Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/iVLoqANb10twd_ZXvDNt8p2Lp_A.roa
File: iVLoqANb10twd_ZXvDNt8p2Lp_A.roa (raw, json)
Hash identifier: bjtO7PNaL480gB0G7hctkn1xoQaw3zW94/uWyVm+Dl0=
Subject key identifier: 89:52:E8:A8:03:5B:D7:4B:70:77:F6:57:BC:33:6D:F2:9D:8B:A7:F0
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 0EE355B1
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/iVLoqANb10twd_ZXvDNt8p2Lp_A.roa
Signing time: Sat 01 Jan 2022 09:02:54 +0000
ROA not before: Sat 01 Jan 2022 09:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202823
IP address blocks: 185.150.221.0/24 maxlen: 24
185.150.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249779633 (0xee355b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Jan 1 09:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8952e8a8035bd74b7077f657bc336df29d8ba7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:55:00:20:dc:4d:f6:a5:dd:cc:4a:da:0c:
f3:06:67:52:35:24:81:7d:41:af:11:03:05:7b:37:
ca:32:0f:20:6f:a4:b0:72:c8:8f:82:34:0c:70:ea:
81:2c:4b:fc:d7:aa:99:ae:08:d2:65:45:cc:57:7e:
31:39:e5:7c:b3:18:20:30:de:eb:6f:42:47:a4:67:
d1:f4:28:04:b3:31:db:48:b1:73:fc:2e:8e:22:34:
5b:49:f5:e0:ab:b2:2e:37:c5:71:55:4d:6c:0b:ae:
0f:f2:77:b2:a3:a2:f5:6b:21:74:73:d8:72:84:91:
3c:4d:64:a4:f8:58:13:ea:dc:f7:ca:d7:4a:01:7b:
de:eb:d3:7e:b6:6d:45:de:9a:24:41:10:a4:0b:ae:
4d:cf:30:59:cc:e8:84:f9:f0:6d:5e:8f:7b:ac:bd:
4c:55:6c:e7:cf:be:c0:ad:39:3d:79:fc:b1:82:d1:
be:95:cb:ee:25:83:6c:bf:6f:22:b6:31:49:7c:e0:
84:e8:47:4e:a0:fb:b1:eb:fd:9f:9a:be:2f:77:1d:
89:c0:1f:44:d7:38:02:7b:f5:75:bc:82:34:74:fa:
e9:48:ea:c7:fe:b7:1f:ab:a0:2b:4a:a0:d6:83:28:
d9:61:10:82:f9:da:1f:c7:ca:d0:76:25:44:c5:23:
b5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:52:E8:A8:03:5B:D7:4B:70:77:F6:57:BC:33:6D:F2:9D:8B:A7:F0
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/iVLoqANb10twd_ZXvDNt8p2Lp_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.220.0/23
Signature Algorithm: sha256WithRSAEncryption
15:86:a3:75:94:ac:37:01:d4:91:fe:b5:a5:3e:5b:84:a1:fb:
14:70:22:dc:3c:04:be:5a:74:47:33:62:46:28:e1:9b:99:6b:
b7:e7:8a:8c:44:21:87:d3:5f:80:14:9b:eb:ae:ba:74:54:83:
47:d6:42:2c:d6:7c:4c:67:4c:22:57:d1:7b:ae:be:08:5e:2b:
27:f7:a9:41:83:ce:99:f7:5d:80:a7:8e:f8:a6:cc:db:9b:a5:
f4:cd:d3:88:fc:47:7d:d3:22:17:97:19:d1:8c:7e:8b:8e:fc:
d9:8e:f5:bd:8d:f2:80:cd:97:93:e7:ad:73:17:f8:ce:de:d5:
4f:c7:c3:d0:03:7d:f3:da:a3:a3:36:a2:be:47:d6:a3:65:c7:
b3:43:83:3b:18:d1:2b:dd:50:c3:3a:a0:48:bd:4c:91:44:d7:
bc:ce:a6:75:23:7b:49:c8:2c:d6:73:0f:51:b3:2a:ec:59:01:
13:9f:6a:5e:1f:9a:a2:6a:08:a7:ac:1f:d1:bf:f1:f4:ab:14:
31:8b:16:0a:c3:2d:bf:1a:42:68:19:8c:cf:4b:b8:f0:09:1d:
b1:d2:11:1c:47:f9:b7:2a:e1:6b:12:e4:16:2c:1a:a1:3b:ea:
b9:47:bd:83:22:b1:3f:b3:67:50:d2:ae:aa:74:7a:1f:c6:84:
d6:f0:e4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:40 2024 by rpki-client on console-fra.rpki-client.org