Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/f2ZvbugyiuBcChruSwg03u_3ZN8.roa
File: f2ZvbugyiuBcChruSwg03u_3ZN8.roa (raw, json)
Hash identifier: qf8KTmcrRw/Jr8ViufPD+RlOsK0OVB6diYujpzbeVXY=
Subject key identifier: 7F:66:6F:6E:E8:32:8A:E0:5C:0A:1A:EE:4B:08:34:DE:EF:F7:64:DF
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 036ACFBB
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/f2ZvbugyiuBcChruSwg03u_3ZN8.roa
Signing time: Sat 01 Jan 2022 09:59:46 +0000
ROA not before: Sat 01 Jan 2022 09:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60015
IP address blocks: 185.54.64.0/24 maxlen: 24
185.54.67.0/24 maxlen: 24
185.54.66.0/24 maxlen: 24
185.54.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57331643 (0x36acfbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jan 1 09:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f666f6ee8328ae05c0a1aee4b0834deeff764df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:a8:74:b6:4f:ab:14:02:bb:89:bb:89:f4:
d6:36:b5:98:df:8e:c8:08:a3:d7:20:27:e0:a8:68:
8b:32:fc:f5:da:1b:74:10:2a:51:5d:c9:2b:0b:8a:
7c:be:7e:34:24:82:3c:0a:6d:90:36:dc:ba:f4:15:
9b:66:3a:49:92:24:17:bc:a6:b6:e7:eb:e6:1e:a8:
9a:33:91:2f:81:78:3a:5d:6f:35:58:18:0a:e6:59:
83:4c:06:25:ef:39:19:5f:8f:d7:f2:87:88:e6:67:
d9:6f:68:86:bb:0f:8a:2c:f7:2c:6f:9f:6c:90:ef:
ed:8b:e8:5b:e0:27:77:8a:4f:28:f2:c1:8d:dd:2b:
d3:f0:47:89:6f:b7:26:5a:89:b9:b7:1a:82:f0:d8:
09:0f:56:29:cc:9b:79:11:ab:a1:64:3b:62:60:80:
e7:d2:0e:a5:f2:be:11:9d:e3:ff:f4:41:8b:0f:1f:
75:38:7e:db:0c:a2:5b:45:9e:26:df:50:d7:f3:c0:
e9:3c:55:54:3c:5f:51:73:68:b7:68:11:c8:e5:04:
66:81:99:a4:74:6d:18:67:ca:f9:86:e6:cb:c9:47:
7c:86:57:b5:c4:7a:bc:67:c0:e2:ce:05:ec:a4:3e:
db:95:58:1c:4c:71:c6:0c:7b:ba:85:b7:bc:dd:dd:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:6F:6E:E8:32:8A:E0:5C:0A:1A:EE:4B:08:34:DE:EF:F7:64:DF
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/f2ZvbugyiuBcChruSwg03u_3ZN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.64.0/22
Signature Algorithm: sha256WithRSAEncryption
81:c2:0c:83:74:e2:8c:a6:a3:8d:82:f5:8f:c7:e1:3f:6d:39:
76:d4:2e:58:0b:3c:ae:2e:74:11:31:11:76:a8:39:3e:b9:a0:
0b:4d:31:f1:bc:53:01:db:18:79:d0:f3:16:69:8c:46:9f:ec:
1b:b8:cc:66:9d:78:cd:93:a0:d1:2d:bf:68:01:cc:4b:15:88:
66:29:e0:22:1f:d8:4a:d4:22:88:8f:fd:0b:6e:ec:70:58:73:
05:92:2a:a0:0e:dc:68:04:bd:27:bb:84:64:61:f7:cd:ca:2b:
89:75:c0:52:d3:ac:58:c0:2a:18:24:8a:e4:88:f6:42:08:27:
31:59:86:c3:5b:d5:aa:b3:39:92:cb:b4:5b:c5:01:9e:a1:f0:
55:b6:cc:76:3e:54:45:2f:62:a4:7c:6c:c4:43:b2:d9:03:aa:
7c:67:eb:cc:55:03:c3:c2:6f:f9:a3:c4:5f:ce:d4:b6:2c:d9:
f8:57:7c:33:3b:5d:8d:8d:20:59:15:a3:4d:45:f4:40:d4:c5:
05:c3:13:c6:68:3a:22:bf:4d:b6:e8:2d:a0:20:ff:00:b3:6c:
4c:92:be:43:3c:b8:33:ba:97:d2:20:8d:0b:d5:86:f3:6f:2a:
94:1d:45:c0:81:7c:ac:40:cd:89:fe:29:37:49:7d:a2:b9:c0:
12:a4:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:12 2024 by rpki-client on console-ams.rpki-client.org