Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/CNaEI-q_z8CiFw5QV0dsSbHMp1Y.roa
File: CNaEI-q_z8CiFw5QV0dsSbHMp1Y.roa (raw, json)
Hash identifier: g8h+OKkrvIaJK0StkWMX0rOmQTtOKZrBUfN9vjJ4fuM=
Subject key identifier: 08:D6:84:23:EA:BF:CF:C0:A2:17:0E:50:57:47:6C:49:B1:CC:A7:56
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 0978BE5F
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/CNaEI-q_z8CiFw5QV0dsSbHMp1Y.roa
Signing time: Sun 10 Apr 2022 15:05:27 +0000
ROA not before: Sun 10 Apr 2022 15:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51786
IP address blocks: 185.117.12.0/24 maxlen: 24
185.117.13.0/24 maxlen: 24
2a06:8280:10::/44 maxlen: 44
2a06:8280::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158907999 (0x978be5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Apr 10 15:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d68423eabfcfc0a2170e5057476c49b1cca756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:4c:06:c3:6a:c1:2b:58:ec:0f:5b:9f:02:
c9:5e:2b:34:cc:f2:9a:e6:df:4b:a3:af:40:88:fb:
07:c7:84:1a:4f:4a:ab:e1:7e:52:2f:a4:cc:14:8b:
f9:4d:80:bd:8b:99:76:76:10:68:98:81:f4:2d:7b:
e8:72:fc:1c:62:df:95:93:e6:21:6f:6e:1c:fd:5d:
e1:d7:34:23:99:34:e0:37:f7:eb:68:ab:64:13:60:
61:9d:42:36:c8:a8:ef:aa:57:73:96:5f:a4:37:3f:
a8:0e:89:b4:25:d2:85:be:cd:f0:ff:26:ac:a5:53:
66:7d:95:cb:59:a6:2e:55:03:15:a2:8d:a5:98:07:
1b:0b:79:7c:fd:4f:58:80:ce:e5:41:c1:55:37:0f:
53:e8:62:35:65:00:d7:f8:16:e4:1f:62:12:e8:da:
92:d5:d6:f4:b1:1b:e5:54:a4:60:8c:5f:8b:ba:ee:
d1:fd:92:21:c9:65:91:ce:fc:9b:1e:ba:4b:63:95:
d5:b8:34:ab:a2:07:26:c2:9a:1c:42:c7:5e:c4:3e:
3b:1b:b9:b9:16:d9:d4:69:9c:90:78:1d:c2:63:64:
ef:b7:5c:cc:79:37:98:70:21:b8:0a:3c:1a:03:b5:
c4:dc:c7:21:df:cc:e2:71:e4:13:d5:ae:01:2b:2a:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:84:23:EA:BF:CF:C0:A2:17:0E:50:57:47:6C:49:B1:CC:A7:56
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/CNaEI-q_z8CiFw5QV0dsSbHMp1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.12.0/23
IPv6:
2a06:8280::/43
Signature Algorithm: sha256WithRSAEncryption
13:43:c5:2d:6d:cd:5a:bc:3e:b3:71:80:74:f8:e7:17:f2:72:
96:9f:6a:57:a6:10:05:fc:b4:56:a4:ce:9d:68:37:6f:ff:23:
32:8c:d3:e6:a2:6f:0d:cc:2f:64:c0:18:a5:a2:b3:e8:9c:ea:
cb:84:5a:8c:65:e1:c5:bf:e2:f4:0f:2a:01:72:ba:ce:8b:c6:
3d:2e:54:9e:60:ff:82:f2:55:7e:17:78:55:6a:f3:40:1d:9a:
7c:3b:f0:cd:b6:53:78:07:98:94:bc:f8:d1:d5:f8:88:c2:5a:
94:de:4f:6e:f8:7e:f6:18:bd:ff:29:93:6c:9a:8a:d1:ca:68:
be:d7:5e:ae:27:48:39:4c:5f:09:1c:b4:a0:d1:3e:69:23:6e:
79:65:d0:b1:2e:24:54:15:75:73:88:f3:87:9e:0d:95:4b:c8:
ee:1c:5e:17:38:c9:0f:4d:8e:95:44:dc:a3:be:ee:72:84:6e:
60:51:d3:1e:4d:92:85:2d:e1:ef:36:cb:e5:44:97:38:c9:c7:
5c:7c:91:c0:5a:6d:c3:2c:05:52:14:31:57:7f:8a:35:7c:ac:
33:d8:0a:89:79:97:ee:69:a7:4b:bc:6e:a8:38:95:24:12:21:
d9:a4:a2:07:11:20:89:bb:a1:ff:56:b2:30:81:9a:62:9d:94:
9c:d7:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:53 2024 by rpki-client on console-ams.rpki-client.org