Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/xHin1mn4JjG3NUyVa48WGgAQmf4.roa
File: xHin1mn4JjG3NUyVa48WGgAQmf4.roa (raw, json)
Hash identifier: 2OSFUBAlRX/uL1j2h2BYciaVD37ku3bBjq7TlCB51h0=
Subject key identifier: C4:78:A7:D6:69:F8:26:31:B7:35:4C:95:6B:8F:16:1A:00:10:99:FE
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 08988F09
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/xHin1mn4JjG3NUyVa48WGgAQmf4.roa
Signing time: Sat 01 Jan 2022 03:59:06 +0000
ROA not before: Sat 01 Jan 2022 03:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60798
IP address blocks: 185.242.181.0/24 maxlen: 24
185.242.180.0/24 maxlen: 24
185.242.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144215817 (0x8988f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: Jan 1 03:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c478a7d669f82631b7354c956b8f161a001099fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:2b:ed:d3:e1:54:73:b9:67:d4:d3:38:76:
f9:b6:35:33:62:88:1e:64:3f:67:5b:ea:d7:ed:de:
34:b3:75:83:2b:a6:04:f3:c8:e7:b5:28:4f:bb:db:
55:0d:8b:5c:ea:e2:b8:c5:63:ca:21:37:c6:0c:32:
5c:f4:2a:e6:4c:2f:8a:0c:84:7a:aa:9d:6d:32:7a:
0b:2b:39:e7:bc:72:bb:43:ac:f7:ac:47:d5:40:8a:
31:0a:6a:9e:65:87:2c:d5:b3:c1:06:91:a9:a0:ea:
4f:22:70:4a:71:21:73:ca:ff:4b:44:9d:eb:27:8c:
5c:84:9a:9c:ca:d9:b9:08:71:28:21:a2:6f:a5:8d:
07:76:71:c4:c3:7f:55:b8:e0:49:45:cf:14:36:38:
b0:73:ef:79:f4:bc:ec:dc:7d:65:d8:3d:18:cc:29:
9c:aa:6d:a9:41:22:2a:44:15:2b:87:ad:11:6f:9e:
01:96:23:5f:2c:0a:53:6a:e4:c2:f5:1b:9b:f9:96:
3d:37:40:72:ff:58:a0:6c:41:48:c3:07:83:29:b3:
ff:21:30:39:76:b9:c2:57:b0:9b:f6:1e:bb:fb:59:
1f:3f:65:af:f7:ec:4b:c5:54:58:95:15:a5:a2:e3:
51:42:68:f0:7f:03:d2:10:5c:c2:21:4b:1c:8d:03:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:A7:D6:69:F8:26:31:B7:35:4C:95:6B:8F:16:1A:00:10:99:FE
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/xHin1mn4JjG3NUyVa48WGgAQmf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.180.0-185.242.182.255
Signature Algorithm: sha256WithRSAEncryption
b1:c2:82:08:c5:b3:1e:e8:ff:c6:23:dd:ee:5b:af:73:44:b6:
99:f1:c5:57:d6:cb:d8:8c:61:c6:92:88:83:88:ff:3a:a8:11:
e9:c3:41:32:02:0c:fc:8c:3a:54:93:2b:96:19:fd:f7:d7:22:
7b:91:42:f8:70:24:28:0e:e0:18:5f:a7:b6:dd:f7:47:a1:be:
8d:86:bb:95:26:56:01:8a:65:73:a7:8e:e5:eb:2f:db:9e:63:
4c:19:c6:9f:c2:23:fe:cd:2a:3a:f1:8c:95:42:b3:d8:b5:07:
98:4d:cf:1c:38:79:f1:44:2c:e3:bc:b4:94:c4:c2:44:8d:20:
47:42:88:2b:b9:e7:80:db:ed:0a:eb:a3:46:54:a6:42:7c:af:
3c:d8:30:97:c3:22:43:1a:0b:eb:b3:a3:c8:88:5b:c0:0b:b0:
c3:a2:d7:bd:41:11:2c:00:6a:a5:c7:70:6e:87:d0:09:fc:e3:
ee:52:5e:1e:6f:e1:3f:ee:70:db:89:3a:d9:0a:b9:8b:56:03:
3a:20:90:86:76:c3:49:29:30:e9:4e:48:5b:05:d7:25:40:bb:
04:2a:e1:b4:ea:5a:52:a9:28:21:29:61:8d:64:68:74:a1:3a:
59:e7:2a:5c:8d:a9:42:b6:a6:b9:0f:0a:70:fa:62:93:b3:8e:
0e:cc:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:52 2024 by rpki-client on console-fra.rpki-client.org