Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/rh8h0dGuLGQ1qLvOCWAwJXR0GEI.roa
File: rh8h0dGuLGQ1qLvOCWAwJXR0GEI.roa (raw, json)
Hash identifier: M2WmPJEvBdgXVfrp81TK8iXQM+8eSECxvORLNtpKBcc=
Subject key identifier: AE:1F:21:D1:D1:AE:2C:64:35:A8:BB:CE:09:60:30:25:74:74:18:42
Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial: 1718E7DF
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/rh8h0dGuLGQ1qLvOCWAwJXR0GEI.roa
Signing time: Sat 01 Jan 2022 02:53:26 +0000
ROA not before: Sat 01 Jan 2022 02:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2635
IP address blocks: 185.64.140.0/22 maxlen: 24
2a04:fa80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387508191 (0x1718e7df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Validity
Not Before: Jan 1 02:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae1f21d1d1ae2c6435a8bbce0960302574741842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:aa:af:81:a8:e2:ce:a5:fe:a4:5f:ac:eb:
d8:b6:cc:d0:7b:8e:66:8e:0b:fd:58:32:cb:8d:a5:
f0:cb:77:ee:50:3d:45:62:57:a4:34:9b:be:3e:5c:
53:e2:04:04:d2:c4:98:dd:e9:d3:19:79:af:c8:c0:
ac:84:15:41:36:89:31:24:47:51:22:cf:c4:2d:6d:
cb:a4:4c:f7:fc:10:31:ec:a8:32:b1:a2:cf:5a:8c:
5e:2c:43:f8:7c:43:d7:0d:38:f5:6b:3f:30:91:40:
74:a9:5d:5a:dd:a5:b9:b3:dc:28:73:d4:a3:96:51:
d3:9b:82:c9:1a:ba:a0:b5:e1:8b:34:74:ae:39:81:
14:a8:e3:84:66:dd:c8:c4:c6:b4:36:28:07:91:fb:
33:ad:21:a2:8e:9e:b3:c5:c2:dd:62:ab:c7:8d:25:
74:9f:a3:93:5a:f2:6d:d9:c5:6c:72:f8:d0:78:b9:
1c:f5:90:a3:a4:cf:7b:1e:22:ff:13:1c:91:e7:a7:
70:54:8c:94:42:44:1e:14:3e:6f:71:4f:7a:31:07:
7f:7f:0d:f3:1b:d4:c4:da:fd:5c:7e:8e:9e:c5:29:
8b:47:98:cd:be:b8:a1:69:85:be:8d:59:12:e9:46:
f4:83:fc:8d:7d:a2:26:76:72:2e:4e:61:fc:34:ef:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:21:D1:D1:AE:2C:64:35:A8:BB:CE:09:60:30:25:74:74:18:42
X509v3 Authority Key Identifier:
keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/rh8h0dGuLGQ1qLvOCWAwJXR0GEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.140.0/22
IPv6:
2a04:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:03:aa:8d:d2:ab:a3:5f:7c:37:f4:51:72:33:b1:44:d2:6d:
93:e5:af:58:c5:d6:fc:64:d3:90:81:4b:b4:5a:09:ba:9d:bb:
dc:63:41:b7:ed:72:8c:4c:45:e0:9a:63:90:0d:80:32:8c:a9:
54:01:e1:7a:ba:d9:c9:11:03:fd:86:87:00:8f:87:dd:ab:18:
82:37:37:73:96:88:8a:22:9b:2f:58:93:74:cd:dc:88:7e:05:
b2:f6:32:b3:cd:7c:59:c2:a6:39:8c:1e:73:a5:6b:d0:e3:a4:
e5:c1:45:91:1c:39:d2:e5:75:c0:da:ea:8d:97:96:f8:f7:79:
b3:bf:f5:99:29:1c:73:f7:fb:19:54:8f:06:f8:32:5d:06:8b:
c9:18:d5:49:dd:43:28:fb:77:43:ba:c6:49:d5:2a:28:02:1f:
87:b2:99:89:d3:33:75:86:f2:c9:37:78:46:07:ea:a2:e8:d1:
93:fd:21:3b:b5:df:57:36:6f:19:32:e0:ff:f1:c2:91:0f:4d:
5a:37:6b:9a:fa:65:8f:8c:c4:81:cd:68:91:0e:03:42:56:42:
fc:87:cd:9f:cf:0b:a7:98:00:43:75:62:16:46:0b:e1:a0:87:
58:ac:98:08:fe:8a:3b:7d:59:8e:d9:bb:5d:99:be:fc:44:54:
eb:ea:ab:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org