Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/S_xNrF2nkPKeFwyOUfz81ITIZE4.roa
File: S_xNrF2nkPKeFwyOUfz81ITIZE4.roa (raw, json)
Hash identifier: uml7qFANFUMWgp0f+ePrTL7CZAOOwdqkDp8SHhqOGMk=
Subject key identifier: 4B:FC:4D:AC:5D:A7:90:F2:9E:17:0C:8E:51:FC:FC:D4:84:C8:64:4E
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0B3BC6C8
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/S_xNrF2nkPKeFwyOUfz81ITIZE4.roa
Signing time: Sat 01 Jan 2022 11:00:29 +0000
ROA not before: Sat 01 Jan 2022 11:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204813
IP address blocks: 185.105.120.0/22 maxlen: 22
185.225.180.0/22 maxlen: 22
185.107.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188466888 (0xb3bc6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jan 1 11:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bfc4dac5da790f29e170c8e51fcfcd484c8644e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:22:7b:f5:a5:d5:d0:e6:53:46:05:64:4f:
77:3b:90:55:aa:8c:58:06:b8:53:96:77:a3:f1:ec:
33:8a:9c:71:42:9a:bf:cf:b3:00:9c:12:02:4f:66:
97:da:3f:81:1d:fe:ad:05:dd:e8:5f:45:19:21:0a:
45:b0:fb:6f:55:ad:e3:d9:df:9e:c3:72:9d:62:95:
d7:7f:40:b2:d2:b3:fa:53:36:b1:93:31:7f:a3:4d:
01:65:12:07:7a:76:a1:0f:81:54:f2:08:3f:fe:4c:
ab:79:a7:4a:4d:0d:a0:24:c2:76:4c:28:0a:37:de:
43:14:d3:70:42:c6:7e:df:89:43:1a:bf:00:3f:5a:
24:94:a2:5d:d2:f3:f9:77:51:67:9b:94:9f:58:78:
52:0e:43:fe:87:fc:d2:c5:1a:7b:1f:17:15:57:6a:
c0:62:2b:47:5d:7c:4f:51:ca:cf:a1:a3:f3:51:a5:
3e:b1:f2:86:63:55:b0:8f:a8:77:0a:31:d4:1c:ee:
a0:1d:67:04:96:a7:c5:4a:69:42:17:35:9b:7f:bf:
42:02:ae:df:ab:19:2a:61:75:62:0b:64:cd:7e:42:
3d:4a:0d:57:75:8e:40:5e:2e:5b:54:bc:a8:01:38:
b0:00:1a:37:c4:5d:96:54:4a:0d:c4:1d:d7:6d:ed:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FC:4D:AC:5D:A7:90:F2:9E:17:0C:8E:51:FC:FC:D4:84:C8:64:4E
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/S_xNrF2nkPKeFwyOUfz81ITIZE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.120.0/22
185.107.248.0/22
185.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:b0:6d:4b:0b:d6:c5:13:44:2a:8d:25:ff:c9:29:63:9a:b7:
56:42:32:b3:15:15:61:e7:61:ef:05:ce:04:1a:3c:48:2f:a5:
8f:c2:b6:4c:f4:94:d5:5e:52:fe:a6:b2:c2:ca:38:47:1b:92:
b9:4d:fd:24:90:b5:9d:81:2c:85:96:ab:cc:11:71:3b:33:e4:
56:01:17:8c:37:12:e2:6e:56:a5:87:69:27:98:cf:d5:1e:64:
22:60:fb:a8:ac:3f:ad:15:f5:60:06:b1:be:0f:f9:b9:f5:2c:
67:f5:c8:d0:b1:87:a5:dd:b8:54:d4:48:f7:2f:70:4e:7f:39:
ad:07:29:b8:00:ba:bf:4f:81:7a:d9:7e:aa:71:03:2c:d6:3c:
d9:4e:60:05:4e:53:d6:95:14:77:98:ca:55:f7:70:97:b0:9e:
b8:b2:4c:13:c5:fb:e4:19:34:65:e0:65:7e:da:9b:8d:19:9e:
6e:47:3e:f2:b1:5f:9e:60:80:fa:49:88:0a:90:47:ff:b5:1d:
07:a5:3b:63:74:7f:0a:cf:53:6b:b7:9c:f6:74:c0:29:c1:cd:
de:cc:81:22:22:52:1f:a0:ce:b1:c0:e4:6f:71:2f:2d:ca:7b:
34:b7:37:31:0c:4f:a3:53:c3:26:61:35:d0:fa:09:d4:90:59:
51:b0:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org