Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/FFOfnd8CHjJkfqRUsyT-MmuoJgc.roa
File: FFOfnd8CHjJkfqRUsyT-MmuoJgc.roa (raw, json)
Hash identifier: 3Sh29u9HaetvjxyHtIdXOgLTtlwpi9RkEufQoKnSfoA=
Subject key identifier: 14:53:9F:9D:DF:02:1E:32:64:7E:A4:54:B3:24:FE:32:6B:A8:26:07
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 0657258C
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/FFOfnd8CHjJkfqRUsyT-MmuoJgc.roa
Signing time: Sat 01 Jan 2022 00:54:22 +0000
ROA not before: Sat 01 Jan 2022 00:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.93.174.0/24 maxlen: 24
188.116.51.0/24 maxlen: 24
188.116.50.0/24 maxlen: 24
2a0a:7180:80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106374540 (0x657258c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Jan 1 00:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14539f9ddf021e32647ea454b324fe326ba82607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:70:e4:1f:9a:e5:bf:d5:4a:68:e4:5e:96:
17:15:19:9c:2a:3e:24:14:1a:6a:cc:13:72:2b:fc:
51:59:82:33:b3:ca:1c:f3:bb:01:a4:8a:49:ad:b6:
31:70:0b:8e:d8:d1:b3:54:43:95:fb:73:07:ac:ea:
eb:30:b4:c4:49:53:89:a3:56:48:91:51:a9:47:8a:
40:1b:df:4f:c1:37:d4:6b:ce:d1:10:46:35:91:06:
1d:ee:eb:61:97:c1:17:d3:e0:d2:bc:0f:84:56:c2:
96:86:27:24:db:b2:60:72:ea:ce:26:17:e4:0b:6b:
43:8f:1b:a2:96:8b:c2:5e:ee:20:47:86:c1:41:4e:
a7:c0:b6:bc:0d:59:b4:bf:29:18:9d:2b:5d:79:05:
cb:4f:06:10:c1:c5:83:58:f7:fb:06:8e:18:a7:f0:
6e:a7:15:45:5a:48:41:dd:3d:e4:7d:aa:3d:14:f4:
8d:d4:7c:d4:40:92:28:23:ea:15:d4:5b:97:af:c9:
5d:2e:0b:d5:df:1a:d6:f8:7e:5a:49:2e:6e:fb:fb:
3c:7f:69:83:b5:30:00:10:b2:2d:3f:d9:8e:f0:5f:
0a:0a:f9:33:30:32:6e:98:de:c7:78:93:8a:37:cd:
94:d6:39:aa:9e:29:92:06:c7:a4:57:fb:71:6e:da:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:9F:9D:DF:02:1E:32:64:7E:A4:54:B3:24:FE:32:6B:A8:26:07
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/FFOfnd8CHjJkfqRUsyT-MmuoJgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.174.0/24
188.116.50.0/23
IPv6:
2a0a:7180:80::/48
Signature Algorithm: sha256WithRSAEncryption
34:76:3e:33:ab:03:75:ae:54:70:67:dd:42:df:9f:08:f1:31:
3d:84:a1:ba:fc:be:87:ab:3e:e4:69:b5:3c:fa:5f:05:13:78:
c0:03:49:69:04:6a:0a:7a:4a:37:4a:56:4e:09:35:18:05:ee:
a2:f3:0d:0c:cc:a6:b8:a9:04:97:b7:aa:99:27:1f:81:54:6b:
3b:ed:7f:a9:26:15:18:54:97:8b:59:1e:92:c0:d5:03:09:c4:
72:ee:2a:ee:dc:48:dd:a7:c7:8f:c2:7c:6b:b5:cd:3f:9f:41:
42:c5:c6:56:8f:e1:c3:05:50:bd:61:2a:88:57:05:bb:ce:56:
22:1c:a3:31:38:9b:a1:b5:64:40:73:a1:dd:c2:92:e8:48:ac:
f1:d2:1d:30:6e:c0:7f:d4:24:95:bf:6f:da:c8:eb:2a:ab:d7:
e6:fd:0f:12:00:51:63:03:47:71:f3:04:73:0f:6d:fb:ca:89:
c2:15:85:5e:5e:f7:e0:1c:c1:c2:89:16:0c:8d:be:14:ea:85:
7e:54:c4:83:1f:97:6e:c5:fe:5f:ea:88:93:f7:aa:a0:cd:70:
0f:93:46:13:8e:c1:d9:7c:b8:09:56:33:21:ce:ef:94:36:72:
0a:ad:71:43:8f:95:df:b1:b5:b7:30:e9:8f:9f:b2:14:65:2f:
8d:1c:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:48 2024 by rpki-client on console-fra.rpki-client.org