Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/eoZKvx4D0NFtAAMVsaNVov8ROzg.roa
File: eoZKvx4D0NFtAAMVsaNVov8ROzg.roa (raw, json)
Hash identifier: K7O0XoCV7Qk80D4kRnaUDaa9zzV1HIQuEBXoW6ML3rM=
Subject key identifier: 7A:86:4A:BF:1E:03:D0:D1:6D:00:03:15:B1:A3:55:A2:FF:11:3B:38
Certificate issuer: /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial: 102D3066
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/eoZKvx4D0NFtAAMVsaNVov8ROzg.roa
Signing time: Sat 01 Jan 2022 02:02:01 +0000
ROA not before: Sat 01 Jan 2022 02:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64396
IP address blocks: 185.167.80.0/22 maxlen: 24
2a0b:5200::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271396966 (0x102d3066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Validity
Not Before: Jan 1 02:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a864abf1e03d0d16d000315b1a355a2ff113b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:0f:65:d1:e3:58:af:1a:1d:f0:17:94:35:
d9:a9:9b:6e:1d:05:50:d5:a3:a2:02:0b:cc:21:4b:
0f:46:ec:43:87:2e:f4:e1:fe:61:0d:91:85:c9:36:
71:c5:ff:17:8a:97:3d:dd:df:a9:e5:9c:22:9d:45:
14:f2:8a:cf:b1:ad:93:e0:f4:b3:4c:31:c4:09:07:
6c:21:9a:80:43:5e:b4:ba:5a:1f:f7:88:87:2c:70:
af:af:65:a4:65:fd:70:a0:50:1d:3d:85:d5:74:b7:
af:4d:11:3e:4f:d9:ce:4a:60:5a:5c:c1:26:8f:1a:
22:d4:98:96:5e:c1:65:46:d1:00:28:d9:24:40:62:
e2:f5:c0:36:8f:ea:3c:5a:bb:39:9a:92:9f:52:5c:
ef:a3:57:a6:17:37:8a:63:54:cc:eb:ee:45:44:02:
cc:7e:8b:02:65:9c:76:da:24:51:3f:b5:c1:c3:09:
9a:55:35:18:fd:fb:2c:2a:23:a1:20:dd:a6:90:ff:
4e:a2:40:de:ba:ae:6f:34:17:a4:62:13:fe:d9:34:
39:dd:de:7e:b2:58:da:39:b2:52:43:26:a1:2d:c3:
67:8e:d5:a6:5b:b8:f4:b5:bb:a3:b9:07:eb:99:32:
fd:40:79:fe:9a:e7:3c:3d:23:35:ef:93:54:f7:d5:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:4A:BF:1E:03:D0:D1:6D:00:03:15:B1:A3:55:A2:FF:11:3B:38
X509v3 Authority Key Identifier:
keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/eoZKvx4D0NFtAAMVsaNVov8ROzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.80.0/22
IPv6:
2a0b:5200::/29
Signature Algorithm: sha256WithRSAEncryption
2a:c6:c2:2a:0f:14:a7:dd:f6:34:1e:75:01:f2:6c:fd:be:c1:
52:a6:1b:5a:9b:26:5b:a5:46:db:76:91:8a:62:df:fa:d5:3f:
95:aa:95:82:ba:73:0c:8c:db:d7:1a:f9:99:ad:5d:fa:26:49:
8d:54:ad:b2:a3:9d:07:86:e5:ff:79:ba:33:ec:c1:7c:48:2b:
42:24:2d:29:18:13:13:25:ee:2b:a5:1f:99:81:e7:89:77:70:
36:2f:75:a8:b3:6b:25:e3:08:d6:98:82:85:25:d7:68:3d:52:
30:be:d9:22:4b:10:ba:3b:31:56:79:89:ae:8a:1f:97:49:b6:
6b:9c:2e:f1:ea:5b:f3:38:cf:29:be:20:31:9e:e7:2e:0f:52:
8e:49:9b:26:c1:14:bf:22:3a:e5:25:31:15:89:87:7c:e3:7f:
08:26:4a:9e:63:cb:4f:e8:f2:39:7c:32:42:2b:49:5b:ac:70:
fe:ff:52:7b:0d:e2:ad:d7:eb:f0:d5:a3:ae:f8:35:37:47:e8:
2a:0c:6e:ca:92:c1:88:e2:30:9d:c1:52:e4:9b:d4:96:df:41:
65:52:5d:37:9a:f4:6b:fb:33:08:05:c4:21:37:0a:6e:a9:d0:
9a:f0:95:5a:bc:f5:bd:a4:69:a7:28:ea:73:ce:13:5b:44:14:
fd:bf:3e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:37 2024 by rpki-client on console-ams.rpki-client.org