Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/6OMYiDLbARaYD6DCG2X15i4JbxI.roa
File: 6OMYiDLbARaYD6DCG2X15i4JbxI.roa (raw, json)
Hash identifier: hg1q7Gp9MQAZLbprT/khN2Xy9zgJAgxJrUWCdhpzKqU=
Subject key identifier: E8:E3:18:88:32:DB:01:16:98:0F:A0:C2:1B:65:F5:E6:2E:09:6F:12
Certificate issuer: /CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Certificate serial: 075F71
Authority key identifier: 01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/6OMYiDLbARaYD6DCG2X15i4JbxI.roa
Signing time: Wed 25 May 2022 04:05:31 +0000
ROA not before: Wed 25 May 2022 04:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202021
IP address blocks: 185.56.64.0/22 maxlen: 24
185.56.64.0/24 maxlen: 24
185.56.67.0/24 maxlen: 24
185.56.66.0/24 maxlen: 24
185.56.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483185 (0x75f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01628a415e1fa72ce1d03cd76219ce1b77c655c4
Validity
Not Before: May 25 04:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8e3188832db0116980fa0c21b65f5e62e096f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:55:a5:95:bc:c2:08:ba:55:26:38:b4:2d:
6c:2d:2e:4e:8a:cc:18:db:ec:fa:67:47:f0:db:31:
73:27:99:e3:95:c9:ae:72:54:02:6d:bd:df:a2:b1:
88:56:cd:b1:a1:60:64:e7:ea:29:30:ca:98:13:57:
77:e1:53:e5:1c:55:72:54:e6:fa:7a:2c:d3:54:64:
bb:91:7f:1b:b3:e9:d2:bf:e0:96:2e:5b:2a:aa:6e:
21:15:3e:13:e4:a1:b3:fb:5f:e8:bb:fc:2a:37:bc:
f8:ff:eb:5c:0d:d1:0b:3b:3d:4b:6f:6c:f6:03:9d:
25:2b:1a:49:5d:d5:36:8a:94:62:f9:e8:2b:6f:26:
44:77:d4:92:ef:2b:a2:58:90:8c:d1:3b:d7:f9:54:
90:fb:75:06:20:65:b4:cd:96:1c:9b:b0:11:d6:91:
18:11:fb:0f:3b:fc:cf:ee:d1:f1:59:ff:75:d9:fe:
11:a3:dc:c7:bc:d2:70:1a:d0:5d:51:c3:8f:93:92:
c9:48:ab:f3:72:96:7a:9e:b3:c7:e1:2e:21:54:a0:
51:18:93:49:77:ad:5f:fe:82:ba:fa:41:10:26:d4:
dc:38:e2:79:33:37:c2:11:96:46:bb:c4:4a:ae:f9:
c5:7e:97:33:53:15:80:84:b2:b7:81:4d:3c:44:1f:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:18:88:32:DB:01:16:98:0F:A0:C2:1B:65:F5:E6:2E:09:6F:12
X509v3 Authority Key Identifier:
keyid:01:62:8A:41:5E:1F:A7:2C:E1:D0:3C:D7:62:19:CE:1B:77:C6:55:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/6OMYiDLbARaYD6DCG2X15i4JbxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/81ce36-f952-429c-8fbb-7ff92f6dc3a4/1/AWKKQV4fpyzh0DzXYhnOG3fGVcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:8a:f8:0f:e5:06:b1:8a:da:0d:74:d5:45:3e:f4:b7:0d:4e:
75:a1:27:6f:03:b1:50:af:dc:76:d7:9e:35:f5:b5:75:80:49:
43:98:62:03:c0:ac:8f:ed:73:7c:c4:44:f0:ce:53:5b:7e:ba:
ed:b6:e2:b2:26:e3:f7:0e:72:ed:89:cd:86:58:c6:d1:b7:c5:
5b:fa:94:b2:8e:42:ae:e3:ff:9d:cf:0a:cd:eb:b3:78:1b:c2:
3f:05:40:98:e5:3b:e6:d1:df:3d:c0:0b:75:9b:3c:c4:5b:9f:
7e:84:93:36:5b:8b:78:79:e9:54:9a:cc:a2:d2:14:81:fe:1b:
a3:6d:4d:67:03:fe:56:1e:99:0d:c9:e6:52:5c:0b:79:2e:c1:
f8:50:8e:88:f7:45:ce:84:0f:a3:e8:9a:52:0d:fb:ef:15:68:
59:6b:fe:3c:d5:93:f0:18:23:1a:41:35:39:1d:d1:f2:80:22:
90:de:69:d1:22:96:36:0d:e2:4d:b3:a3:6f:6e:47:83:b9:b7:
d6:5b:eb:8a:7c:a1:f9:b4:d0:6b:33:37:e5:d4:2e:2c:51:a6:
54:02:20:ca:25:0a:8e:44:3b:cc:6b:ac:a5:90:2a:78:26:04:
b4:57:bf:3f:f3:e4:d2:08:44:2a:9e:27:9e:05:37:c3:37:3c:
67:2b:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:38 2024 by rpki-client on console-fra.rpki-client.org