Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/T6orjF_J0zLTl_B8nHWINTaMbf0.roa
File: T6orjF_J0zLTl_B8nHWINTaMbf0.roa (raw, json)
Hash identifier: jrlrsDafJdoWuGv9hZnvoOk/bSHurSgTxkcBsHrgM2A=
Subject key identifier: 4F:AA:2B:8C:5F:C9:D3:32:D3:97:F0:7C:9C:75:88:35:36:8C:6D:FD
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 13D656D0
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/T6orjF_J0zLTl_B8nHWINTaMbf0.roa
Signing time: Sat 01 Jan 2022 11:56:35 +0000
ROA not before: Sat 01 Jan 2022 11:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24800
IP address blocks: 185.96.88.0/22 maxlen: 22
185.108.252.0/22 maxlen: 22
185.108.108.0/22 maxlen: 22
185.109.76.0/22 maxlen: 22
185.109.88.0/22 maxlen: 22
185.107.168.0/22 maxlen: 22
185.96.180.0/22 maxlen: 22
185.107.176.0/22 maxlen: 22
185.109.12.0/22 maxlen: 22
185.108.100.0/22 maxlen: 22
185.109.64.0/22 maxlen: 22
2a00:4020::/32 maxlen: 32
2a00:4820::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332814032 (0x13d656d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Jan 1 11:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4faa2b8c5fc9d332d397f07c9c758835368c6dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:63:0b:ff:66:37:60:86:59:4c:1b:76:80:
39:15:65:c9:ed:be:36:d5:d7:8a:01:a6:b4:0d:d2:
35:51:21:1f:67:08:1d:53:84:d7:1d:28:7c:c7:2a:
dc:50:1f:ca:7e:01:1b:d0:38:6a:f3:eb:94:5e:77:
12:00:02:ca:7e:b9:f1:7c:d1:1f:af:72:b8:af:63:
04:a6:2f:66:31:11:ef:be:4d:1f:3b:a9:a2:d1:6b:
50:89:f8:fc:ca:fb:ce:87:6f:34:bb:46:cb:96:e7:
dc:06:00:05:9e:9e:f3:44:72:66:f1:fa:9a:59:f6:
e2:fa:e9:3e:cb:da:47:f3:5a:d4:c4:4e:e0:00:0d:
4d:9b:9a:15:a6:6e:5b:96:08:c0:9f:40:8e:57:88:
59:0e:13:c3:18:0b:5f:1c:42:bd:a2:f9:0a:e5:71:
e8:ab:99:66:d7:15:4c:95:fb:c2:4d:f7:f4:bf:73:
75:5b:7a:c9:de:f1:d1:26:52:18:89:62:c8:8d:df:
31:d7:ef:c0:66:f3:ce:b1:32:86:f4:40:69:7b:0b:
09:49:d3:54:e7:76:cc:3f:6c:d7:1d:61:ce:ec:b4:
8a:2b:e4:a2:3c:b2:04:53:4d:bb:d7:dc:83:0f:7d:
c2:aa:95:28:07:ae:11:44:b3:79:ad:65:4b:7d:ff:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:2B:8C:5F:C9:D3:32:D3:97:F0:7C:9C:75:88:35:36:8C:6D:FD
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/T6orjF_J0zLTl_B8nHWINTaMbf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.88.0/22
185.96.180.0/22
185.107.168.0/22
185.107.176.0/22
185.108.100.0/22
185.108.108.0/22
185.108.252.0/22
185.109.12.0/22
185.109.64.0/22
185.109.76.0/22
185.109.88.0/22
IPv6:
2a00:4020::/32
2a00:4820::/32
Signature Algorithm: sha256WithRSAEncryption
a7:08:11:85:57:3e:b4:57:81:8d:52:80:32:4f:eb:f8:a9:d5:
10:ec:29:22:ae:10:85:6e:8a:7d:28:a0:13:13:40:0b:20:79:
c8:c5:87:9a:44:8e:df:97:fa:3d:04:88:92:73:88:7e:a2:b3:
79:51:f2:ec:7f:a6:b5:c2:9f:12:fb:10:0b:50:2d:be:58:4a:
f8:7b:e0:33:f5:32:1e:2b:9c:ba:75:20:d3:1c:1a:6f:fe:29:
91:c1:03:cf:d9:b4:f7:1a:21:4f:8f:56:a6:25:07:31:31:ae:
f9:ec:0b:db:76:ac:7a:20:a1:cf:1d:46:bf:c7:c9:fc:6b:d0:
79:d4:2a:50:e6:19:bf:88:0a:1f:90:0a:97:c8:13:05:6b:ed:
14:10:52:bf:cd:09:8c:71:2f:5b:98:a9:1c:92:ef:83:fb:ce:
8a:47:d6:4f:3d:81:b8:f5:80:81:43:f0:dd:31:4a:45:78:f4:
91:48:95:d7:92:c9:71:32:22:0c:21:8a:68:4f:29:9a:5d:4e:
32:ef:84:fe:77:63:12:4f:5e:d5:81:bd:d9:79:bb:3c:10:28:
0a:45:1f:24:7f:ac:39:32:0e:33:8c:3f:16:3d:33:20:c9:1b:
4f:b5:22:21:5d:a8:46:00:cd:9c:c2:10:35:ac:ec:4d:09:49:
52:64:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:43 2024 by rpki-client on console-ams.rpki-client.org