Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FoivcNwdOPuhJVSBzNnBNW-xFEo.roa
File: FoivcNwdOPuhJVSBzNnBNW-xFEo.roa (raw, json)
Hash identifier: 91SxXuJW6kOUwc/4j8ap3CpZtFvG4xdu6IyAYMWuXQ0=
Subject key identifier: 16:88:AF:70:DC:1D:38:FB:A1:25:54:81:CC:D9:C1:35:6F:B1:14:4A
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AC79A85
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FoivcNwdOPuhJVSBzNnBNW-xFEo.roa
Signing time: Sat 01 Jan 2022 03:02:34 +0000
ROA not before: Sat 01 Jan 2022 03:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207582
IP address blocks: 185.185.234.0/24 maxlen: 24
185.87.120.0/24 maxlen: 24
185.86.7.0/24 maxlen: 24
185.86.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180853381 (0xac79a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1688af70dc1d38fba1255481ccd9c1356fb1144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:31:a8:e4:3e:67:ec:2c:0f:f6:9c:4c:10:
18:af:83:87:cc:63:02:70:3f:e0:98:1f:e2:30:26:
67:ea:2a:e8:2f:d4:33:85:06:09:3e:59:a5:9c:c9:
62:b3:5e:90:4d:86:ef:54:12:c6:de:4f:f0:2e:ef:
cf:7c:8e:6e:ff:bf:0f:16:b8:03:e4:60:7b:95:64:
09:1c:5e:17:8b:64:43:3d:c3:94:99:23:99:77:c5:
2d:28:b6:42:74:55:2c:00:32:75:67:ea:d2:18:7e:
7c:3c:90:1a:d3:7f:c0:fd:31:20:e8:11:4f:a2:f8:
88:38:4b:75:e8:c8:f3:31:6a:ef:8f:e3:4d:36:81:
61:43:0d:f2:51:80:a2:86:be:c8:49:70:ce:e2:a7:
96:db:68:3b:f7:a0:a5:6e:6a:5e:14:cc:7f:cd:11:
bd:a9:fe:f8:f1:68:2a:89:8c:6a:0e:f5:e0:f2:54:
71:ff:f7:e7:d0:19:94:3c:83:55:71:21:14:b0:60:
32:cd:36:32:2f:86:05:1d:f6:10:b8:a1:3e:40:f0:
f3:44:cd:24:aa:77:a5:20:3b:8e:50:e3:16:56:da:
01:09:ae:15:5c:ae:54:80:5d:9e:86:c2:45:e1:9d:
48:27:fa:1d:98:60:07:a4:38:96:59:7e:e7:02:77:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:AF:70:DC:1D:38:FB:A1:25:54:81:CC:D9:C1:35:6F:B1:14:4A
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FoivcNwdOPuhJVSBzNnBNW-xFEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.7.0/24
185.86.15.0/24
185.87.120.0/24
185.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5c:c8:7f:4c:f2:90:e4:aa:c6:5a:b7:0a:9a:b4:d8:58:56:
ea:ad:da:02:65:46:a8:38:bd:b4:45:a8:ec:98:f1:7c:e5:37:
63:6b:9c:43:0d:ea:36:4e:3e:bd:0b:55:7c:40:19:17:b6:d0:
3a:22:7f:bb:28:9e:27:8a:bb:ca:41:cb:04:62:cd:37:68:78:
07:a7:ff:2a:6b:d6:32:66:cf:55:13:65:f5:f5:d6:1f:4e:14:
0b:b4:c3:a5:67:c2:07:88:bd:b6:60:d6:21:75:78:97:cc:15:
2d:91:19:7f:09:0a:1c:ab:b2:fd:17:53:f9:c2:3c:31:c2:1d:
b1:c3:6a:13:5b:f8:7d:47:09:7a:21:c6:63:1b:86:77:b0:97:
08:4e:a5:92:bc:d5:12:e1:12:6f:bc:7c:a1:1a:c9:04:b9:65:
1c:94:0e:38:e8:eb:42:5f:00:0c:ef:76:4a:d2:2f:8b:81:40:
85:1f:c0:c0:79:53:a0:6d:a7:81:d7:ed:84:99:b1:c9:c3:c7:
18:73:8c:04:50:26:ec:62:24:1e:8c:2b:bb:27:75:6f:8f:00:
57:c1:48:75:c5:38:4b:fd:61:bb:da:f1:42:48:56:5a:61:a1:
0c:e0:d8:8f:52:09:02:64:e6:65:e2:fa:f3:06:64:8f:fb:4a:
35:f9:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org