Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/ss99TJV82BqlylOl7jN2yRAu26c.roa
File: ss99TJV82BqlylOl7jN2yRAu26c.roa (raw, json)
Hash identifier: FeorYVQORx9MIw996UFBQruHnDBBwDsvT9XmpaRa1yI=
Subject key identifier: B2:CF:7D:4C:95:7C:D8:1A:A5:CA:53:A5:EE:33:76:C9:10:2E:DB:A7
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 03CA0D7C
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/ss99TJV82BqlylOl7jN2yRAu26c.roa
Signing time: Sat 01 Jan 2022 00:52:31 +0000
ROA not before: Sat 01 Jan 2022 00:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 185.205.80.0/24 maxlen: 24
185.205.81.0/24 maxlen: 24
185.205.82.0/24 maxlen: 24
185.205.83.0/24 maxlen: 24
185.46.186.0/24 maxlen: 24
185.46.184.0/24 maxlen: 24
185.46.185.0/24 maxlen: 24
185.46.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63573372 (0x3ca0d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Jan 1 00:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2cf7d4c957cd81aa5ca53a5ee3376c9102edba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:ce:2e:b7:0d:e5:e6:a2:46:11:b9:a4:db:
7c:fe:e4:b0:1e:2a:12:5d:79:40:44:a0:e4:e5:cf:
bf:25:b0:15:66:ba:83:28:68:86:a9:23:6b:2d:ed:
bd:b3:50:7f:d2:af:be:95:c9:ce:2c:eb:07:f1:cd:
23:11:52:e5:4a:b5:7f:d3:94:a1:c1:46:43:8e:ec:
7d:b6:b2:db:a0:c2:9c:f8:c1:04:8f:a8:82:92:40:
dd:0b:83:5b:98:f8:24:61:66:0b:53:5e:a4:63:68:
28:47:fb:c4:94:83:ea:bc:ae:00:7d:7b:d3:f0:4b:
ae:64:42:81:d7:b8:58:3d:bf:71:81:a3:69:ef:ec:
a3:db:3a:4f:a2:73:50:2e:4d:c7:46:c5:9f:5f:e3:
93:57:a0:f3:02:67:81:da:48:b3:7c:7e:24:bc:4b:
c8:8c:c7:99:2d:bb:24:46:4b:b0:97:c6:00:99:09:
1c:2c:c4:a3:ef:2d:c7:93:68:ec:83:92:0b:fb:35:
c9:bc:a2:ec:13:41:a1:56:e7:d5:f0:a6:00:54:91:
c0:4a:56:8e:ce:c5:17:10:bd:2d:34:20:35:55:4e:
96:ce:bd:d2:96:4d:92:55:8c:0f:13:50:c7:9d:c7:
27:9b:38:d9:ca:05:13:ab:15:30:3e:dd:de:69:c6:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:7D:4C:95:7C:D8:1A:A5:CA:53:A5:EE:33:76:C9:10:2E:DB:A7
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/ss99TJV82BqlylOl7jN2yRAu26c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.184.0/22
185.205.80.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ec:5b:59:59:f3:fd:cb:6c:3c:85:22:eb:1e:22:50:04:4b:
94:2b:44:7e:5d:22:fa:4b:2e:28:4f:8a:7c:80:02:47:20:e2:
e0:46:af:b7:81:4a:b8:b3:04:ae:fd:10:9b:89:d2:00:c1:af:
7c:3b:1a:c9:1e:fd:c4:f7:49:88:7f:4e:12:79:33:26:3d:19:
da:99:9b:c0:33:29:6b:91:2f:d4:cf:e1:46:6a:9c:96:18:51:
e6:bb:07:fb:b8:2d:b0:79:b1:18:57:13:71:e6:f9:43:ee:bb:
ae:7a:fd:08:5a:1b:2a:ad:51:7a:a1:6a:22:2c:40:77:3e:f8:
56:06:b8:67:ef:da:31:12:e2:36:fd:84:ed:3a:37:48:78:c2:
29:eb:56:5d:ef:40:83:45:d1:a9:15:83:89:2a:9e:61:aa:9f:
23:29:bf:11:12:ed:57:5e:5c:57:90:a2:42:3b:65:83:4a:88:
36:7b:ce:d8:8b:19:b3:52:9b:21:76:91:d5:89:f0:b7:98:0c:
d4:72:49:00:ab:23:13:2f:c0:fa:6c:84:91:93:d3:5d:ca:93:
03:73:53:3e:3e:7f:bf:1b:a1:82:e9:2c:95:f1:64:89:6e:bc:
b8:d3:d1:01:e7:92:24:1f:ea:f9:0a:49:ca:33:9f:6f:89:37:
88:7c:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:56 2024 by rpki-client on console-fra.rpki-client.org