Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/8tc4xHns4GV_VME9lhyZb-cEuSM.roa
File: 8tc4xHns4GV_VME9lhyZb-cEuSM.roa (raw, json)
Hash identifier: 1SbNPAKOAw5QIy7CuTvwnGjz4H4RZkrJsuhSjSZ/aRU=
Subject key identifier: F2:D7:38:C4:79:EC:E0:65:7F:54:C1:3D:96:1C:99:6F:E7:04:B9:23
Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial: 5D47
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/8tc4xHns4GV_VME9lhyZb-cEuSM.roa
Signing time: Fri 08 Apr 2022 11:56:38 +0000
ROA not before: Fri 08 Apr 2022 11:56:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206078
IP address blocks: 185.180.34.0/24 maxlen: 24
185.180.33.0/24 maxlen: 24
185.180.32.0/24 maxlen: 24
185.180.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23879 (0x5d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Validity
Not Before: Apr 8 11:56:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2d738c479ece0657f54c13d961c996fe704b923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:8b:2c:21:e9:61:ef:51:38:9d:f8:c4:d6:
4f:4e:03:f9:5c:39:c7:4f:58:03:75:a6:b3:d2:49:
06:ac:27:d2:da:cb:2d:df:cd:b3:70:ed:39:ac:15:
9b:fe:87:89:5b:2b:a0:bf:0e:a8:1c:f9:c2:5c:55:
b5:c9:27:ea:94:9d:4e:76:d1:62:72:c1:a3:a6:90:
01:1d:b9:9b:d8:f7:00:fc:2d:72:5c:5a:b6:ce:b0:
09:5a:21:53:a7:d8:da:5c:6c:a0:d2:55:40:9d:ab:
52:98:77:50:ec:d0:30:1d:e3:d6:12:66:e8:80:94:
65:02:d9:ca:73:93:bd:27:51:66:d7:dd:1e:95:43:
52:6a:f9:f8:55:29:02:39:58:e0:4e:b1:8c:e0:14:
62:86:93:3d:55:23:bc:80:25:5d:f7:50:99:43:ad:
d1:e6:19:7a:1f:6a:44:e4:3f:e5:d0:f7:d4:57:fa:
fd:2d:e3:85:8a:90:4c:d0:dc:b1:24:2c:1f:5f:48:
73:a5:32:69:dc:a5:6f:85:71:80:29:f5:b5:f9:c3:
bf:97:b3:d0:52:ed:5e:b1:f0:ed:01:f1:c7:af:88:
f1:57:f7:ad:f2:47:5d:95:09:7d:f9:56:66:67:d6:
84:54:80:57:ea:c6:d3:cc:f4:dc:40:58:aa:d1:fe:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:38:C4:79:EC:E0:65:7F:54:C1:3D:96:1C:99:6F:E7:04:B9:23
X509v3 Authority Key Identifier:
keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/8tc4xHns4GV_VME9lhyZb-cEuSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:3c:17:9a:fd:3b:d4:ff:2b:b7:1e:de:e1:3b:2a:a4:1d:56:
9e:ce:78:a6:ca:5d:f3:e1:ae:a1:4e:4e:62:b2:d1:c2:d9:36:
30:56:5c:7a:45:79:27:5d:fe:03:4e:38:ad:da:92:06:a3:50:
ab:2e:74:10:00:bf:0b:67:4b:40:bf:a4:0f:56:c3:4d:aa:e9:
c5:e6:05:e1:5e:74:4b:54:fa:22:60:23:04:a0:ea:eb:38:87:
1e:57:62:53:4d:f5:1b:88:97:72:34:98:ea:89:86:d1:42:d4:
6a:1c:0e:82:7c:9c:47:4d:89:db:e9:ff:04:a2:e2:ca:c2:60:
9b:3e:af:02:8f:be:3b:15:f1:b0:45:a0:51:ba:85:8d:9b:5b:
ab:ea:14:78:61:53:d0:8e:41:94:0a:e4:eb:7b:fc:16:62:0b:
ac:e7:cf:ac:57:04:fe:ca:45:10:70:f6:a7:2d:44:70:c9:65:
6c:39:3c:64:c4:2f:41:ab:d2:68:4d:c8:cf:3b:0a:d0:c6:4a:
81:a0:9c:bc:6e:6e:12:93:54:d9:45:42:39:d4:51:94:91:e4:
35:67:9f:2b:38:be:88:ea:e6:e4:16:0e:8a:d7:02:6b:08:3a:
f6:b6:66:3b:69:73:97:5a:60:d3:cf:34:f0:63:fd:ff:d8:32:
0d:85:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:57 2023 by rpki-client on console-ams.rpki-client.org