Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa
File: 9N0owkG11_hLEG5qrbTLxgcAwF8.roa (raw, json)
Hash identifier: gnniG31B3KZX8yIy83k1deV5SWGKF/d46MPD8/00ogk=
Subject key identifier: F4:DD:28:C2:41:B5:D7:F8:4B:10:6E:6A:AD:B4:CB:C6:07:00:C0:5F
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 0E8592B2
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa
Signing time: Fri 20 May 2022 10:09:29 +0000
ROA not before: Fri 20 May 2022 10:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44794
IP address blocks: 185.235.80.0/24 maxlen: 24
2a0d:4d00:80::/48 maxlen: 48
2a0d:4d00::/48 maxlen: 48
2a0d:4d00:3::/48 maxlen: 48
2a0d:4d00:1::/48 maxlen: 48
2a0d:4d00:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243634866 (0xe8592b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: May 20 10:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4dd28c241b5d7f84b106e6aadb4cbc60700c05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:53:7f:27:60:b9:e1:5d:14:ab:43:ab:8c:
f6:3d:04:84:ce:55:4b:d0:15:be:8d:6c:20:0b:5a:
6d:68:77:b8:99:5d:30:3d:c7:25:83:0c:47:cc:e5:
ad:7b:86:92:c7:95:aa:af:7b:34:d0:60:40:09:35:
e2:09:77:de:37:26:26:53:de:5e:ee:5f:7a:e3:f1:
ae:9c:75:cf:90:67:1a:2e:5f:5a:6f:ac:ad:77:6f:
8a:18:d4:17:11:6f:e1:e5:bb:d6:1f:e2:df:a5:9b:
a3:5d:50:6c:87:be:a9:d8:bb:bc:e7:cc:5a:53:f5:
3a:50:fa:d9:9d:14:fd:35:92:61:12:b1:ac:8f:d2:
4e:0e:81:2b:cf:42:f7:04:1b:e5:1f:c7:01:0e:58:
cf:92:d3:c7:15:48:a7:0c:66:20:91:bb:6f:6b:33:
ed:d8:d6:90:a9:6c:cb:20:c7:80:63:57:7e:9e:50:
88:43:df:cf:4c:f4:77:53:15:da:96:77:61:a7:a4:
5d:4a:48:50:c9:5b:60:79:ad:01:f2:0e:49:f6:1a:
61:42:db:d1:3b:41:0a:90:68:ad:4e:68:07:d6:94:
8e:2b:a8:88:c9:67:c4:c0:5d:98:d2:5f:7d:f7:d6:
8c:81:91:13:6e:c1:48:e1:81:8c:a6:5e:f2:cf:c4:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DD:28:C2:41:B5:D7:F8:4B:10:6E:6A:AD:B4:CB:C6:07:00:C0:5F
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/9N0owkG11_hLEG5qrbTLxgcAwF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.80.0/24
IPv6:
2a0d:4d00::/46
2a0d:4d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
65:62:ed:34:91:3b:90:94:1f:f6:fb:c6:78:08:b3:28:80:cb:
d1:67:bc:a0:74:d4:ac:a8:e3:47:61:88:c3:00:56:d0:04:f1:
15:14:fc:c0:c1:ba:d0:12:93:e1:7c:fa:42:65:b7:86:74:b2:
0f:1c:19:77:c5:42:5a:b3:32:40:53:ca:11:86:e6:ec:9c:1d:
29:5a:b4:9a:f8:ca:bc:48:e9:61:d5:42:b5:f4:35:4c:db:9a:
99:3d:e7:d7:86:46:dc:83:17:a3:ca:f8:56:f1:f6:a4:15:cb:
c8:99:41:d1:ff:98:29:cf:ea:b4:38:31:cf:5c:e3:04:48:e1:
18:2a:f8:18:0b:d5:16:17:8c:ce:57:7e:df:24:a5:59:c7:83:
98:96:0c:83:f9:42:c0:69:20:da:47:c3:c1:8d:89:10:26:31:
31:56:0c:86:72:52:93:eb:22:38:69:52:e7:33:7a:78:ea:6f:
ed:a4:ae:e3:27:d5:aa:eb:64:3e:68:f2:60:8c:73:40:8a:34:
90:71:f9:6f:4f:0a:f2:fe:a9:a5:b3:cb:b4:73:63:7f:18:02:
b0:c5:df:14:00:bd:e0:2d:16:c7:df:84:5c:fb:91:10:c8:ec:
5a:4f:5a:22:93:12:3a:f3:56:eb:6a:00:f8:2c:54:2f:9d:02:
fd:df:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:12 2024 by rpki-client on console-fra.rpki-client.org