jan 2022 12:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197008
IP address blocks: 185.207.16.0/22 maxlen: 22
178.251.116.0/23 maxlen: 23
178.251.118.0/23 maxlen: 23
2a00:ee40:2::/48 maxlen: 48
2a00:ee40:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80528406 (0x4ccc416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Jan 1 12:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d872756967120ca6ef738a8a67e41532ddb1cfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:4f:66:3d:ab:18:ec:6d:8f:7d:a8:15:aa:
13:f1:d7:ce:0c:d6:71:36:35:57:72:d2:f1:9f:b3:
58:f3:a2:64:3f:63:62:52:62:fd:2b:52:64:9e:e6:
3c:c3:89:94:aa:be:40:99:0f:98:74:5d:0c:fe:34:
e1:b2:9f:e3:b3:8d:40:93:79:86:a1:fe:dc:02:3d:
e3:e9:79:1f:d9:2e:53:61:a5:77:ca:52:7a:b6:09:
d6:b2:97:ac:c0:e0:c4:3d:d4:f1:6e:d9:9f:b3:2b:
da:8d:a6:76:ba:f3:e8:f6:16:4a:b5:d9:19:8f:40:
5c:b7:c7:9a:4e:2f:97:e6:f2:33:34:a4:17:a0:df:
55:7a:95:dd:07:5c:b8:bb:43:32:cb:83:94:df:84:
8a:9c:d6:c7:29:4c:65:61:59:e2:41:38:bc:32:1a:
8b:c3:ca:68:ce:3e:fb:57:2d:bd:e1:30:c2:d6:0d:
10:f1:3e:25:89:17:27:b2:c0:3f:90:7b:95:0a:c8:
cf:7b:3e:6b:f6:d6:4d:da:29:a3:cb:ee:a6:6a:3b:
68:f1:96:68:ea:fd:b1:9d:3d:f9:e2:9c:58:ae:27:
ff:40:85:fd:70:42:92:52:e9:1f:92:ed:4a:7d:7f:
a0:6f:07:08:43:b9:a4:14:7d:96:4a:ef:9d:2c:9f:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:75:69:67:12:0C:A6:EF:73:8A:8A:67:E4:15:32:DD:B1:CF:D1
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/2HJ1aWcSDKbvc4qKZ-QVMt2xz9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.116.0/22
185.207.16.0/22
IPv6:
2a00:ee40:2::/48
2a00:ee40:4::/48
Signature Algorithm: sha256WithRSAEncryption
17:3a:74:fb:c7:06:92:22:77:40:bd:4a:82:98:da:19:47:c7:
c6:13:11:33:60:56:59:d1:31:2c:3e:ed:22:63:1b:36:cd:ba:
98:b0:cc:34:08:5e:5b:47:69:c6:7c:43:df:a6:f2:f7:1b:42:
66:14:43:cd:f3:d3:e7:eb:65:2c:c4:74:14:b4:81:a1:62:96:
a6:7a:df:02:82:3f:03:16:29:01:64:f9:68:3e:bc:13:bd:1b:
ba:bb:d9:9e:7f:61:c4:66:bf:ac:8a:71:a8:50:c7:1f:d8:06:
c5:07:3b:17:7b:72:f7:8f:53:a1:f2:de:37:e8:a6:93:ec:de:
b6:df:af:90:99:23:5e:48:0f:b1:e2:0f:e0:5d:da:e6:c3:b8:
f5:22:c6:69:49:86:39:0b:a6:4a:54:40:0f:af:10:07:21:12:
55:19:73:d5:b8:cb:8d:74:80:07:7e:00:c1:47:21:c0:a2:e6:
15:6f:4c:b6:22:18:3b:64:29:36:7a:2e:32:ee:9e:19:62:49:
86:fd:7c:81:2d:af:59:3d:25:63:a2:8d:8a:64:68:f5:88:05:
6a:19:09:a9:44:3f:2f:38:8a:93:1b:a3:d7:da:e0:bd:ad:c4:
e7:fb:45:c8:90:3f:2d:eb:d4:b7:5c:a7:4f:56:c0:65:78:29:
ec:ed:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org