Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/KFXoGlbBUKoIrFql3yNQiI6V1kY.roa
File: KFXoGlbBUKoIrFql3yNQiI6V1kY.roa (raw, json)
Hash identifier: +CEQwx2CDCQtxhU4NXp4asJAzAClvBQt2+X8fugMRhk=
Subject key identifier: 28:55:E8:1A:56:C1:50:AA:08:AC:5A:A5:DF:23:50:88:8E:95:D6:46
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 08246AB3
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/KFXoGlbBUKoIrFql3yNQiI6V1kY.roa
Signing time: Sat 01 Jan 2022 00:55:00 +0000
ROA not before: Sat 01 Jan 2022 00:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206449
IP address blocks: 185.186.111.0/24 maxlen: 24
185.186.108.0/24 maxlen: 24
185.186.109.0/24 maxlen: 24
185.186.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136604339 (0x8246ab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jan 1 00:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2855e81a56c150aa08ac5aa5df2350888e95d646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:43:57:2c:8b:d9:7d:0a:31:a0:90:48:ce:
83:02:b8:53:ff:28:8e:35:e8:cb:bb:45:f6:9b:b2:
33:a0:65:f0:74:ee:31:7b:d3:b4:6e:06:ec:eb:7b:
43:e4:b4:88:a7:b4:58:09:76:4d:87:97:c1:07:fc:
c2:7c:38:db:1d:dd:1d:6a:e5:78:33:68:59:ff:3d:
4a:6c:17:30:a0:2d:6c:f1:96:e1:3b:02:f3:b7:21:
49:5f:44:f2:bc:0b:3f:f1:28:f1:da:a9:f0:db:ca:
5f:38:7a:3b:f5:6d:4c:44:ad:94:7d:c2:26:6f:cc:
76:77:f0:fd:93:ac:92:64:a2:a7:a8:65:2c:ba:fb:
0c:45:b6:eb:d2:a6:c0:0e:59:9b:51:e0:ca:16:0b:
b5:cb:ec:56:0d:cc:2f:03:74:f4:93:ce:80:35:ea:
64:76:74:bb:8f:9b:c7:b4:29:3e:de:0b:e5:5d:7d:
65:51:14:9f:23:66:61:9f:5c:b9:14:bf:b1:0d:1d:
a8:c8:68:e1:d3:92:05:da:f2:1a:ca:b7:70:68:43:
6c:d3:25:38:a5:e3:db:46:4e:5f:dd:1e:63:6d:fa:
52:c9:ae:01:d9:79:80:6d:a5:90:10:bb:31:62:db:
69:84:21:78:65:18:94:2a:85:01:1d:f1:e7:80:42:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:E8:1A:56:C1:50:AA:08:AC:5A:A5:DF:23:50:88:8E:95:D6:46
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/KFXoGlbBUKoIrFql3yNQiI6V1kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.108.0/22
Signature Algorithm: sha256WithRSAEncryption
03:79:9e:dd:56:4e:63:4b:e0:db:31:0d:d0:2f:58:6d:a6:25:
14:d7:9b:d4:a7:e8:eb:58:63:bc:66:dc:b4:26:1c:9d:ce:3a:
d9:c3:5f:f2:59:f0:5b:dd:12:16:5b:8a:7b:7d:d2:5b:58:0a:
1d:34:b3:42:8b:ed:41:ff:0e:5a:6a:0e:cb:03:eb:b4:ef:e8:
42:62:7b:ba:e8:ed:01:c2:d8:3b:d2:d2:a8:b9:50:40:3e:1b:
18:ad:4a:02:4d:01:d0:b5:ef:c2:ae:cc:8f:38:b7:a1:70:05:
81:5c:f6:27:e8:4d:4d:1e:22:95:ff:a6:1a:11:36:83:9c:b8:
83:04:10:3f:3f:16:9c:de:73:00:9f:65:7b:25:e5:f8:07:a8:
01:bf:a1:cf:85:0b:ba:ba:a5:57:47:4f:76:32:ca:c4:bd:02:
e8:ad:8b:4b:73:8d:da:dc:82:5f:d1:ea:65:b1:ad:16:7a:84:
57:43:c2:40:7d:62:e9:ed:92:47:c0:c3:50:0b:17:21:1d:a6:
70:71:d1:66:0d:ac:97:5d:23:f0:4f:33:55:58:50:d7:e6:de:
01:15:5c:a8:d8:05:cb:9a:3d:dd:97:e0:32:1d:38:b6:77:cd:
d7:36:72:a9:e6:c8:3b:7d:24:cd:8e:c5:29:41:dc:b8:83:a9:
8a:87:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:20 2023 by rpki-client on console-fra.rpki-client.org