Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/fqv7c0hy8RzWO_iahyap1bGxa2k.roa
File: fqv7c0hy8RzWO_iahyap1bGxa2k.roa (raw, json)
Hash identifier: XABFpmunjOoyiuv1r5ddyiXF1+lv1AgT8jZ6pngAJfk=
Subject key identifier: 7E:AB:FB:73:48:72:F1:1C:D6:3B:F8:9A:87:26:A9:D5:B1:B1:6B:69
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0129D9A9
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/fqv7c0hy8RzWO_iahyap1bGxa2k.roa
Signing time: Sat 01 Jan 2022 00:56:37 +0000
ROA not before: Sat 01 Jan 2022 00:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205375
IP address blocks: 185.220.85.0/24 maxlen: 24
185.220.84.0/24 maxlen: 24
185.220.87.0/24 maxlen: 24
185.220.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19519913 (0x129d9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Jan 1 00:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eabfb734872f11cd63bf89a8726a9d5b1b16b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:0d:c3:14:97:2c:ce:f6:c7:a0:0e:fe:b6:
81:57:74:d6:51:96:ec:43:be:b7:67:e6:9d:95:5f:
ab:35:9c:98:1b:8e:e2:31:db:90:f0:9b:1a:62:39:
33:f0:71:7d:72:60:1c:fc:12:5a:7d:3a:6b:5b:75:
38:a0:21:5f:17:71:91:54:9e:2c:64:27:32:11:ae:
d5:41:d5:d8:ea:8a:05:4f:38:a7:f6:b2:64:7b:8c:
67:a6:dc:9b:ed:08:5f:69:47:86:67:93:91:f7:04:
d3:ab:cb:60:bb:77:6e:9a:9e:32:cc:f0:c0:6a:d3:
1b:bb:71:5a:9e:ba:a4:92:00:e1:35:0b:ea:1a:8f:
d7:7d:7b:e5:2c:96:c4:4d:0e:0e:93:74:b8:93:df:
60:b3:ee:60:68:33:d2:04:7e:1b:08:67:bb:e0:7a:
6b:93:34:07:65:39:16:ab:3e:3f:44:33:e7:38:8e:
81:5d:d5:25:a5:8d:66:5e:63:31:3a:dc:ed:0a:7b:
70:00:94:a0:81:34:0a:fd:cd:f6:16:f2:6d:dc:7b:
02:f0:04:3b:ac:93:92:ea:ec:81:ff:2d:3d:ee:31:
15:ae:08:52:15:e0:a8:2d:7f:12:7f:4b:db:cc:0f:
03:6f:91:61:3b:cc:18:79:68:16:bc:b3:97:36:c8:
a4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AB:FB:73:48:72:F1:1C:D6:3B:F8:9A:87:26:A9:D5:B1:B1:6B:69
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/fqv7c0hy8RzWO_iahyap1bGxa2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.84.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:02:c5:97:08:f6:bc:e5:18:b1:57:b2:69:ea:24:9e:f2:07:
7b:4a:a8:86:f4:ab:87:80:47:d4:ca:fe:7d:28:7f:d9:6b:c9:
c7:a1:67:c9:0a:9c:59:4a:20:ad:b5:36:7b:83:a2:58:d0:46:
44:b3:a9:f1:40:84:62:85:88:e6:e3:16:99:53:9d:53:7d:38:
bd:c8:27:5d:06:27:a6:19:ff:02:aa:58:dd:85:32:3e:01:19:
1b:f9:31:26:c4:e2:76:a3:bc:a4:08:6f:a1:5f:cb:19:72:4e:
65:c4:74:e8:46:31:da:3a:05:2b:3f:77:1b:b7:dd:45:aa:43:
65:37:7e:30:b7:1d:c6:62:e9:a6:f2:85:ea:eb:b0:fe:30:74:
9c:f6:5c:92:61:34:7d:60:26:bb:2b:d4:99:c7:c2:a2:ef:b2:
be:5c:45:62:52:95:e0:a9:3d:59:c2:c3:b8:b3:94:cc:ff:b6:
60:80:c5:32:29:6d:33:8c:40:f1:fd:9c:9e:8c:11:56:5d:cd:
4b:50:70:88:70:9e:a8:04:84:a4:b1:2e:44:96:3c:fa:55:21:
e0:9e:80:20:bb:48:27:dd:59:1f:0f:5c:cd:48:9f:37:a4:3a:
1e:1d:19:7e:db:e8:ed:38:05:ae:45:9b:1e:76:43:65:53:40:
eb:e9:63:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:55 2024 by rpki-client on console-fra.rpki-client.org