Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/8Ie_b6cdGXvjrcezk7BK8vSWMKs.roa
File: 8Ie_b6cdGXvjrcezk7BK8vSWMKs.roa (raw, json)
Hash identifier: E2bhVdUYK+VZq/jGyWKA8i6QaL0dbnHIlaSqXHNxE5k=
Subject key identifier: F0:87:BF:6F:A7:1D:19:7B:E3:AD:C7:B3:93:B0:4A:F2:F4:96:30:AB
Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial: 094CB1CD
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/8Ie_b6cdGXvjrcezk7BK8vSWMKs.roa
Signing time: Sat 01 Jan 2022 08:57:19 +0000
ROA not before: Sat 01 Jan 2022 08:57:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31317
IP address blocks: 185.170.244.0/22 maxlen: 32
2a0a:b900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156021197 (0x94cb1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Validity
Not Before: Jan 1 08:57:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f087bf6fa71d197be3adc7b393b04af2f49630ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:15:4e:56:4e:60:dd:34:1b:a4:f1:1a:dd:
c4:9d:cc:df:90:e7:26:c7:2b:cd:2c:d4:06:c3:ae:
80:dc:5b:22:c1:91:62:e9:6a:9b:4e:d6:f8:d3:99:
5a:c0:f9:f8:64:b9:da:e8:25:35:b1:e8:37:ed:08:
69:95:b6:9a:87:7e:30:98:b3:78:4f:b3:ff:be:8b:
33:4d:82:8e:de:0b:1c:83:ed:e1:c3:37:06:2a:6e:
e6:1f:2d:b0:4d:76:d5:54:24:20:b2:1e:64:d6:3c:
4c:be:aa:88:01:89:ed:b5:de:42:cf:f1:4a:8a:27:
36:42:ec:6c:fb:52:25:65:28:8f:cc:ec:37:ac:21:
4a:e4:b4:f7:0d:05:da:a3:87:7b:07:42:03:e9:0e:
20:fa:a5:e1:dd:eb:d0:18:37:db:bb:61:bf:eb:6b:
11:27:46:c3:71:10:17:25:b9:8f:8f:c5:2e:af:a5:
e0:d6:9d:c1:20:8c:55:62:d1:bd:f4:2c:fd:dd:14:
74:be:29:3d:b0:50:d6:72:61:f3:8e:a3:e3:0a:a2:
56:a8:2c:35:2b:8e:2a:61:47:1c:84:aa:7c:45:1c:
6e:6f:7d:3c:84:2e:1d:5a:4f:ab:4d:89:98:0d:eb:
5b:a9:ab:c5:76:d5:48:a8:a3:0d:c7:f6:7a:d7:b7:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:BF:6F:A7:1D:19:7B:E3:AD:C7:B3:93:B0:4A:F2:F4:96:30:AB
X509v3 Authority Key Identifier:
keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/8Ie_b6cdGXvjrcezk7BK8vSWMKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.244.0/22
IPv6:
2a0a:b900::/29
Signature Algorithm: sha256WithRSAEncryption
5c:74:f0:99:95:6b:12:f3:9d:7b:8b:07:ab:01:8d:05:ac:c8:
b0:da:5b:9b:d3:1a:59:a7:7f:d4:db:c6:d3:07:06:6b:25:cb:
7a:ff:c0:f6:f8:c2:4a:83:6a:43:24:86:03:85:7d:6f:dc:01:
3c:70:13:ec:15:d0:71:2e:e0:91:a8:6b:13:9a:d1:8e:23:19:
76:0d:d2:12:29:a4:d8:1f:90:fa:b8:a6:8c:c7:66:1b:d0:27:
23:c0:e8:23:ef:e3:54:d5:aa:9e:6a:df:18:1c:06:d2:b1:d0:
c8:d1:54:15:47:ee:4a:fc:89:c0:f8:47:64:76:8a:55:85:ae:
e5:4a:0c:8d:cf:46:f6:08:d4:7e:92:35:b6:8f:e9:3c:2b:29:
02:e4:a3:a9:c0:20:28:24:0e:cb:38:ac:b3:87:55:1c:82:cf:
a2:cd:11:c6:77:10:39:b5:3e:2e:83:0c:5f:ed:bb:2f:aa:d2:
9f:64:f3:54:b2:46:d9:d5:a3:71:7d:16:33:5c:d6:28:92:0e:
c2:b1:f0:85:3d:d5:4e:e2:e8:6c:f6:84:c6:36:59:13:b8:5a:
94:51:1b:8a:fc:6e:a3:ef:a6:3d:2c:6d:0e:b6:5c:dc:7b:92:
01:50:dd:7a:e1:23:8e:71:5b:79:ae:cd:11:25:fd:45:5b:7d:
49:e4:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:14 2024 by rpki-client on console-fra.rpki-client.org