Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2f9yuKztm5S3ExQtj05R_Zs8AcM.roa
File: 2f9yuKztm5S3ExQtj05R_Zs8AcM.roa (raw, json)
Hash identifier: hkKxEDO5YFutfHtWEVi1tRmKy3BdW7TC4td5junqInA=
Subject key identifier: D9:FF:72:B8:AC:ED:9B:94:B7:13:14:2D:8F:4E:51:FD:9B:3C:01:C3
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 9BADF3
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2f9yuKztm5S3ExQtj05R_Zs8AcM.roa
Signing time: Tue 04 Jan 2022 08:35:47 +0000
ROA not before: Tue 04 Jan 2022 08:35:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51938
IP address blocks: 185.54.96.0/22 maxlen: 22
185.54.98.0/24 maxlen: 24
185.54.96.0/24 maxlen: 24
185.54.97.0/24 maxlen: 24
185.54.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10202611 (0x9badf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Jan 4 08:35:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9ff72b8aced9b94b713142d8f4e51fd9b3c01c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:9f:29:40:18:38:7f:c0:bb:91:62:fb:27:
c6:05:76:5c:da:3f:eb:2b:f9:e6:04:75:36:ef:46:
e7:bb:02:d5:ba:f4:c6:12:97:ca:5b:43:19:df:d8:
1a:48:0a:07:e9:20:d1:22:d6:a7:a4:19:9a:50:f1:
48:c5:d3:f1:1f:44:e6:38:05:70:17:a5:fc:f3:32:
13:da:b2:53:f6:8c:46:b4:db:23:f1:b5:26:4a:39:
74:a9:a3:b1:7c:4b:57:4b:c7:9f:ba:71:a4:e4:db:
48:00:71:a3:b2:68:9a:e0:24:4a:9d:b9:6e:8a:90:
10:2b:f2:35:86:2b:0d:26:58:be:f6:08:84:aa:8e:
4d:6a:96:81:d7:68:00:60:52:e9:d4:85:9d:d4:4b:
75:3c:fb:66:08:2b:b6:89:fb:f4:c4:3d:da:f4:95:
f4:2d:ef:01:1c:ca:c3:50:4a:51:be:ef:f1:c2:d9:
af:0e:b3:e2:29:6d:fd:e9:9a:75:68:80:d5:83:fa:
75:b2:19:4d:0b:9d:c4:47:b6:09:51:9c:fd:28:c6:
18:63:f8:d9:8a:f6:14:a1:35:53:d6:ed:c1:cf:8c:
23:1d:38:d4:e3:63:08:90:8e:50:3c:dd:89:83:7e:
10:58:4c:6b:50:91:ed:17:58:7f:74:9f:d7:2b:9b:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:72:B8:AC:ED:9B:94:B7:13:14:2D:8F:4E:51:FD:9B:3C:01:C3
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/2f9yuKztm5S3ExQtj05R_Zs8AcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.96.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b0:43:98:52:38:06:68:50:54:05:c3:ed:8e:d0:81:9b:b5:
e7:07:9e:02:6c:b0:15:1b:5e:92:f9:ae:c9:f2:35:57:9c:69:
45:01:c1:2a:6b:59:50:39:f7:0c:56:8e:a6:d8:0d:b2:09:22:
7b:1a:43:20:e2:8c:e6:f9:1f:97:dd:1a:a5:a5:71:92:bc:7a:
59:c5:77:b7:c5:be:fe:fd:56:d0:72:da:4e:8b:18:36:7b:f1:
30:94:c5:b4:6e:91:45:2b:a3:6b:45:bb:58:02:08:1a:03:09:
c3:26:d9:c2:00:e0:38:d5:29:3e:e7:e3:80:cc:73:b2:78:46:
31:9f:b9:e8:70:ac:57:6e:eb:36:3e:ad:4d:9c:00:ce:6f:e0:
1c:62:de:d9:05:0d:54:ae:6c:73:a5:a7:31:c5:d9:71:8d:0d:
46:92:57:ba:64:fc:2a:30:e8:97:87:55:09:20:9d:11:d6:e9:
e9:72:d0:60:01:6a:47:b6:2f:9b:55:af:1e:20:62:7e:8d:09:
b4:b5:d9:80:57:72:ac:56:08:36:8f:b0:6a:fb:24:f4:8b:28:
93:7f:7e:fd:9e:0b:c9:c7:b2:c4:3c:ef:71:5d:de:da:51:a9:
af:8c:2d:61:0f:11:3c:b1:c9:b7:0b:4d:d6:cd:65:c6:a6:1c:
9c:4c:30:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org