Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/1-JV6gqwX9ZnJpqvzbNkrBLNUD98.roa
File: 1-JV6gqwX9ZnJpqvzbNkrBLNUD98.roa (raw, json)
Hash identifier: 71rEg1AW6PUmFgJkv2SP7gxc77rhAULUcp2lHRh6Sdk=
Subject key identifier: F8:95:7A:82:AC:17:F5:99:C9:A6:AB:F3:6C:D9:2B:04:B3:54:0F:DF
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 0182AC629963092465BA082304BD8FEE9286
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/1-JV6gqwX9ZnJpqvzbNkrBLNUD98.roa
Signing time: Wed 17 Aug 2022 15:18:39 +0000
ROA not before: Wed 17 Aug 2022 15:18:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200509
IP address blocks: 185.66.56.0/22 maxlen: 22
185.66.58.0/24 maxlen: 24
185.66.57.0/24 maxlen: 24
185.66.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ac:62:99:63:09:24:65:ba:08:23:04:bd:8f:ee:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Aug 17 15:18:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8957a82ac17f599c9a6abf36cd92b04b3540fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:4a:d9:68:36:58:32:39:e9:03:88:bf:50:
2e:b3:6b:3d:04:34:3c:44:06:99:b6:7f:97:3a:29:
56:f0:67:46:db:c8:00:1a:14:c7:01:22:62:ba:a7:
a2:aa:1d:f6:de:90:c3:9a:f2:cd:92:66:fe:9a:29:
98:a0:13:9d:70:3c:a8:cb:0f:30:c8:88:f9:13:61:
f2:66:b6:ab:2a:31:12:e3:68:7d:81:3e:19:b7:bc:
9f:e8:a9:38:7f:9d:a2:79:ed:99:cd:5d:80:bf:43:
0b:79:6f:b0:f2:4c:0f:45:41:28:82:fc:e9:26:9e:
c3:09:17:af:c5:37:b9:71:0d:b6:f9:6e:d4:2b:58:
e5:02:d6:e4:b5:38:2c:b0:4a:6b:89:eb:ec:b9:cc:
f4:fa:97:c7:3e:7b:9a:1b:d8:02:a0:e9:d0:f2:7f:
b2:c9:f4:c7:fe:35:cf:64:ce:e9:db:47:da:94:44:
3b:43:23:c6:b7:f4:03:40:69:72:84:ce:ff:d6:83:
b4:98:d1:30:8a:b9:ea:1e:85:58:0c:44:71:e4:f0:
c9:48:fd:3b:4c:b1:23:7d:23:59:70:41:5d:54:e5:
ae:80:ac:12:17:e8:4a:05:46:3f:4c:bf:52:57:73:
8a:49:db:a9:41:a6:f6:2d:e9:73:5a:fa:a4:44:aa:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:95:7A:82:AC:17:F5:99:C9:A6:AB:F3:6C:D9:2B:04:B3:54:0F:DF
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/1-JV6gqwX9ZnJpqvzbNkrBLNUD98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
74:86:74:00:23:ca:be:30:a4:1b:6c:e1:bf:ba:34:03:a2:e4:
51:c9:f6:e0:c5:2a:1c:58:f0:d7:9b:6f:fc:8f:b1:a0:f6:dd:
dd:2e:51:5a:c2:79:e3:24:aa:57:c0:45:a3:fc:39:e7:e2:c5:
dc:7c:98:c4:0c:bf:c0:d7:27:62:9e:1c:4c:6f:c4:20:b4:0f:
6f:79:cc:98:c2:01:d1:61:f7:14:67:4b:5d:f7:da:a6:23:0b:
48:3c:34:74:9a:b9:c1:9d:32:48:1c:bc:f5:fc:9c:74:f6:14:
46:8c:f2:84:cb:3d:27:ae:d0:a8:fd:36:7a:12:8f:13:a1:12:
4a:7a:32:8b:22:67:96:5c:51:61:dc:15:55:64:ea:c8:73:d2:
75:8a:fa:66:28:a3:19:37:74:48:78:0a:2b:77:7b:50:9b:23:
f3:04:30:b2:15:c8:30:69:08:2c:08:5b:da:4d:68:8b:b7:69:
8b:6b:ec:8d:50:47:15:7e:55:78:fb:e9:6f:61:68:8b:32:7f:
93:3d:59:1e:b9:00:58:37:91:a5:7f:bd:ee:52:33:e7:b9:79:
be:a3:51:f3:5e:0b:2e:8d:86:ee:7a:09:fe:6d:de:d1:67:28:
79:c4:6b:8f:fa:c4:ff:17:23:1b:64:cc:77:03:43:b5:f8:75:
35:1c:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:08 2024 by rpki-client on console-fra.rpki-client.org