Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/v2oinIxhU5p906r6hzs6SXQO5sA.roa
File: v2oinIxhU5p906r6hzs6SXQO5sA.roa (raw, json)
Hash identifier: YiKslKzNnwhD0PnnBNk/U0iyOY2sG5Dw8VTFhLYQuiQ=
Subject key identifier: BF:6A:22:9C:8C:61:53:9A:7D:D3:AA:FA:87:3B:3A:49:74:0E:E6:C0
Certificate issuer: /CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Certificate serial: 1A6F4102
Authority key identifier: 1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/v2oinIxhU5p906r6hzs6SXQO5sA.roa
Signing time: Tue 10 May 2022 10:19:02 +0000
ROA not before: Tue 10 May 2022 10:19:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60304
IP address blocks: 185.33.35.0/24 maxlen: 24
185.33.34.0/24 maxlen: 24
185.33.33.0/24 maxlen: 24
185.33.32.0/24 maxlen: 24
2a04:5901:7::/48 maxlen: 48
2a04:5901:c::/48 maxlen: 48
2a04:5901:2::/48 maxlen: 48
2a04:5901:13::/48 maxlen: 48
2a04:5901:18::/48 maxlen: 48
2a04:5901:9::/48 maxlen: 48
2a04:5901:e::/48 maxlen: 48
2a04:5901:4::/48 maxlen: 48
2a04:5901:15::/48 maxlen: 48
2a04:5901:1a::/48 maxlen: 48
2a04:5901:b::/48 maxlen: 48
2a04:5901:10::/48 maxlen: 48
2a04:5901:1::/48 maxlen: 48
2a04:5901:6::/48 maxlen: 48
2a04:5901:17::/48 maxlen: 48
2a04:5901:d::/48 maxlen: 48
2a04:5901:12::/48 maxlen: 48
2a04:5901:3::/48 maxlen: 48
2a04:5901:8::/48 maxlen: 48
2a04:5900::/29 maxlen: 29
2a04:5901:19::/48 maxlen: 48
2a04:5901:f::/48 maxlen: 48
2a04:5901:14::/48 maxlen: 48
2a04:5901:5::/48 maxlen: 48
2a04:5901:a::/48 maxlen: 48
2a04:5901:11::/48 maxlen: 48
2a04:5901:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443498754 (0x1a6f4102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f21c543844c417f61ad7939244d3b759c2a43ed
Validity
Not Before: May 10 10:19:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf6a229c8c61539a7dd3aafa873b3a49740ee6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:74:54:1b:25:b5:ec:b2:ca:be:ba:cc:dd:
f6:c1:94:f0:40:8c:ef:17:75:89:6a:e8:b3:34:52:
51:7c:50:71:69:7f:2b:a1:38:e5:c7:72:c6:cd:37:
2c:e5:a6:50:57:2f:3f:04:41:9c:a7:e2:84:cd:aa:
f7:3e:90:f7:1a:24:1e:fa:45:d3:de:25:3d:ce:45:
26:01:01:6b:37:b4:97:e5:49:30:fc:62:29:83:01:
3f:d3:27:ad:5f:10:9d:c3:5f:d2:e3:37:00:1e:f0:
35:d4:94:50:1d:9f:7a:33:d7:dc:3d:18:03:f0:ea:
bb:b5:8f:0d:29:73:0f:55:f0:ff:58:09:e8:c4:d2:
7a:82:29:99:d1:70:09:4a:ff:54:8d:9c:ba:d9:74:
be:4e:9a:45:50:2c:b1:c2:64:7a:5f:d1:d5:52:9d:
ea:41:af:e8:1c:10:65:08:9d:b6:9c:24:a3:75:2b:
fb:a1:c6:ad:5f:3b:7a:e5:db:30:fd:09:70:69:40:
44:1b:7d:85:8e:48:85:93:fc:77:a0:43:f4:11:46:
82:95:c4:4c:ac:5d:df:30:20:40:56:dd:90:c4:8c:
2b:87:e0:5d:2d:a5:42:c1:74:22:aa:b3:a8:a1:d0:
00:56:bc:b0:75:aa:de:f9:26:48:69:e6:bb:36:c2:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:22:9C:8C:61:53:9A:7D:D3:AA:FA:87:3B:3A:49:74:0E:E6:C0
X509v3 Authority Key Identifier:
keyid:1F:21:C5:43:84:4C:41:7F:61:AD:79:39:24:4D:3B:75:9C:2A:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/v2oinIxhU5p906r6hzs6SXQO5sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/156ecd-fe68-4bc3-ae7d-b8c4853e42bc/1/HyHFQ4RMQX9hrXk5JE07dZwqQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.32.0/22
IPv6:
2a04:5900::/29
Signature Algorithm: sha256WithRSAEncryption
41:4f:2b:ac:66:a7:be:10:c4:2b:57:b5:4a:d0:92:ce:85:d8:
ba:42:a7:25:75:e4:56:3e:03:13:bf:03:fd:2f:e7:bf:bf:a5:
51:12:14:1b:be:d8:22:6d:af:92:0d:fa:c9:54:d3:93:90:f0:
9a:72:d7:be:b4:26:9a:08:80:39:63:bf:13:02:09:36:7d:6b:
f1:cf:c6:ba:6d:b8:28:05:8d:61:fd:36:a9:1c:e4:26:02:f9:
da:e8:33:4a:97:1b:e1:7e:37:a7:14:ef:e4:cb:65:fd:5c:5b:
05:ab:e6:24:65:07:bc:5e:00:79:a4:fe:8d:05:c7:33:54:ae:
e0:e5:1f:52:91:40:c7:f5:ec:11:b2:85:9a:29:f7:0b:67:1b:
8d:f9:0b:e5:b4:50:16:03:55:a3:91:e4:f3:b8:bd:37:92:a0:
4a:c1:aa:3f:31:3e:ca:1e:e4:0b:6e:61:11:0e:54:de:3c:4d:
8a:4a:68:26:2f:45:d6:c3:bc:76:10:3c:3b:42:f7:b3:86:b1:
d5:a3:3a:fc:62:c6:64:c2:71:24:8d:3b:d7:0b:f0:1c:e9:59:
64:f5:1c:3e:13:55:b6:08:fc:72:cb:62:d8:0e:b7:f5:21:cb:
a6:66:83:72:d4:4b:1d:da:33:b6:29:d9:00:2a:2b:6f:c9:44:
c5:06:59:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org