Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/icT9PWfhyO9c-McZ3yii9Xrk1iE.roa
File: icT9PWfhyO9c-McZ3yii9Xrk1iE.roa (raw, json)
Hash identifier: v3Bdee39JzMd1kNlSzfZakT09f68TstnZ7z5FshK6/0=
Subject key identifier: 89:C4:FD:3D:67:E1:C8:EF:5C:F8:C7:19:DF:28:A2:F5:7A:E4:D6:21
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 0F41D0E7
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/icT9PWfhyO9c-McZ3yii9Xrk1iE.roa
Signing time: Tue 12 Apr 2022 08:52:32 +0000
ROA not before: Tue 12 Apr 2022 08:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61094
IP address blocks: 185.103.216.0/22 maxlen: 24
185.245.12.0/22 maxlen: 24
185.111.190.0/23 maxlen: 24
2a02:e220::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255971559 (0xf41d0e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Apr 12 08:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89c4fd3d67e1c8ef5cf8c719df28a2f57ae4d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:08:8f:78:a7:a8:f9:56:85:f2:39:4f:4c:
5a:2b:d9:5f:12:0b:48:44:cc:c2:fd:25:b0:dd:a7:
44:d5:be:ec:0a:51:c5:7b:34:ce:cc:08:a0:56:46:
b5:65:38:94:0c:1e:e4:fd:6f:2e:3d:ff:3f:4a:ae:
8e:dd:2d:04:93:8a:93:37:41:6b:a1:2d:a5:e9:cc:
e5:8a:cb:37:e8:67:58:f0:04:dc:44:04:9c:d2:ea:
cf:8e:d1:ee:cd:ed:fd:21:2d:9d:6f:6a:8f:84:4f:
27:c0:77:13:34:f1:0c:6f:67:b0:76:14:73:6d:1e:
8e:6b:e7:d4:91:6a:63:f4:29:0f:30:46:8c:72:ee:
76:01:9a:1c:47:c9:b8:f0:00:92:ef:3d:86:9a:80:
2f:c3:c8:c1:95:50:a7:60:01:18:08:e2:6b:bd:05:
1e:be:de:a6:ee:60:62:71:6a:66:3f:d8:57:a3:85:
de:ee:4c:a5:66:6f:68:81:71:9c:f5:8b:64:b7:ff:
34:0e:52:9e:a1:53:12:0d:57:8d:ed:82:bf:b6:95:
7e:30:ef:69:21:87:28:d3:4f:c1:5c:14:13:b6:40:
d2:20:6c:4e:4a:13:2f:09:f8:d0:5f:2e:3e:32:68:
ba:69:73:f3:77:57:83:50:f0:5a:95:00:5f:08:63:
b4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:FD:3D:67:E1:C8:EF:5C:F8:C7:19:DF:28:A2:F5:7A:E4:D6:21
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/icT9PWfhyO9c-McZ3yii9Xrk1iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.216.0/22
185.111.190.0/23
185.245.12.0/22
IPv6:
2a02:e220::/30
Signature Algorithm: sha256WithRSAEncryption
10:99:b8:bb:7e:60:37:90:36:b2:96:ea:16:33:09:d3:e4:d1:
f3:9a:6f:66:dc:6c:9d:09:b1:c4:fb:67:02:b3:10:90:df:ea:
b1:02:68:74:b2:49:3d:06:7b:22:95:87:5d:f8:34:e0:5e:43:
d1:09:e2:b6:02:e7:f1:73:4a:ce:d2:00:a5:b5:1b:d4:cc:04:
db:81:66:54:89:21:81:0f:58:1e:4e:0b:2e:89:56:09:bb:fe:
2e:74:62:a0:00:57:70:ce:2e:69:ea:11:39:4a:81:a9:df:94:
7b:ca:83:43:90:89:fa:13:44:57:b4:e2:e1:fe:f9:d0:10:8e:
04:a5:b4:03:4f:aa:91:ee:12:92:e2:83:17:6e:88:90:d2:0a:
3c:68:95:ac:68:f0:e8:d9:7c:b7:dc:3e:cb:de:a2:0c:0a:e7:
47:1c:1a:bb:77:eb:11:76:46:61:a0:c3:b5:a3:7b:e6:e6:8d:
dc:81:97:c4:ab:fd:b5:4c:a1:f7:a0:91:75:b8:6c:c4:00:2e:
45:bf:cf:40:17:a0:b5:6a:99:11:80:c5:0b:01:81:68:5e:9a:
e6:45:b8:79:2d:c6:dd:55:d5:e0:1d:d9:db:8f:ea:05:d7:7d:
7e:9d:62:03:d8:76:5c:62:8a:53:f5:d9:bd:83:68:17:91:88:
29:76:d4:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:45 2024 by rpki-client on console-ams.rpki-client.org