Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/hfholELuPBSEv0WWSDmN9LzzZyA.roa
File: hfholELuPBSEv0WWSDmN9LzzZyA.roa (raw, json)
Hash identifier: j/v4ufQhKag7EaTzFI4m73ygu5B7m5iJbJcykQyz/jA=
Subject key identifier: 85:F8:68:94:42:EE:3C:14:84:BF:45:96:48:39:8D:F4:BC:F3:67:20
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 1BE16284
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/hfholELuPBSEv0WWSDmN9LzzZyA.roa
Signing time: Sat 01 Jan 2022 01:59:41 +0000
ROA not before: Sat 01 Jan 2022 01:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51840
IP address blocks: 185.27.58.0/24 maxlen: 24
185.27.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467755652 (0x1be16284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Jan 1 01:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85f8689442ee3c1484bf459648398df4bcf36720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:8b:01:49:b1:ab:3c:88:7b:d8:a3:5e:54:
1a:95:68:1d:fb:6d:6e:db:05:e4:10:3b:fa:60:ac:
c1:59:80:bc:29:8f:a2:57:37:d5:53:d0:25:13:48:
3a:c2:5f:a2:56:9c:c3:ae:2e:83:38:17:37:5f:9c:
e5:f8:8a:0b:77:c6:76:9c:fe:25:3a:2d:34:54:6a:
fc:ab:d5:da:b9:fe:17:f6:9b:32:d2:aa:25:73:9d:
89:02:75:d2:50:ab:26:33:9a:de:96:c1:30:7f:cb:
cf:65:b7:37:72:58:17:4f:60:9a:f5:fe:25:2c:48:
af:29:b6:78:63:8d:7f:b6:9a:5b:4a:af:ff:4b:4c:
68:2a:01:59:a7:e4:6a:e5:56:db:2a:45:ea:e2:da:
83:76:7b:55:81:fd:5b:fc:62:c9:d9:c8:1b:e5:c1:
56:33:5b:58:d5:cb:57:5b:a7:22:80:83:31:d2:32:
49:d5:f8:38:cf:c9:93:1e:e7:b7:97:9b:1e:bb:fb:
6e:e3:cb:30:77:d5:8e:60:5b:a0:25:38:62:fe:88:
fa:3b:34:04:ad:f5:59:5a:60:f9:53:5c:ea:19:b5:
5e:67:fb:ff:b0:ad:b4:98:73:20:2e:5e:9f:8f:41:
36:96:01:bd:a5:9b:85:fe:2e:76:82:c0:ff:49:27:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F8:68:94:42:EE:3C:14:84:BF:45:96:48:39:8D:F4:BC:F3:67:20
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/hfholELuPBSEv0WWSDmN9LzzZyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.58.0/23
Signature Algorithm: sha256WithRSAEncryption
53:70:95:71:05:a5:39:73:2d:06:f1:55:78:c8:a4:4e:18:2b:
9e:12:7e:96:db:82:a2:21:c3:ce:12:62:1e:37:0b:3f:7e:08:
f6:9d:2c:1a:58:49:d8:02:97:7c:44:ca:9d:e7:bb:61:9a:e9:
a7:59:b9:2e:53:07:ff:80:dc:81:22:1e:70:7a:99:27:39:77:
5d:0a:89:6c:bc:95:64:dd:c7:c3:ca:f4:be:f8:cf:cc:1f:ea:
fe:6f:75:d2:b2:f6:e1:cc:8e:d6:38:a6:f7:e7:38:84:7d:ca:
88:79:74:d8:d1:4b:a0:2c:b1:27:9c:35:f5:01:17:55:ff:78:
be:b3:4c:a4:60:5c:d1:3f:cd:99:a1:ca:09:dc:13:ad:b9:8c:
4a:d9:e7:9a:b8:e7:17:02:cc:46:1b:9b:bf:7c:d5:65:71:ba:
8f:17:85:bd:37:0e:a9:bb:68:fb:33:b9:01:b9:85:b3:5b:e5:
db:2e:4d:0d:26:07:6b:18:b8:85:14:2e:d4:24:44:b8:55:25:
1f:ff:f9:b1:80:e5:e2:68:8e:a5:c2:71:fc:61:9c:b7:dc:5f:
75:ab:3a:c1:12:6f:c2:56:47:54:67:54:a4:af:3b:e9:c5:fb:
04:7f:e6:f9:f5:5a:8b:65:e7:94:bb:ec:da:a4:c1:e7:ea:92:
08:b3:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:21 2024 by rpki-client on console-ams.rpki-client.org