Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/WRkHOdW8jLekxMhm4MIdB3zG9nY.roa
File: WRkHOdW8jLekxMhm4MIdB3zG9nY.roa (raw, json)
Hash identifier: Xfar+R26rQdX4OIt87F1p/Su0ZMyQ/zK6UssLISL0Jc=
Subject key identifier: 59:19:07:39:D5:BC:8C:B7:A4:C4:C8:66:E0:C2:1D:07:7C:C6:F6:76
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 046DE7BF
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/WRkHOdW8jLekxMhm4MIdB3zG9nY.roa
Signing time: Sat 01 Jan 2022 04:51:20 +0000
ROA not before: Sat 01 Jan 2022 04:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41071
IP address blocks: 185.90.11.0/24 maxlen: 24
185.90.8.0/23 maxlen: 23
185.90.8.0/22 maxlen: 22
185.90.10.0/24 maxlen: 24
2a05:db80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74311615 (0x46de7bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Jan 1 04:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59190739d5bc8cb7a4c4c866e0c21d077cc6f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:53:43:05:8d:2b:71:94:32:81:3c:2b:59:
a1:ce:60:1a:27:1a:9f:a7:62:83:8b:8d:79:f6:23:
db:ee:0f:20:c8:f9:5c:d0:0f:b2:9f:78:76:83:7d:
4e:d3:03:e3:3d:c8:73:80:25:2d:7d:2a:b2:94:e2:
d7:a0:78:48:d5:e1:6b:37:f4:57:4a:87:36:77:5c:
40:a8:8e:ff:f5:1f:69:53:a7:98:d9:12:6a:ce:7d:
27:71:9a:f0:5b:f3:30:bb:12:57:7a:80:47:da:32:
3d:20:ff:d6:7a:9d:f7:db:a6:55:4a:9a:59:07:95:
79:7b:e0:45:e9:82:c0:5c:50:2f:ed:c4:b2:2a:d1:
76:81:a5:6f:a2:45:95:46:2e:bd:7a:60:10:e7:15:
50:bf:b3:1c:d8:17:29:bb:b6:fe:71:72:bf:b5:f5:
70:8f:04:dd:0b:21:d5:56:92:fa:b3:5d:56:6d:46:
9e:8e:10:50:75:11:bf:d3:61:a7:5b:0e:ab:ef:e5:
f4:4c:98:9b:96:eb:90:8b:7a:12:7f:0e:7b:dc:63:
84:64:f2:12:5b:48:70:1a:55:e2:d5:14:e6:4b:7e:
29:93:cb:5b:68:b5:28:8d:97:e7:4d:d9:b2:fb:0a:
11:65:66:1f:cd:02:17:f9:f6:df:16:31:0a:31:8a:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:07:39:D5:BC:8C:B7:A4:C4:C8:66:E0:C2:1D:07:7C:C6:F6:76
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/WRkHOdW8jLekxMhm4MIdB3zG9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.8.0/22
IPv6:
2a05:db80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:d8:6f:55:01:8b:92:40:08:7e:d9:2c:dc:74:ac:b1:5a:e8:
6d:1a:90:c7:fa:6c:f6:31:48:1b:fb:c1:e9:0c:bf:0e:90:db:
53:f8:ea:0c:25:6a:f0:ff:c3:a1:ad:9e:f3:78:fe:a4:09:62:
70:56:a6:ba:58:4c:35:0e:af:dd:ac:82:c7:73:dc:23:6a:dd:
a3:e1:fe:34:57:1e:e6:a3:eb:2a:66:19:51:d7:b4:d8:95:53:
b2:37:92:7b:fc:e5:dd:2d:f6:94:ec:d0:3f:33:aa:31:63:61:
f6:21:6f:56:3f:ab:51:fa:a3:c4:f3:c6:68:5c:1f:a5:b8:2d:
95:64:d4:3a:c4:b4:8e:5f:fe:90:3b:7e:a0:d5:59:02:94:bb:
9c:5a:77:7c:5b:02:a7:ab:e3:90:3f:bd:49:d7:b7:2c:f9:d7:
cd:fb:56:c7:ef:71:cb:a4:7e:f9:a3:a1:98:df:16:df:27:6e:
23:16:ec:47:79:3a:cb:51:cf:2a:70:d1:c3:3f:67:9f:01:42:
54:e9:c7:70:ff:fe:da:e3:c5:92:3a:ee:24:6b:3c:06:15:b0:
99:c2:d7:5e:f5:c0:ca:da:2d:40:f5:6a:11:67:00:a5:6d:ca:
3e:8a:b2:c1:33:82:d0:c5:c9:a6:fb:1d:82:a5:18:38:88:45:
b5:3e:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:28 2024 by rpki-client on console-fra.rpki-client.org