Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/cOlx4XnMIGNYuEFhYmK785nvScY.roa
File: cOlx4XnMIGNYuEFhYmK785nvScY.roa (raw, json)
Hash identifier: Nx6D5FWXWtXQARfe151qZfKqeq5ak/Inth6Boi6jNEM=
Subject key identifier: 70:E9:71:E1:79:CC:20:63:58:B8:41:61:62:62:BB:F3:99:EF:49:C6
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 0B7B9984
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/cOlx4XnMIGNYuEFhYmK785nvScY.roa
Signing time: Sat 01 Jan 2022 00:52:49 +0000
ROA not before: Sat 01 Jan 2022 00:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2872
IP address blocks: 2.58.41.0/24 maxlen: 24
185.123.0.0/24 maxlen: 24
2.58.40.0/24 maxlen: 24
185.123.3.0/24 maxlen: 24
185.123.2.0/24 maxlen: 24
2.58.42.0/24 maxlen: 24
185.123.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192649604 (0xb7b9984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Jan 1 00:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70e971e179cc206358b841616262bbf399ef49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:92:c0:8a:3b:9c:5b:65:5c:9d:a7:33:c6:
c5:cd:08:a6:9c:07:25:35:3e:e2:d8:c7:12:2c:e1:
fa:3d:58:b4:5a:36:0d:ad:b8:7b:79:d5:f1:4b:33:
b6:62:b5:27:9a:52:0b:5c:5f:35:33:fb:75:6b:35:
d9:f7:aa:0a:b6:b6:bf:da:a3:68:46:8e:73:41:d5:
44:79:b1:1c:30:d3:9a:63:8c:84:48:e0:05:af:f8:
8d:45:45:7a:ee:98:54:c2:9a:02:6f:6a:2b:21:7d:
99:d7:50:19:01:52:cc:9b:3b:0e:08:b8:16:5e:b4:
a3:3c:25:28:e8:38:a9:89:a9:cb:3f:ba:a0:67:ac:
57:74:4d:7a:15:59:d7:32:87:67:0c:cb:40:eb:af:
16:cb:a3:c1:60:1b:af:56:9e:c8:b4:30:3c:61:04:
9f:cb:ea:51:53:27:64:e5:2f:4d:a0:b9:76:64:04:
c9:b2:3f:e0:99:6b:5f:01:f1:2f:9c:77:c6:65:6c:
67:9f:3e:24:a0:1f:ec:70:12:85:bc:e9:27:13:ee:
9e:ca:b5:d2:03:81:76:62:db:9e:07:ce:5b:32:6c:
4f:0b:99:ba:b0:27:09:63:cf:09:60:18:db:76:f5:
e9:ba:08:8c:47:38:27:ee:ff:0a:83:45:2f:3f:20:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:71:E1:79:CC:20:63:58:B8:41:61:62:62:BB:F3:99:EF:49:C6
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/cOlx4XnMIGNYuEFhYmK785nvScY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.40.0-2.58.42.255
185.123.0.0/22
Signature Algorithm: sha256WithRSAEncryption
86:49:93:20:71:07:68:ab:73:07:db:8c:8d:e2:74:63:4a:49:
f7:a0:89:c5:48:1c:8f:af:b0:87:74:f3:5a:76:80:07:8d:10:
21:94:a1:f2:27:e3:11:93:6f:c4:09:46:ec:47:27:bb:dd:79:
3d:6e:be:18:48:87:79:84:e9:59:06:80:51:d4:d7:bb:37:99:
af:a9:f9:66:48:ad:16:40:27:7e:54:86:5b:36:d7:58:73:0c:
4a:4b:62:b4:f2:5e:6d:c0:e8:b0:01:18:92:83:a9:d7:5c:08:
9c:50:5b:7c:71:d8:fa:6d:c8:0b:bd:23:e4:ee:95:77:2e:37:
0a:73:9c:8f:3f:c8:6b:73:4b:9d:8f:3b:6e:7b:f7:e6:9d:2d:
01:fb:06:f0:11:63:3e:f6:f5:27:dc:cc:dd:3f:6f:e6:e2:0f:
c8:33:4f:2d:b8:5d:0d:bb:4e:de:70:08:57:3d:09:9a:32:12:
c0:fa:b1:57:87:7a:3e:fc:b6:e0:b9:47:51:8e:7c:66:88:50:
7e:5c:a7:30:1c:bd:c7:92:24:0e:8a:39:02:56:e3:eb:06:00:
cc:da:23:7b:d7:c8:38:54:18:0c:ab:35:ce:b8:ff:90:69:a4:
f4:1c:b1:75:87:c6:63:cd:bb:45:80:e5:bc:b3:c4:f1:89:4c:
ac:b9:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:06 2024 by rpki-client on console-ams.rpki-client.org