Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/qhrwRjhLaSH7h3VT68cDQ6sJ7zg.roa
File: qhrwRjhLaSH7h3VT68cDQ6sJ7zg.roa (raw, json)
Hash identifier: kMYXX/aPE4hn9rMRy2Ff7DpZB56a0Rvsb8L6np+DDR8=
Subject key identifier: AA:1A:F0:46:38:4B:69:21:FB:87:75:53:EB:C7:03:43:AB:09:EF:38
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 04637915
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/qhrwRjhLaSH7h3VT68cDQ6sJ7zg.roa
Signing time: Sat 01 Jan 2022 09:55:19 +0000
ROA not before: Sat 01 Jan 2022 09:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39650
IP address blocks: 185.66.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73627925 (0x4637915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 1 09:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa1af046384b6921fb877553ebc70343ab09ef38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:64:fb:70:17:08:c3:0a:38:28:10:44:0f:
f4:61:64:2b:80:4a:77:be:af:4b:0d:0b:2d:27:5c:
f9:f4:a9:02:cd:3c:7d:48:e1:fe:02:06:22:42:8f:
71:dc:06:8d:38:8d:1e:a7:a1:82:80:d4:b0:f8:c9:
5f:61:45:e0:75:13:bd:21:71:e0:c1:c4:e2:2e:82:
7a:4b:2f:c4:65:d3:ba:d8:89:d6:98:47:5b:b1:66:
15:ef:ff:fe:50:9a:56:9c:2d:21:77:9b:6d:69:1b:
c0:2e:76:dd:69:f0:88:f4:a8:46:84:b2:ec:1d:e9:
cc:98:36:16:f2:44:02:8e:a1:66:12:97:09:b2:54:
90:59:c8:27:54:eb:80:31:74:7e:e4:83:bb:37:0f:
c6:04:14:ce:87:92:e2:dc:99:97:a5:2c:49:94:7b:
88:47:f8:26:d6:09:b4:bf:63:96:3b:1b:ec:18:8f:
0c:97:90:73:56:64:6a:10:6c:63:e9:4a:ae:8d:5c:
ec:13:5e:06:f2:58:9b:89:a1:7d:8e:66:e2:4f:77:
01:b5:27:50:37:22:4f:29:95:e2:85:94:61:b4:c8:
90:e5:f8:1f:1e:11:0e:33:cf:7b:bf:c1:45:d8:6b:
f3:16:b5:ba:7d:b1:b1:78:df:fa:43:51:c5:cf:c3:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:F0:46:38:4B:69:21:FB:87:75:53:EB:C7:03:43:AB:09:EF:38
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/qhrwRjhLaSH7h3VT68cDQ6sJ7zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a4:28:8c:7c:ab:b0:23:81:e8:a7:1c:8f:09:26:b6:a5:88:
de:51:a9:0a:3d:f8:f2:4e:50:bc:37:84:d7:6f:26:0e:7f:6a:
0e:ef:4b:42:bb:ed:8c:c4:f4:62:ff:45:ce:d7:32:df:89:37:
6d:18:8e:6d:67:dd:06:8d:af:68:39:5f:d4:82:d9:ad:4a:84:
e1:1f:25:4f:5d:4a:b6:ca:18:39:84:6a:ee:fd:ba:0b:f8:fe:
03:03:ea:f5:02:c4:d2:5a:10:b8:16:57:fb:9f:53:4e:2c:3e:
7e:a7:8d:3e:43:80:3b:56:65:51:8a:d0:3f:0b:0c:27:df:37:
dc:53:5f:c5:ff:8e:56:f3:83:7d:7e:7d:bf:32:5c:1b:2a:da:
00:5e:03:40:8d:23:7c:3e:11:ba:91:01:89:f0:88:8f:2b:f0:
22:7e:2c:d2:ff:b6:b1:90:03:1b:3a:c4:f9:a9:7c:9c:e1:91:
df:ba:de:11:55:73:82:6a:d1:c5:ec:b3:7e:1b:50:10:11:db:
f1:c1:d4:98:d6:bd:0b:d4:2d:1a:ed:8e:ce:71:a3:51:d0:46:
cc:9f:8c:2a:a1:d1:5f:b3:d2:41:f1:50:d4:da:21:f9:bd:a8:
e9:c4:61:c0:1d:98:be:38:04:50:a1:6d:60:b1:40:00:ef:15:
61:4c:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:24 2024 by rpki-client on console-ams.rpki-client.org