Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/JXv7a1qRdzdh16SEzyqK-W-FCXo.roa
File: JXv7a1qRdzdh16SEzyqK-W-FCXo.roa (raw, json)
Hash identifier: JrNy2/vhmPR8k/VVLLyHsgLPNLEBXDNMeUXFkilTPfY=
Subject key identifier: 25:7B:FB:6B:5A:91:77:37:61:D7:A4:84:CF:2A:8A:F9:6F:85:09:7A
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 01CACBF5
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/JXv7a1qRdzdh16SEzyqK-W-FCXo.roa
Signing time: Sat 01 Jan 2022 11:04:48 +0000
ROA not before: Sat 01 Jan 2022 11:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206893
IP address blocks: 185.172.230.0/24 maxlen: 24
185.172.229.0/24 maxlen: 24
185.172.231.0/24 maxlen: 24
185.172.228.0/24 maxlen: 24
2a0b:81c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30067701 (0x1cacbf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Jan 1 11:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257bfb6b5a91773761d7a484cf2a8af96f85097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:ff:03:e9:92:3a:6e:f1:8d:88:9d:90:bb:
38:1e:48:3a:a7:90:9a:0f:41:4e:dc:5d:6a:b2:06:
3f:e2:ac:8d:63:1d:44:6a:f9:29:8b:b3:4a:7b:50:
11:57:ab:d3:9a:41:bb:05:38:42:f8:0a:ab:eb:cb:
c8:b9:11:f7:0f:15:c5:08:58:1c:fb:e5:1d:da:4c:
8c:e2:54:9a:c7:bb:10:56:8e:83:64:4f:b7:ba:ab:
ad:aa:6e:43:a1:af:59:5f:21:65:f0:1b:7b:c9:1d:
fe:8d:21:4d:7a:db:40:42:7d:51:83:2a:19:1c:a8:
50:ae:10:68:4c:bc:13:fa:2c:2d:c8:e3:9a:ad:82:
0b:8f:0d:67:a6:c2:7b:ba:3d:d9:fa:c6:05:3c:41:
db:13:12:12:8c:f6:a5:23:dc:a6:62:8d:96:23:3e:
d0:64:8b:be:82:dd:74:5c:a1:1c:71:13:d9:7e:27:
69:36:cc:01:0c:49:c2:4c:a1:bc:af:55:dd:32:15:
55:41:58:3a:bd:b6:81:7d:44:e3:42:c6:15:eb:78:
d5:95:f6:af:dd:7b:a7:24:8d:35:1d:af:00:d5:57:
46:10:7f:cd:bc:0e:67:fc:59:10:fb:b4:03:36:7f:
fc:97:03:0c:c1:8f:2a:9b:e9:5e:24:bf:33:be:9c:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7B:FB:6B:5A:91:77:37:61:D7:A4:84:CF:2A:8A:F9:6F:85:09:7A
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/JXv7a1qRdzdh16SEzyqK-W-FCXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.228.0/22
IPv6:
2a0b:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:c1:b2:fb:38:49:6e:05:10:da:93:b3:b1:78:db:60:55:7e:
2c:d3:76:b5:17:36:12:6e:db:ee:f7:41:c3:7d:36:5a:56:c1:
51:16:36:eb:51:91:d7:b9:44:ef:80:6e:4b:93:40:bc:15:28:
09:06:f6:d0:52:84:d9:7d:37:42:f3:e2:5a:d6:3d:c3:b4:c8:
74:2f:09:14:cf:dd:56:df:85:1b:78:e9:71:5d:1d:69:f3:87:
45:83:d8:18:06:1f:3c:78:6e:ba:0a:59:2d:fc:d7:68:59:a8:
f9:d8:ee:14:f6:1f:6f:ef:bf:f5:04:05:47:7a:2c:ec:a0:cc:
dc:c8:34:db:8c:ac:8c:11:f5:d1:95:25:52:65:14:d0:9b:3e:
ba:99:eb:bf:45:6f:89:da:3e:70:5b:03:1c:47:56:f4:ca:17:
61:00:82:94:7c:41:d4:74:26:be:60:d6:ba:fc:3a:7b:26:f6:
86:f3:36:c1:c8:5c:fc:c9:e3:08:d6:dd:4b:6d:d9:21:26:a7:
2b:02:68:21:56:26:85:c7:59:99:73:b3:fa:75:2f:22:84:c2:
c4:11:cb:4b:d0:36:12:5e:a5:ab:99:4e:55:42:48:7b:47:65:
8b:51:db:15:ba:3e:b4:41:27:8e:a2:50:c0:de:a2:23:36:00:
ef:cd:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:44 2024 by rpki-client on console-fra.rpki-client.org