Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/szHzdBCeBsPXxNe4TzkFhn-pKvk.roa
File: szHzdBCeBsPXxNe4TzkFhn-pKvk.roa (raw, json)
Hash identifier: iJiqtAQrON+ksVo43F5tzH5l6Tnf11fgW+szJ0HCGuo=
Subject key identifier: B3:31:F3:74:10:9E:06:C3:D7:C4:D7:B8:4F:39:05:86:7F:A9:2A:F9
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 0856E37E
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/szHzdBCeBsPXxNe4TzkFhn-pKvk.roa
Signing time: Thu 12 May 2022 02:57:02 +0000
ROA not before: Thu 12 May 2022 02:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25381
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
85.234.109.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139912062 (0x856e37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: May 12 02:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b331f374109e06c3d7c4d7b84f3905867fa92af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:e3:ac:56:a2:9d:f2:3f:b7:4c:4c:4e:c0:
11:f2:65:97:44:38:f1:a0:ff:50:3d:bb:be:90:4f:
32:9a:2e:62:30:bc:16:e5:1a:46:15:3d:2d:a3:92:
9b:74:8b:64:4e:fd:16:36:96:dc:03:cc:3a:41:d8:
cd:4c:49:a9:b3:86:24:c4:40:3e:67:c6:f3:a4:f2:
1c:b4:78:3f:21:90:92:49:80:4b:1a:c3:67:22:c7:
3e:c4:31:33:56:9f:13:54:27:d1:d7:c0:92:1e:56:
81:68:a2:16:e4:77:57:8c:7d:a3:94:08:de:b8:61:
9b:d0:61:68:59:fe:9b:47:cc:76:43:b5:5f:39:49:
c6:0a:88:9d:e4:ca:d2:60:6c:55:f7:2a:4f:26:c9:
68:37:f6:01:5d:8b:b8:36:5d:1a:d0:48:d3:df:d3:
48:e2:78:7e:08:bd:36:4d:4d:95:9b:6c:bd:c2:c7:
18:67:fb:99:e0:1d:f7:ef:5e:bb:94:5d:d5:41:23:
de:b4:9c:e4:9a:0c:e2:e7:0d:1b:6b:74:0f:a6:51:
58:e0:d3:ea:42:50:75:f2:e4:e7:7b:f6:15:bb:66:
20:36:93:8d:48:b1:bc:13:9b:c9:6b:2c:89:a7:21:
84:e4:e1:14:3b:fe:94:de:54:75:0e:4e:8f:a6:fe:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:F3:74:10:9E:06:C3:D7:C4:D7:B8:4F:39:05:86:7F:A9:2A:F9
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/szHzdBCeBsPXxNe4TzkFhn-pKvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0-85.234.110.255
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1c:18:9c:0a:47:a3:53:08:b0:61:3d:0c:8e:e9:87:44:4a:
2d:0a:de:4e:7e:8f:d0:6a:3f:2e:4b:d0:81:d2:b6:7d:91:30:
33:b4:e1:11:00:37:08:fa:95:79:7c:96:0e:bc:7e:a9:d2:36:
a5:0c:fd:0c:11:f4:5c:a7:ec:b6:ec:17:20:f7:70:57:32:2e:
96:e6:40:ce:25:47:53:3e:ca:27:77:72:63:12:8e:ed:1e:a4:
85:9a:c7:fa:f7:0f:d3:a6:5d:d1:92:79:ed:45:ef:a1:e0:e2:
29:37:87:df:c0:48:b3:63:96:7f:98:ce:d3:bb:bc:08:b9:b7:
24:cf:a2:b5:51:98:10:e6:f1:bd:ab:16:d1:8a:90:20:2b:dd:
76:21:90:eb:2e:fe:1c:b8:92:e6:4f:b4:71:e7:60:c3:10:7d:
b6:9e:df:34:ef:20:e1:bb:8d:f0:06:53:0e:db:87:01:67:2a:
0d:92:6e:76:41:2e:68:aa:97:e2:35:b5:89:e1:69:d4:b4:a8:
31:50:67:cb:f5:2e:43:ed:bd:21:03:cd:fa:12:99:fa:96:d1:
68:72:be:3b:b0:ae:4f:11:0b:81:96:e0:5e:7e:bd:de:bb:75:
68:d1:a4:9b:f9:17:91:cf:82:df:73:e5:21:4b:ae:80:4f:fa:
47:5e:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:34 2024 by rpki-client on console-ams.rpki-client.org