Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/1FqN2qikOGRvBdr1W4C6QQ8CNlw.roa
File: 1FqN2qikOGRvBdr1W4C6QQ8CNlw.roa (raw, json)
Hash identifier: VuM8dGORDWf6H2LPushssasQnj+XLAXldqGvVt/5rpk=
Subject key identifier: D4:5A:8D:DA:A8:A4:38:64:6F:05:DA:F5:5B:80:BA:41:0F:02:36:5C
Certificate issuer: /CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Certificate serial: 0B34C4C9
Authority key identifier: 83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/1FqN2qikOGRvBdr1W4C6QQ8CNlw.roa
Signing time: Sat 14 May 2022 07:39:41 +0000
ROA not before: Sat 14 May 2022 07:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57724
IP address blocks: 185.226.160.0/24 maxlen: 24
185.226.163.0/24 maxlen: 24
185.226.161.0/24 maxlen: 24
185.226.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188007625 (0xb34c4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83609f2b9d2486f36e8cd29dfa2a756a48de7c51
Validity
Not Before: May 14 07:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d45a8ddaa8a438646f05daf55b80ba410f02365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:ad:c0:62:a8:51:d4:38:1f:2d:ea:11:4a:
b5:cc:23:2e:a9:26:1d:69:80:76:60:d2:0d:fa:ed:
5f:9f:8a:a5:51:fa:04:c0:2c:bc:c2:ec:bf:d4:4b:
a9:33:a8:a0:68:60:5a:ea:70:31:c8:be:c0:14:36:
26:13:e7:b1:02:89:53:3e:e2:64:0e:33:42:88:82:
b0:0f:5d:de:4a:01:c0:10:be:09:51:3d:1e:08:76:
41:8d:41:18:a4:c7:8a:9a:5b:3d:14:69:26:66:9f:
df:ee:c2:b7:ba:d3:fb:19:da:e6:17:b8:76:31:da:
b2:c4:55:91:7c:51:e4:7a:8a:b1:ea:7a:ab:9b:01:
6b:97:6a:e2:ed:aa:1d:c4:75:54:cd:0c:f8:c3:64:
e9:33:40:6d:3a:86:66:31:1c:27:60:af:a9:78:1e:
b4:6b:34:3e:38:30:53:8e:99:76:6a:6d:6f:86:b3:
90:db:45:df:97:35:07:19:cd:d6:d0:36:84:bb:f0:
50:d5:a1:ff:96:64:56:eb:c5:de:cb:63:b3:19:32:
a4:7d:30:3c:c6:2a:ac:fd:4a:8e:51:42:db:bb:54:
16:45:54:8d:79:2f:db:aa:9f:77:d0:f9:cf:0e:fc:
4f:14:9c:84:8e:12:e8:be:68:c2:91:9b:f2:e1:77:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:8D:DA:A8:A4:38:64:6F:05:DA:F5:5B:80:BA:41:0F:02:36:5C
X509v3 Authority Key Identifier:
keyid:83:60:9F:2B:9D:24:86:F3:6E:8C:D2:9D:FA:2A:75:6A:48:DE:7C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CfK50khvNujNKd-ip1akjefFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/1FqN2qikOGRvBdr1W4C6QQ8CNlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d6ec3b-e717-4c3d-b0ae-5e60f6da2b09/1/g2CfK50khvNujNKd-ip1akjefFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.160.0/22
Signature Algorithm: sha256WithRSAEncryption
84:d1:78:5c:aa:6d:71:6f:2d:27:1b:4c:ce:a9:aa:88:be:b5:
65:c6:52:90:8b:5d:5a:9d:43:f5:db:df:7d:30:c8:88:52:ff:
3d:d3:24:8b:a8:be:c9:1d:b1:a9:f3:5e:80:37:ad:f2:0f:6c:
3e:59:37:e9:d8:8f:2a:6a:65:1f:ac:40:aa:67:5d:4c:8f:9b:
15:2d:32:4e:2f:44:0e:e0:1a:a4:d0:a9:a8:c5:33:45:ab:3b:
40:9e:b0:ff:11:4f:8a:e2:2c:6b:e5:c1:68:6e:a2:6e:b9:8f:
54:46:09:23:aa:ac:a8:7f:d7:b8:c5:35:63:e5:95:42:1a:db:
65:a4:78:ea:d7:46:e7:b0:f7:0f:01:0c:fd:9a:6d:4d:b9:cc:
e4:b4:2d:62:9e:3e:3c:7e:ed:75:26:ea:80:6c:95:37:a5:80:
5d:c7:d3:fd:17:4d:17:a1:f4:bd:af:d1:98:b7:be:c2:02:b5:
48:58:0e:f0:e8:9e:1b:03:ed:a6:02:e3:79:e2:c4:2a:1e:fc:
51:fc:59:1b:4f:f6:3b:10:9e:75:bf:a8:86:98:db:a4:84:2d:
9b:92:65:d2:1d:56:60:d5:6a:9b:27:d2:f1:cf:81:71:d9:c0:
2e:d5:4e:5a:f5:9d:01:93:5e:1b:59:16:c3:46:a9:4f:34:df:
2f:12:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org