Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/L6ElhNdcMqZ-GH9gJyoqJj_vxHc.roa
File: L6ElhNdcMqZ-GH9gJyoqJj_vxHc.roa (raw, json)
Hash identifier: zBD+IrqbJuTwgy/SEJ3BWEnRxEaxUpC38muUpiU4ZdM=
Subject key identifier: 2F:A1:25:84:D7:5C:32:A6:7E:18:7F:60:27:2A:2A:26:3F:EF:C4:77
Certificate issuer: /CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Certificate serial: D3C6
Authority key identifier: D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/L6ElhNdcMqZ-GH9gJyoqJj_vxHc.roa
Signing time: Wed 04 May 2022 13:43:31 +0000
ROA not before: Wed 04 May 2022 13:43:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205797
IP address blocks: 185.205.90.0/24 maxlen: 24
185.205.89.0/24 maxlen: 24
185.205.88.0/24 maxlen: 24
185.205.88.0/22 maxlen: 22
185.205.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54214 (0xd3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4e015ec01da6ae7d84916fd1ad4caa904dc4e
Validity
Not Before: May 4 13:43:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa12584d75c32a67e187f60272a2a263fefc477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:70:09:af:da:76:15:6c:83:19:dc:5e:61:
31:36:4f:e4:21:3b:f1:a2:51:20:1a:bd:e1:40:ec:
ef:d8:46:1b:5c:31:0f:27:16:e3:56:a7:3f:0c:8e:
7f:66:6a:57:0c:58:ea:6a:5b:8a:1a:3b:53:f9:0c:
01:f6:06:e5:4f:ee:b8:bf:70:ce:83:32:44:cc:2e:
b6:fc:52:f1:26:7a:38:dd:96:d9:58:41:d4:e8:33:
dd:b7:95:24:08:51:ec:05:5d:64:01:00:c8:03:a5:
6d:82:0d:49:4a:62:8f:a6:45:b8:dd:f7:c4:f5:dd:
96:ac:77:05:e5:c6:1e:2c:13:6c:95:ec:90:b8:0a:
53:71:0f:44:9c:9e:73:04:b9:0c:a0:93:bc:e0:5e:
c3:03:60:bb:3d:4f:1b:f0:80:78:3c:27:15:c9:f5:
08:74:c3:c2:26:77:0d:be:19:10:0e:9e:74:da:bf:
b4:b9:f1:af:ef:ee:f2:ed:e5:36:4f:b8:fe:cf:29:
37:48:30:c4:8f:4b:bc:77:02:c4:43:f3:df:7b:12:
44:89:24:99:ec:73:0a:70:6c:0e:68:97:23:e6:67:
91:99:b9:f0:c6:48:22:e9:ec:a2:db:a5:97:6f:17:
49:06:21:e2:05:58:ba:b1:de:f7:0a:7c:10:95:f4:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:25:84:D7:5C:32:A6:7E:18:7F:60:27:2A:2A:26:3F:EF:C4:77
X509v3 Authority Key Identifier:
keyid:D4:E4:E0:15:EC:01:DA:6A:E7:D8:49:16:FD:1A:D4:CA:A9:04:DC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OTgFewB2mrn2EkW_RrUyqkE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/L6ElhNdcMqZ-GH9gJyoqJj_vxHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bdd87c-a6d9-4bc2-9d87-0a812bb18f35/1/1OTgFewB2mrn2EkW_RrUyqkE3E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.88.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:2d:26:97:fc:21:19:38:ef:0d:9e:93:25:fe:1b:ea:f3:3c:
8e:36:8c:e2:50:5b:3f:b2:f7:55:a6:53:a9:59:93:df:18:bb:
b6:57:60:62:74:0b:83:be:1c:7a:8d:f4:8e:fd:87:2a:52:4d:
37:2d:52:39:be:a4:c0:b0:5d:bf:0b:66:95:8c:d6:f6:c1:ce:
da:c8:08:bc:b3:52:f7:7d:fd:6a:51:43:94:23:cc:d3:a4:5c:
7f:1b:f4:d7:6a:d8:d8:fe:7a:5f:a4:05:9a:ab:62:4d:e8:e2:
95:d5:2c:0f:69:0d:99:a0:17:de:09:34:0d:ff:36:c6:ab:80:
ab:2a:0b:f0:9b:e9:86:dd:70:db:ed:5b:e3:ea:18:72:40:1f:
65:68:10:f6:cf:d3:e3:3a:48:98:60:cd:52:d1:67:b5:08:b3:
5b:ac:37:b9:54:dc:9d:71:b8:a1:61:d9:e8:08:d0:f4:6c:f4:
58:c5:0f:46:38:48:e6:3d:97:72:86:1b:64:8d:7f:e5:4d:2c:
38:19:6e:ec:c5:4a:97:a6:89:7c:d2:ac:ba:6d:12:a6:60:7e:
85:02:e8:46:ce:9b:ad:92:81:cd:40:36:ae:c7:5a:b8:16:02:
3f:6f:50:19:93:f6:fa:50:47:d6:6b:a4:85:dc:52:0a:54:62:
b2:ce:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:45 2024 by rpki-client on console-ams.rpki-client.org