Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/CrpjdFxKKReoImF1izlFthAT5-E.roa
File: CrpjdFxKKReoImF1izlFthAT5-E.roa (raw, json)
Hash identifier: tTXeG7Wk14ysaGc0YZojfE2KOSNuxcVVx0mLcME2ziA=
Subject key identifier: 0A:BA:63:74:5C:4A:29:17:A8:22:61:75:8B:39:45:B6:10:13:E7:E1
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 1C1C3890
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/CrpjdFxKKReoImF1izlFthAT5-E.roa
Signing time: Sat 01 Jan 2022 03:58:02 +0000
ROA not before: Sat 01 Jan 2022 03:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199370
IP address blocks: 185.16.164.0/24 maxlen: 24
185.16.165.0/24 maxlen: 24
185.16.166.0/24 maxlen: 24
185.16.164.0/22 maxlen: 22
185.16.167.0/24 maxlen: 24
2a03:d6c0::/32 maxlen: 32
2a03:d6c0:c000::/34 maxlen: 34
2a03:d6c0:8000::/34 maxlen: 34
2a03:d6c0:4000::/34 maxlen: 34
2a03:d6c0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471611536 (0x1c1c3890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jan 1 03:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0aba63745c4a2917a82261758b3945b61013e7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:f1:9d:d6:51:68:1f:14:10:cd:49:f6:72:
93:82:70:2c:07:93:fb:10:b9:70:3b:be:5a:a1:1e:
bc:a5:dd:71:d5:ec:db:44:59:68:71:a1:c5:8b:f3:
15:d5:ea:63:01:19:cf:d2:ff:5c:13:ba:5d:3f:fd:
76:ef:9e:f6:e2:81:4c:92:f7:59:d3:42:73:8a:8a:
4d:bd:bd:a8:02:2c:c4:cd:83:ac:3a:02:ce:69:66:
87:b0:ac:b8:07:bb:d6:ab:cb:1f:eb:47:f1:dd:d6:
9f:ce:db:27:91:cd:f7:5f:f2:ca:53:aa:b7:2d:ea:
30:74:16:5e:48:81:5e:23:a5:09:28:de:46:c7:ba:
a4:a8:77:f5:f5:8e:98:64:28:15:b3:03:e0:92:96:
0c:b6:9b:c9:a2:56:72:b7:30:2f:72:bb:51:5c:31:
a2:ad:d3:33:4d:f9:0a:13:ba:2f:5e:d2:72:fd:e3:
75:bf:24:4f:68:f6:01:a8:3d:3e:45:da:69:ee:b0:
a7:f0:ba:98:ba:0b:da:39:c4:4e:39:50:db:0d:0c:
e9:9c:11:60:fc:08:d5:e2:77:72:3e:af:f7:10:58:
ec:08:52:26:64:a4:5d:fd:68:6c:fb:3e:89:b5:56:
df:65:b9:af:38:25:8f:81:66:b0:a9:86:b7:25:67:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BA:63:74:5C:4A:29:17:A8:22:61:75:8B:39:45:B6:10:13:E7:E1
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/CrpjdFxKKReoImF1izlFthAT5-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.164.0/22
IPv6:
2a03:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:cb:dd:85:3c:34:da:f1:98:55:1f:3e:02:05:91:e3:b0:b1:
66:4e:b2:b5:10:5a:87:2c:7b:74:9b:22:e8:e2:7c:f9:a7:0e:
69:8d:56:af:0d:75:ee:fe:4c:21:7e:8b:e0:07:8e:4b:f3:78:
d2:20:b4:25:69:95:68:77:07:ee:21:72:cd:70:b3:3e:57:5a:
80:8d:fa:67:b0:3a:a5:1d:46:89:b0:8d:b7:60:4d:09:4e:df:
0c:64:9e:52:32:5c:f1:bd:8e:91:28:de:11:4c:4a:fc:0a:55:
0c:bf:42:3a:cb:90:92:82:af:3c:c4:f5:03:e9:e4:8a:23:b6:
7f:ec:b1:41:62:80:4b:83:c4:bc:87:af:3d:d9:ad:5a:5b:51:
da:11:c5:8d:2b:96:6f:06:9b:ab:98:f5:96:d3:48:95:dc:65:
b3:91:32:90:f7:4a:b4:6e:ff:a8:11:ed:b5:c3:31:5e:2f:23:
2c:6c:dc:1d:e8:2e:85:c7:a1:c4:0a:30:ad:27:88:c7:0f:c4:
67:19:a2:ea:d7:f2:68:37:a3:36:a8:80:6c:57:7b:51:ca:44:
af:6d:21:46:43:dd:79:9d:a5:a7:34:5b:c1:62:2c:37:ac:fc:
ca:f4:10:e5:74:2c:9b:82:49:17:c6:5a:fb:2f:da:51:6e:c4:
20:55:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:48 2024 by rpki-client on console-fra.rpki-client.org