Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FOUhQNHhA0FmgHvt7N-ZmBlzK0c.roa
File: FOUhQNHhA0FmgHvt7N-ZmBlzK0c.roa (raw, json)
Hash identifier: nO7FXYrOIzYk+eVXlSmNcoMDuhM9lJdXM6Xm/kNDpOo=
Subject key identifier: 14:E5:21:40:D1:E1:03:41:66:80:7B:ED:EC:DF:99:98:19:73:2B:47
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 0736E5E5
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FOUhQNHhA0FmgHvt7N-ZmBlzK0c.roa
Signing time: Sat 01 Jan 2022 01:55:34 +0000
ROA not before: Sat 01 Jan 2022 01:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
85.234.109.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121038309 (0x736e5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jan 1 01:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e52140d1e1034166807bedecdf999819732b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:cf:6c:af:df:51:f1:07:63:37:25:f6:26:
f7:6c:3c:54:82:36:82:d9:b0:08:f4:e7:15:9a:8b:
0b:59:4a:29:5a:6c:a1:27:13:70:d0:e6:88:74:28:
37:90:1d:c4:f8:13:47:84:06:16:e3:21:41:b7:df:
fa:f0:8b:52:56:57:70:fa:2f:fe:63:54:29:4b:12:
3a:37:8c:55:86:b6:91:a4:38:8f:a9:5d:76:12:8b:
03:e6:d0:64:80:ea:ad:76:2b:99:42:f3:0c:e3:d7:
eb:31:62:b6:77:22:84:98:5f:6e:c0:51:90:fd:93:
c3:a4:28:78:88:68:51:ee:be:51:dd:d7:5e:fa:92:
de:4a:ef:bb:14:32:82:53:78:4d:3c:e1:5c:44:61:
cb:be:2d:f2:88:f2:2c:32:4b:34:e0:8d:af:d1:84:
be:11:80:e3:41:8d:5d:69:b9:7f:5e:54:40:17:7f:
12:73:31:9e:9e:f5:c4:e1:23:19:20:40:d8:15:cc:
28:dd:ae:54:dc:da:34:81:74:c8:cc:62:f2:d8:58:
d9:3f:5d:1c:fb:63:08:85:a6:d3:cc:16:b4:c5:dd:
aa:c3:95:bc:5f:eb:ac:e5:c1:91:c1:dd:2b:f1:d2:
45:27:89:c7:0c:ad:27:7e:18:1e:27:15:91:77:a7:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E5:21:40:D1:E1:03:41:66:80:7B:ED:EC:DF:99:98:19:73:2B:47
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/FOUhQNHhA0FmgHvt7N-ZmBlzK0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0-85.234.110.255
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:b8:7b:60:e2:de:ac:c0:b4:4a:28:bb:f8:e1:4f:e8:70:f1:
1e:bd:98:07:48:23:1f:e6:82:51:97:c4:83:50:dd:b5:38:be:
bd:8b:55:94:a8:05:cd:99:c9:a1:0c:10:52:56:c6:55:a5:72:
b5:f3:c5:7c:e4:5e:c6:dc:43:3a:25:6f:30:24:e4:ac:2a:b8:
5e:61:31:ce:b8:15:8f:ee:c4:a3:9b:96:1b:1a:42:4d:a9:f4:
b2:c7:7f:82:f3:1a:2f:01:c3:78:d3:7b:55:df:f7:b1:00:3b:
a8:87:94:c5:f2:04:15:c7:62:2e:e3:a6:f2:46:db:25:c2:6b:
8a:1c:de:a6:62:3a:4c:ab:d2:0e:04:fd:f3:9b:46:47:a1:b9:
1d:ce:7b:ac:2e:c0:d2:01:75:a9:be:08:b5:f6:2e:c7:50:df:
66:72:80:2c:43:b4:0a:e9:1c:87:0d:95:f5:f8:10:2e:da:d9:
99:94:f8:0d:68:4d:05:06:ad:b1:43:51:22:f4:57:97:68:2b:
5e:13:52:93:c3:56:7a:9c:ce:7c:31:cb:1a:98:72:78:a1:6f:
62:02:13:58:f5:3e:5c:1a:52:57:2f:fc:c5:86:ba:57:de:1b:
e0:ae:88:01:93:b3:df:40:f8:1d:38:99:bf:61:82:15:70:3a:
81:d6:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org