Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/jCSFUoNBC9KFcfjrujhTgh81kyE.roa
File: jCSFUoNBC9KFcfjrujhTgh81kyE.roa (raw, json)
Hash identifier: eGQ/mK5fYsYhMR2T741qiMbXIz2Yeu3KE2d92VF5GgA=
Subject key identifier: 8C:24:85:52:83:41:0B:D2:85:71:F8:EB:BA:38:53:82:1F:35:93:21
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 06356619
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/jCSFUoNBC9KFcfjrujhTgh81kyE.roa
Signing time: Sat 01 Jan 2022 05:54:31 +0000
ROA not before: Sat 01 Jan 2022 05:54:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.66.203.0/24 maxlen: 24
185.66.202.0/24 maxlen: 24
82.115.214.0/24 maxlen: 24
2a07:e3c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104162841 (0x6356619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jan 1 05:54:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c24855283410bd28571f8ebba3853821f359321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:cf:07:31:a3:90:8a:8f:8b:02:d3:b1:c2:
ae:55:1d:02:5c:3e:4b:e4:38:d6:6b:39:0d:ff:e7:
1a:3c:08:ba:1e:53:62:89:73:ec:92:20:b0:fd:72:
0e:c6:00:bb:dc:88:4d:96:ba:53:18:43:40:3a:79:
ba:9b:6e:cf:d4:aa:72:67:3a:37:23:f1:7b:d2:ce:
5b:97:3f:eb:66:03:03:00:3a:6a:49:d6:b8:a4:25:
de:4d:45:d5:10:49:5a:25:87:2a:a6:e5:35:a3:a1:
d2:bc:69:d9:83:72:68:80:df:6b:43:e1:6e:e7:37:
05:8e:bb:aa:be:d5:e1:fa:06:b5:16:4e:a6:70:c7:
96:bd:c4:36:dd:2d:1f:76:6c:fb:be:98:67:cb:93:
3b:4e:2d:d6:7c:8c:a8:d6:5c:cb:6a:62:d3:3d:5b:
ba:86:17:2e:3b:be:53:97:26:c7:9d:12:f1:11:15:
34:3e:5d:8b:c3:cd:bf:61:99:6f:25:09:23:92:b7:
b3:0e:47:f9:25:a7:ca:96:4f:37:80:9c:4d:7a:b7:
f9:18:1f:8f:bd:f0:e7:6f:db:3f:1e:19:80:70:0b:
db:4e:e4:e5:8e:80:42:bd:27:9b:f6:19:7a:7d:6c:
f6:88:44:b9:72:5f:70:aa:b4:2c:95:55:52:d7:c0:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:85:52:83:41:0B:D2:85:71:F8:EB:BA:38:53:82:1F:35:93:21
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/jCSFUoNBC9KFcfjrujhTgh81kyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.214.0/24
185.66.202.0/23
IPv6:
2a07:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
8e:5b:90:5d:25:08:4a:59:ea:e8:31:da:4d:34:90:1c:8a:ec:
82:3f:3f:52:63:ef:a4:24:f4:bb:1b:cd:ca:3f:73:87:8e:0f:
08:45:d0:be:02:c2:89:4f:a7:c4:ae:b1:1c:26:0a:1c:5a:74:
44:e3:5d:36:5a:1f:c7:24:8e:93:28:1d:b3:2f:2a:78:65:75:
0c:90:3f:85:ff:ec:a6:16:a0:02:30:33:6e:83:83:8a:1c:87:
72:c6:1a:c3:50:ee:bc:2a:a0:02:09:fe:e3:fa:08:91:44:00:
97:9c:c2:4b:8a:a5:ed:8b:23:46:6b:ba:6b:5b:63:f7:d2:27:
b2:91:b1:b9:22:23:b9:c6:5a:3a:94:0f:dc:3f:81:70:46:69:
a1:a2:9f:30:ea:52:30:1e:51:d1:5e:2e:43:5a:d5:c2:7f:bc:
4e:08:15:92:90:1d:0b:6c:e2:95:03:d3:6a:3a:cd:e9:56:18:
1c:35:a1:d8:16:56:78:17:a0:17:2f:97:e1:03:1d:fd:49:d6:
45:66:60:62:f3:fb:e2:a0:bf:58:62:99:a9:62:ba:ea:3a:6c:
a5:dc:9b:3e:fc:7f:45:5f:38:92:3d:74:d4:e8:0b:aa:36:eb:
c4:e8:d1:a0:d6:fc:ea:b2:b6:a1:6a:6e:e2:51:b9:48:b1:63:
9d:bf:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org