Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/9SL7PeWXEWTLgnYnepiuhHN0xqQ.roa
File: 9SL7PeWXEWTLgnYnepiuhHN0xqQ.roa (raw, json)
Hash identifier: ijAc/wYyn1BCa9vfnA6LaChgRQ/0lFj6G15GbgHofbA=
Subject key identifier: F5:22:FB:3D:E5:97:11:64:CB:82:76:27:7A:98:AE:84:73:74:C6:A4
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: D14910
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/9SL7PeWXEWTLgnYnepiuhHN0xqQ.roa
Signing time: Sat 01 Jan 2022 10:55:24 +0000
ROA not before: Sat 01 Jan 2022 10:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201160
IP address blocks: 185.60.225.0/24 maxlen: 24
185.60.224.0/24 maxlen: 24
185.60.226.0/24 maxlen: 24
185.60.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13715728 (0xd14910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Jan 1 10:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f522fb3de5971164cb8276277a98ae847374c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:7c:9d:88:a8:0a:21:af:3a:a4:bc:b3:f0:
1d:f7:ef:89:02:82:28:0e:76:31:df:20:24:8e:96:
dc:a0:c3:4c:da:8e:ed:f9:f0:7b:d4:4e:61:63:4a:
49:a4:88:b3:93:2f:40:3e:ea:60:6c:fa:da:f5:53:
2c:9f:37:ed:d1:a9:dd:2a:45:7d:31:f8:f5:a0:d4:
3c:23:03:f8:26:ec:6d:42:be:40:1c:a3:d4:ef:85:
e1:22:ef:83:07:c5:ef:2e:9a:d5:cf:c4:cc:70:3a:
50:ef:c4:59:36:67:63:87:c9:1e:9e:89:90:79:d1:
59:f8:2f:5f:ba:99:dc:cf:bf:b5:e8:84:2d:0a:ef:
57:d2:b1:62:9e:76:51:db:48:9a:28:0c:9c:75:33:
fb:68:c7:b1:c9:5b:da:45:ce:11:32:c3:bd:5f:36:
aa:aa:83:76:2b:2c:9d:f5:94:ae:66:80:92:7a:c8:
67:dd:54:8b:96:1a:fe:da:9d:f3:93:49:6d:89:78:
37:8b:15:bc:05:9f:31:b6:3b:1b:ba:af:2c:bc:fc:
a3:70:29:65:00:e5:c2:8c:a5:17:b7:2d:da:af:b4:
fa:2f:c2:19:91:5d:58:7d:a7:23:b9:d7:2d:35:30:
83:24:d0:aa:b5:fd:fb:9e:77:45:f9:3b:44:fb:94:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:FB:3D:E5:97:11:64:CB:82:76:27:7A:98:AE:84:73:74:C6:A4
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/9SL7PeWXEWTLgnYnepiuhHN0xqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.224.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:29:07:1e:4f:88:08:a6:de:69:6b:89:2f:4d:e9:55:65:66:
43:ea:7f:9f:26:65:43:c4:fd:6d:76:5e:45:68:f6:ee:ed:c5:
ca:b2:f3:8e:73:58:8d:7c:df:4b:c8:09:4e:e8:31:ac:60:fa:
c1:e0:c6:02:07:09:0c:ca:3d:8d:e3:32:36:40:81:fd:27:b2:
10:06:9a:75:63:ed:98:5b:ad:30:a3:f6:1c:be:ad:d1:27:21:
de:bf:6c:77:07:db:e9:09:7a:79:80:bf:3e:15:b6:c9:df:75:
5b:76:24:dd:6d:0c:c7:f4:5e:76:a4:43:5e:02:4f:ec:16:41:
c8:47:23:fc:d1:37:07:3e:f1:fb:5e:3e:de:97:ec:c7:8f:aa:
fa:9d:98:99:2e:9a:12:6c:04:70:71:92:75:87:f5:c8:93:76:
08:27:6b:4d:7c:b2:bc:b8:04:06:8e:f1:53:02:f8:52:85:6c:
53:1c:92:55:c4:59:65:77:fb:bd:a6:6e:c9:f7:33:7a:db:4f:
47:19:9a:1a:6f:4c:41:e7:c7:07:b7:d4:08:1b:c2:24:5f:c3:
4c:14:7c:a5:e7:bf:44:7c:3d:66:16:64:45:57:e4:ae:49:2f:
7c:47:cd:89:fa:5b:1e:29:19:e9:a0:6f:60:7f:8d:8b:a0:1c:
72:e1:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-fra.rpki-client.org