Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/cahL0URoQK5-tPC38lKkEZEydJg.roa
File: cahL0URoQK5-tPC38lKkEZEydJg.roa (raw, json)
Hash identifier: JARqwxv+nDMFtdgeGqrxgraZlhRbuafnsUaix1Wa3OU=
Subject key identifier: 71:A8:4B:D1:44:68:40:AE:7E:B4:F0:B7:F2:52:A4:11:91:32:74:98
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 05461D9E
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/cahL0URoQK5-tPC38lKkEZEydJg.roa
Signing time: Sat 01 Jan 2022 07:03:21 +0000
ROA not before: Sat 01 Jan 2022 07:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35445
IP address blocks: 85.188.128.0/18 maxlen: 18
85.188.64.0/18 maxlen: 18
2001:67c:191c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88481182 (0x5461d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Jan 1 07:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71a84bd1446840ae7eb4f0b7f252a41191327498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:58:37:25:dd:4b:7a:9d:86:24:af:1c:45:
55:31:9b:44:d7:22:fe:66:af:74:2e:8b:04:a5:e7:
63:b3:59:dd:4a:ce:f9:35:af:b3:26:6e:5e:62:d6:
79:13:c4:c3:95:ab:2b:81:9e:f0:92:00:89:8d:3f:
f1:04:aa:ba:71:93:04:1a:af:36:e8:2e:e5:23:95:
65:1b:14:aa:0f:ae:ea:d1:b7:bf:6b:82:9b:b4:32:
e8:6b:50:fa:85:d0:71:43:07:b3:58:25:e0:6b:77:
10:85:2e:98:c3:38:06:3a:88:0c:f0:fc:be:ef:f0:
a8:5b:19:3c:80:d1:eb:79:8f:44:97:90:2a:84:cf:
70:01:0b:e0:22:ba:ec:13:f6:24:52:0d:61:99:ad:
0d:45:81:4e:d0:0a:52:e0:17:cd:7a:41:2f:5f:d1:
6b:c6:1b:c8:48:6c:99:cd:2d:0b:4c:b1:31:0d:cb:
de:c1:59:83:ec:72:2b:78:59:db:cd:46:9c:e1:07:
95:40:c5:a2:04:fc:69:fc:e6:64:6c:fa:f1:84:cf:
5f:33:01:db:8d:37:74:d7:87:07:ca:15:fb:95:c8:
ac:22:64:57:e6:f9:08:1a:85:5a:83:13:50:df:dd:
f6:62:7f:0c:3b:4a:52:3d:16:a1:28:0a:79:51:50:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:4B:D1:44:68:40:AE:7E:B4:F0:B7:F2:52:A4:11:91:32:74:98
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/cahL0URoQK5-tPC38lKkEZEydJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.188.64.0-85.188.191.255
IPv6:
2001:67c:191c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:b9:7b:0b:b7:cb:f1:67:43:69:c5:de:cf:d7:0d:8f:5b:bf:
e7:83:75:b7:9b:96:a0:cb:6e:fa:20:86:8b:cc:fb:5b:9a:ff:
4f:18:82:b3:7c:64:b0:da:a0:07:97:3b:ed:94:e7:1e:25:04:
90:71:7a:5e:2a:af:99:c4:b7:35:bf:81:a4:cb:3e:30:2d:d2:
5b:7a:e1:22:df:e9:72:6b:ca:4b:73:fb:79:ad:30:80:a2:dc:
b8:24:7e:c5:ce:20:f6:15:fb:e8:26:35:54:c0:03:0c:2f:03:
29:14:ba:d4:b9:22:fe:96:af:dc:a9:90:53:66:b6:a7:f4:5a:
25:52:d7:3f:4c:4f:be:1c:38:39:b5:e9:f0:88:46:05:f1:a2:
d9:7b:69:ad:a0:5e:3c:68:6c:e9:e2:fd:20:8e:63:f7:69:ff:
b3:91:c2:7c:bc:18:5f:ab:a0:63:36:09:2a:01:12:31:99:b4:
ad:39:15:42:e2:2e:5e:55:a0:04:66:69:c1:5f:6a:09:58:61:
21:ec:9f:ad:51:1f:95:1d:df:ce:45:90:52:21:96:60:ac:29:
c4:40:13:9f:13:b9:9f:67:d3:b0:7d:ea:c2:00:ce:8f:38:e9:
68:50:1c:0d:c7:ec:a7:bf:0a:bc:e8:9f:37:57:d2:ba:51:5d:
0a:0d:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:13 2024 by rpki-client on console-fra.rpki-client.org