Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cVXV4ZKcBaSZLADnFffVsoqR2C8.roa
File: cVXV4ZKcBaSZLADnFffVsoqR2C8.roa (raw, json)
Hash identifier: uSppedhPOJ+NOXbcvtwpTIasp0/R/Rx5K/aGtZ+2Bqc=
Subject key identifier: 71:55:D5:E1:92:9C:05:A4:99:2C:00:E7:15:F7:D5:B2:8A:91:D8:2F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0181D4A9D460668AA21F7542EF3C487C5C10
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cVXV4ZKcBaSZLADnFffVsoqR2C8.roa
Signing time: Wed 06 Jul 2022 17:58:28 +0000
ROA not before: Wed 06 Jul 2022 17:58:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213107
IP address blocks: 185.88.174.0/24 maxlen: 24
185.86.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:a9:d4:60:66:8a:a2:1f:75:42:ef:3c:48:7c:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jul 6 17:58:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7155d5e1929c05a4992c00e715f7d5b28a91d82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:ce:99:47:ff:d1:45:3b:c7:25:dd:f7:e9:
08:92:e1:40:5c:fa:74:95:17:08:44:91:6f:41:cd:
00:25:3f:e0:e2:9e:b5:dd:98:99:2c:53:54:31:96:
76:44:3f:87:37:33:73:dd:78:a3:f0:9a:08:16:8a:
84:9e:e4:0e:de:d4:e6:ce:27:94:1a:ac:9a:9b:46:
2f:3c:a1:c4:20:d5:0b:5e:c3:a9:dc:8f:ea:5a:e8:
83:70:8f:98:42:4f:dd:d3:34:c7:da:34:1b:bd:a8:
0c:19:31:6b:ab:11:f4:a8:80:c5:47:5d:47:52:92:
47:b3:89:90:7c:df:b5:d0:82:9d:3f:3e:f7:8d:3d:
6e:88:bd:ff:27:24:07:4f:d5:bf:77:5f:fa:17:3b:
a5:38:c5:db:f3:5c:47:92:d7:4d:2e:05:25:04:8a:
44:47:5a:40:0e:2c:6f:20:e1:9d:c6:8d:be:cb:2d:
0b:01:64:dc:44:7b:46:02:1d:5c:28:76:42:e8:95:
8b:51:97:64:6a:90:d9:ca:85:4c:52:39:e6:ba:0f:
d0:57:ec:fd:12:60:b6:67:e9:4c:01:be:0e:24:1e:
b7:f6:5e:4f:98:fc:76:67:5e:96:3a:ac:48:78:e3:
7f:0d:c7:d6:36:af:fc:0e:73:1e:47:8d:2a:36:80:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:D5:E1:92:9C:05:A4:99:2C:00:E7:15:F7:D5:B2:8A:91:D8:2F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/cVXV4ZKcBaSZLADnFffVsoqR2C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.14.0/24
185.88.174.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2b:26:96:a1:bf:6a:ee:29:c7:87:8c:17:30:2c:25:ca:2f:
01:04:fb:06:3e:ed:9b:8e:69:88:86:65:d1:2b:7e:26:d2:81:
32:e4:3b:d5:3c:80:9a:f3:26:37:26:35:9e:b7:a8:6d:ef:1d:
7f:48:3d:07:72:81:f2:12:f7:57:d6:11:8b:9c:91:7f:c7:90:
47:ee:c1:94:1c:1f:36:99:a2:eb:2e:fb:11:ea:45:66:f3:0b:
e9:a8:71:99:29:3f:f1:ac:61:68:1c:73:7e:df:80:47:4a:92:
57:6f:81:f6:7e:86:5a:9a:61:b4:8c:e6:a2:48:18:ae:26:7d:
33:15:cf:c6:43:90:ec:24:07:82:77:f7:3b:63:03:96:78:62:
57:1e:45:54:31:5f:1d:4c:b4:63:6b:8e:69:10:32:3f:c6:7e:
1d:94:73:70:21:5b:07:40:60:89:7d:dc:c5:7d:33:64:93:18:
e7:21:98:e9:0f:cc:f6:99:d7:1c:5a:a1:53:a5:fe:80:1b:1c:
79:93:74:0e:33:5e:51:27:c6:97:48:b9:4b:b8:72:de:d5:b7:
d7:c2:36:d4:c3:cf:41:d9:33:18:bb:7f:41:49:85:0e:69:2c:
c6:75:eb:92:e9:28:cb:4b:cd:af:30:58:28:2d:0c:6b:e6:0b:
4d:a0:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org