Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/cLXKN6I7AGZFFIM5Pu_FO3yhHzo.roa
File: cLXKN6I7AGZFFIM5Pu_FO3yhHzo.roa (raw, json)
Hash identifier: a4pXBJ8TfRH928PsZIdOMgjR7bQovBUCdHPzpDcj7/U=
Subject key identifier: 70:B5:CA:37:A2:3B:00:66:45:14:83:39:3E:EF:C5:3B:7C:A1:1F:3A
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 01846289B6CC54275F811DD869F227101FCB
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/cLXKN6I7AGZFFIM5Pu_FO3yhHzo.roa
Signing time: Thu 10 Nov 2022 17:15:03 +0000
ROA not before: Thu 10 Nov 2022 17:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20249
IP address blocks: 185.55.132.0/22 maxlen: 22
185.55.132.0/23 maxlen: 23
185.55.134.0/23 maxlen: 23
185.55.134.0/24 maxlen: 24
185.55.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:89:b6:cc:54:27:5f:81:1d:d8:69:f2:27:10:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Nov 10 17:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70b5ca37a23b0066451483393eefc53b7ca11f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:7b:00:3c:a7:19:83:dc:9f:c0:69:86:58:
7e:a2:d2:90:d6:dd:93:95:c6:33:5c:ba:78:59:b1:
86:af:36:b2:52:11:bd:df:1d:05:b9:c5:1f:aa:f1:
16:42:d2:ff:16:0e:11:f7:ac:8a:3b:c3:ca:d8:11:
c1:18:4c:8c:f7:46:e0:1f:a5:19:a9:6f:85:1c:4c:
96:bd:00:2b:8b:b2:56:d8:db:6c:b0:90:1d:4a:7f:
5b:69:9d:93:f2:17:9d:62:3d:31:ba:46:6c:fe:ad:
14:bd:33:0e:9a:c3:c6:81:96:c4:cf:56:35:bd:75:
76:9d:3b:67:64:de:a9:55:be:85:fb:c4:83:b7:4e:
8a:8a:e7:48:4e:63:9d:e9:d3:55:9c:ed:33:aa:97:
b1:71:a8:ad:2e:0d:d0:53:1f:3e:a8:80:6c:fa:04:
11:b7:ef:d0:de:56:a0:55:13:1c:0f:0f:a5:c7:d9:
2d:d0:49:6d:3f:0c:d4:94:cb:c0:b4:0b:b7:30:c0:
12:f0:b4:b4:97:b6:57:ec:ba:9d:da:38:20:ab:b8:
12:db:eb:db:9b:46:d4:93:51:d6:7e:d8:5b:f4:48:
4c:92:bb:2c:80:45:af:f2:26:58:ec:68:4d:ae:4b:
61:8e:da:a9:78:c9:5b:ef:70:24:bb:f1:9c:8a:57:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:CA:37:A2:3B:00:66:45:14:83:39:3E:EF:C5:3B:7C:A1:1F:3A
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/cLXKN6I7AGZFFIM5Pu_FO3yhHzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
51:b8:7c:38:69:14:68:63:d5:fd:34:a5:98:65:3e:01:22:19:
8c:32:15:20:00:d4:76:d1:81:8c:56:4d:0c:41:78:95:69:5d:
59:df:3e:90:25:b8:c7:8a:a2:5f:c7:e9:0b:49:60:b7:78:24:
29:c1:2a:13:16:4c:a9:22:e6:61:72:82:df:ce:b6:c2:84:ba:
88:01:25:ab:a1:fa:66:57:cb:89:f4:6b:1b:1d:6e:13:67:07:
f6:34:f6:b6:34:ba:4f:38:17:10:3d:86:23:f1:8f:69:e8:f4:
b8:c3:bf:4e:d3:cc:c0:96:8f:af:95:9c:41:ab:5b:38:ef:48:
f8:09:24:25:a9:e0:2d:bb:c2:bf:73:d0:e6:af:8b:22:6d:83:
9c:95:ad:08:1d:9c:b2:ed:c2:89:db:08:bf:91:1b:18:79:05:
d1:10:44:65:7e:d4:81:e2:e6:85:02:aa:ac:33:e1:a6:91:00:
a2:6a:4c:b1:f6:07:00:11:cf:ef:da:d5:55:b1:b3:76:a7:a0:
03:4b:58:ce:06:38:60:12:a4:b7:78:81:5a:a2:23:ba:1d:c9:
2b:b1:35:5b:63:a7:1a:b1:c7:3d:79:4b:8a:94:7c:1c:1c:5c:
ac:e6:c8:e9:87:56:7d:10:b0:24:73:3c:a5:95:e7:39:b6:91:
05:7e:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:56 2024 by rpki-client on console-ams.rpki-client.org