Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/aNV4RVrxCPLZVYo1_Gq7c3Hhgcg.roa
File: aNV4RVrxCPLZVYo1_Gq7c3Hhgcg.roa (raw, json)
Hash identifier: +aLFf9ksHpIYmJR7JB7pTrXBN4tNmS98gFjqLA7CfWA=
Subject key identifier: 68:D5:78:45:5A:F1:08:F2:D9:55:8A:35:FC:6A:BB:73:71:E1:81:C8
Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial: BDE700
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/aNV4RVrxCPLZVYo1_Gq7c3Hhgcg.roa
Signing time: Sat 01 Jan 2022 00:59:00 +0000
ROA not before: Sat 01 Jan 2022 00:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43824
IP address blocks: 185.111.162.0/24 maxlen: 24
185.111.161.0/24 maxlen: 24
185.111.160.0/24 maxlen: 24
185.111.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12445440 (0xbde700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Validity
Not Before: Jan 1 00:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68d578455af108f2d9558a35fc6abb7371e181c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:99:b2:59:07:ac:ea:e1:79:f2:6b:e3:88:
4f:ff:8e:68:e7:6b:88:7e:07:9b:47:ed:b5:fc:8d:
f4:ca:12:44:c8:13:e1:98:cf:e2:84:b4:a4:41:24:
8a:b5:5c:d4:a3:9e:30:55:83:79:9f:03:01:89:7f:
fb:e9:6c:35:84:99:a8:ed:1b:38:92:60:22:64:4c:
4c:43:c2:dc:ca:a1:f2:15:da:08:e4:48:0d:93:e0:
60:90:4e:77:e5:19:1a:b5:2d:09:c3:55:18:43:dc:
2f:5b:3b:84:53:9a:79:15:2e:0c:20:26:2b:01:fb:
07:b9:f9:a2:09:92:b0:9a:0a:6c:43:3c:7c:7c:e9:
6f:2c:96:36:55:a9:db:2e:b1:19:dc:a1:31:92:24:
de:7c:09:70:19:ea:27:df:a7:46:71:e5:0b:7b:99:
5f:4b:10:b5:ad:20:61:3e:30:80:2c:d9:62:54:80:
f7:5f:65:93:e6:ee:b6:76:99:9c:e7:03:f0:b9:ed:
90:41:22:03:8c:d6:b6:91:6e:fd:36:2e:07:24:65:
65:60:be:9f:48:a4:84:6e:00:7d:6e:9f:8c:71:22:
4f:05:53:5b:4c:a7:91:3d:22:6c:f6:b3:78:9e:e5:
c3:6d:57:a6:00:5a:50:2e:60:22:b7:3a:12:76:d2:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:78:45:5A:F1:08:F2:D9:55:8A:35:FC:6A:BB:73:71:E1:81:C8
X509v3 Authority Key Identifier:
keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/aNV4RVrxCPLZVYo1_Gq7c3Hhgcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:8e:dc:21:ac:6d:c4:e7:9e:f3:cd:49:8c:26:ce:5a:f5:3d:
9c:2d:e5:42:da:5f:38:4d:0e:4f:61:83:29:38:45:64:dc:03:
80:e0:2e:40:41:90:7f:c7:35:10:3a:5b:00:d9:db:49:49:87:
cb:78:82:37:81:00:0b:af:d5:4e:63:69:d9:d5:e2:4c:14:5f:
90:2f:ae:39:15:c8:54:e7:64:29:20:7e:d0:d1:ac:e2:fd:45:
00:d0:0f:43:94:fe:c1:3a:c6:73:92:fa:ca:04:8e:90:3b:64:
a0:12:5c:10:a2:11:d6:b9:b0:1c:0a:fe:21:0b:7b:a4:8f:e4:
ba:ee:ff:79:82:35:eb:d7:48:fb:af:d3:ad:b3:b5:e1:07:41:
79:37:41:36:4f:cd:50:f0:a5:cc:dc:cf:de:08:d6:c3:13:09:
6a:39:2f:be:6a:2f:01:4e:e3:db:94:dd:4e:37:73:a5:01:38:
74:d1:46:ce:7f:6d:53:9c:bb:60:37:ad:01:ed:a3:b0:74:15:
0d:cc:f8:8b:9b:e7:c7:88:b8:53:6a:4a:71:b3:f1:31:7b:94:
76:ab:4d:79:ec:de:11:31:94:0d:f2:9b:85:c6:50:a4:d8:ed:
75:98:0c:b1:18:ce:ab:1e:3b:cf:9d:9b:73:e5:12:f7:0d:3d:
c4:cc:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org