Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/hcF8OOVbP9_9Ad6fyiy2OJ_yhAA.roa
File: hcF8OOVbP9_9Ad6fyiy2OJ_yhAA.roa (raw, json)
Hash identifier: YkP6dKMgIF1wzUvGr5zztj8sQeGNT0bW0VMlMFghRQE=
Subject key identifier: 85:C1:7C:38:E5:5B:3F:DF:FD:01:DE:9F:CA:2C:B6:38:9F:F2:84:00
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01855388F292983C7385302A9CC9B52DB189
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/hcF8OOVbP9_9Ad6fyiy2OJ_yhAA.roa
Signing time: Tue 27 Dec 2022 12:22:41 +0000
ROA not before: Tue 27 Dec 2022 12:22:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39878
IP address blocks: 45.67.168.0/22 maxlen: 22
185.196.240.0/22 maxlen: 22
185.87.238.0/23 maxlen: 23
185.87.237.0/24 maxlen: 24
91.135.160.0/20 maxlen: 20
185.33.8.0/22 maxlen: 22
2a04:40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:88:f2:92:98:3c:73:85:30:2a:9c:c9:b5:2d:b1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Dec 27 12:22:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85c17c38e55b3fdffd01de9fca2cb6389ff28400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:77:e4:fa:aa:4f:4d:a1:e0:59:e4:1c:c8:
60:65:e1:79:ca:eb:87:a7:cb:33:1f:a2:46:47:a0:
b8:85:f7:11:ec:2a:8a:43:40:08:e2:c2:27:69:cc:
cb:ca:1f:d8:e4:cd:21:1a:ee:77:a4:fe:4b:b6:77:
8b:22:a3:ba:fc:60:1d:98:51:54:c0:6e:96:c0:f6:
83:08:d9:1f:3d:12:85:31:dc:9a:c2:42:4a:54:f4:
19:2e:7a:72:0d:7c:7a:3b:e1:41:6c:70:ac:12:9d:
55:fd:ac:18:37:1f:46:e7:04:91:3e:2b:1d:73:8e:
ef:6a:85:75:c4:ed:b4:6a:37:36:b0:33:cf:bc:88:
8b:88:45:10:d3:28:18:61:ef:e4:a6:e7:31:e5:21:
e5:76:f0:b1:63:76:23:62:bd:e1:aa:3f:0c:32:5e:
84:bd:9b:b3:3b:04:35:99:9c:89:ee:5d:11:1d:6c:
a6:99:7e:c4:7c:67:cf:cd:9c:b8:6e:16:b6:81:e0:
64:1d:e8:95:dc:3e:ce:d9:a0:e1:df:92:56:97:d5:
31:38:3b:f6:77:37:9e:c1:26:8d:d0:d8:26:96:7b:
cc:f6:03:3f:0d:0e:55:6d:a1:1c:fd:45:09:fc:30:
3e:06:8b:8d:c9:e2:68:49:53:ce:42:4c:2c:a1:7a:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:7C:38:E5:5B:3F:DF:FD:01:DE:9F:CA:2C:B6:38:9F:F2:84:00
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/hcF8OOVbP9_9Ad6fyiy2OJ_yhAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.168.0/22
91.135.160.0/20
185.33.8.0/22
185.87.237.0-185.87.239.255
185.196.240.0/22
IPv6:
2a04:40::/29
Signature Algorithm: sha256WithRSAEncryption
02:cf:f1:ae:96:2f:49:33:2d:90:ac:70:8f:52:f6:6d:ef:71:
01:d8:22:bc:78:df:f9:0d:98:4f:13:7d:2e:12:c8:11:6f:22:
fa:38:aa:92:6e:42:71:e9:5e:f9:6e:c9:52:42:ec:8c:7b:16:
cb:6f:36:07:bc:62:b6:82:87:5f:2b:4d:81:e9:7f:59:85:71:
29:b1:bd:19:20:df:9e:ce:ff:9f:87:03:e4:68:b3:05:64:c9:
e8:e7:49:85:3b:88:5a:ee:60:cd:84:6f:18:99:94:74:bc:2e:
1f:ec:6e:86:02:c3:5a:34:f1:94:e3:14:82:82:15:45:73:f6:
59:4e:9b:41:85:45:af:c2:27:57:89:70:63:ef:c2:b2:9a:1d:
b4:92:a9:4b:b8:10:70:73:53:08:3d:76:43:c0:6c:5b:38:47:
fd:41:4c:22:23:4b:71:8c:f5:ef:35:86:ea:fb:da:4d:d7:ff:
49:c6:3d:59:60:d2:bf:54:9c:c3:b6:17:24:ab:d5:c7:a3:66:
5b:e4:e8:c8:b6:97:7b:4e:4b:51:13:26:9a:65:cc:b2:b9:5d:
8b:dd:5a:48:a8:71:b2:e0:fe:6b:73:ec:4b:2c:86:20:a3:f1:
1d:89:64:82:05:69:6a:1b:46:47:76:95:c5:47:08:0b:7e:cb:
96:ee:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org