Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/a0P89BOYI1wCJ3JDxClJ9YCLIHo.roa
File: a0P89BOYI1wCJ3JDxClJ9YCLIHo.roa (raw, json)
Hash identifier: SAemOOJEHF50cQViWRYFSoOeo3Zmiv4Me6gtq0IMqz0=
Subject key identifier: 6B:43:FC:F4:13:98:23:5C:02:27:72:43:C4:29:49:F5:80:8B:20:7A
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: F10F
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/a0P89BOYI1wCJ3JDxClJ9YCLIHo.roa
Signing time: Mon 28 Feb 2022 09:06:35 +0000
ROA not before: Mon 28 Feb 2022 09:06:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199811
IP address blocks: 185.210.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61711 (0xf10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Feb 28 09:06:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b43fcf41398235c02277243c42949f5808b207a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:f4:dd:b4:85:ea:fe:62:f6:9c:fa:af:67:
ca:e3:24:82:a4:b1:84:c1:17:35:66:8b:83:11:4e:
a5:ea:5d:b6:46:a9:2f:82:42:98:86:81:71:9d:7d:
d0:65:11:5e:5f:b3:c8:54:b8:0d:8b:91:49:6f:a8:
df:32:5a:7d:67:30:94:4a:cd:ae:75:0d:88:fc:1a:
fa:5b:76:2c:e5:87:b9:c2:b7:a4:9e:95:f9:29:6f:
c5:23:df:7e:c3:02:5f:41:b6:32:3e:33:89:95:33:
42:7b:11:cd:cc:dc:d8:ef:8c:71:4a:b5:af:98:69:
52:53:80:b4:df:42:f0:22:2c:29:a8:98:3f:f9:8c:
4d:ba:e4:49:79:77:64:16:60:a1:61:20:fd:2f:1a:
ed:24:e9:ec:65:95:0f:e7:47:5a:30:94:ec:33:e8:
75:af:98:0d:8c:fc:3e:67:92:7a:a4:8c:d5:65:e1:
21:65:e9:0e:7f:9d:ed:d6:41:8f:9d:74:63:43:a4:
db:78:d2:9c:e8:c3:cf:bb:5b:4f:f2:5a:33:01:a9:
a7:f4:69:96:36:7d:7e:08:30:b7:c7:b5:75:de:33:
5f:d9:92:0c:b8:6e:fa:60:e3:2a:b1:0f:cd:d6:2b:
0a:d5:a6:87:48:46:00:d7:e8:96:ce:e0:b5:d3:0e:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:43:FC:F4:13:98:23:5C:02:27:72:43:C4:29:49:F5:80:8B:20:7A
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/a0P89BOYI1wCJ3JDxClJ9YCLIHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.64.0/22
Signature Algorithm: sha256WithRSAEncryption
41:6a:12:ad:f3:f9:24:06:e3:31:04:4b:5a:57:9d:23:c3:61:
18:8e:77:f4:3a:9c:e7:cd:eb:f2:5a:c8:93:f8:ca:74:5f:ba:
e7:eb:87:9c:99:02:93:75:b9:44:49:d1:ba:75:e1:7c:c8:eb:
70:e1:56:96:7c:ba:7f:e7:7e:99:b7:a8:1a:66:dc:2b:1f:b4:
b8:a3:c6:82:0a:c1:41:e2:15:99:c3:6e:d2:a4:21:33:b8:31:
e9:2f:86:d9:23:35:17:2d:67:d8:f1:f2:ea:45:3d:81:a1:c3:
af:8f:94:32:61:8e:a0:c4:f3:11:30:86:02:ec:25:49:a9:d9:
a1:1b:e3:e1:76:7a:1e:98:a5:dc:24:92:b5:df:5c:c2:bf:a4:
d5:e5:1d:54:99:d6:f2:5d:48:d5:48:1f:07:0b:06:19:0c:58:
a9:9f:da:d2:59:28:a7:43:db:91:51:23:78:22:e5:c5:84:5a:
2f:5a:ba:b9:5f:a1:cb:92:24:4d:23:49:38:b6:6c:38:2f:d1:
02:27:91:d8:02:a2:2a:ec:68:59:16:8e:5e:49:09:23:9d:92:
09:74:7b:21:53:76:aa:cc:b0:c7:f3:c5:cb:5b:53:df:a6:0b:
f0:db:d6:f1:48:24:07:ff:b2:38:65:08:70:2f:e6:8a:ea:dd:
b2:86:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:02 2024 by rpki-client on console-ams.rpki-client.org