Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XHVKfAToIcE3Ky5tOW0dGLqgi7E.roa
File: XHVKfAToIcE3Ky5tOW0dGLqgi7E.roa (raw, json)
Hash identifier: mOtub2TG3HDFXB61gPHtlZGIMFgSnf2atK3IrHimr58=
Subject key identifier: 5C:75:4A:7C:04:E8:21:C1:37:2B:2E:6D:39:6D:1D:18:BA:A0:8B:B1
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DF7BCD1
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XHVKfAToIcE3Ky5tOW0dGLqgi7E.roa
Signing time: Mon 03 Jan 2022 10:42:20 +0000
ROA not before: Mon 03 Jan 2022 10:42:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.226.204.0/22 maxlen: 24
168.199.128.0/17 maxlen: 24
185.101.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234339537 (0xdf7bcd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 3 10:42:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c754a7c04e821c1372b2e6d396d1d18baa08bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:33:4d:80:08:41:59:d7:23:3b:98:65:b8:
a2:2b:01:68:65:28:6f:d7:62:5f:fb:12:28:54:9f:
35:86:d6:00:df:e9:b7:7c:43:18:98:98:69:e2:70:
98:ac:dd:00:fd:0d:9e:8d:55:c9:4e:ea:f0:d6:c4:
c5:4c:af:e9:d5:66:62:50:6d:63:f7:02:00:aa:4b:
91:eb:8b:1b:9b:33:06:c6:2f:8b:d5:a7:93:aa:77:
f5:e7:98:8f:4b:95:f8:70:e7:03:63:32:56:88:8d:
b3:94:24:2b:3f:c3:56:94:c1:18:6e:b6:26:da:ea:
17:69:fb:ce:c5:9c:4c:df:c0:f6:0a:bd:52:38:ac:
a3:0b:21:4e:da:cd:3d:a1:10:69:50:f8:5d:cc:02:
95:7c:3b:ad:12:b5:2a:8e:b9:f6:e2:45:56:d6:c0:
5d:8e:a7:5d:59:5a:4f:12:6c:72:c7:72:1d:9e:f3:
fc:46:0d:32:23:94:8b:9f:22:73:5c:ab:d1:74:e2:
7e:63:79:94:ed:8f:c5:7a:b8:eb:30:5b:90:a9:49:
cf:fa:bc:81:de:18:0d:e1:1d:22:39:8c:b3:6e:a1:
4f:15:cc:a6:b1:6b:1f:d4:e3:fb:69:6d:ce:86:23:
54:9f:4d:7b:76:13:20:48:76:a2:e2:9a:a2:d0:2c:
ed:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:4A:7C:04:E8:21:C1:37:2B:2E:6D:39:6D:1D:18:BA:A0:8B:B1
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/XHVKfAToIcE3Ky5tOW0dGLqgi7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.128.0/17
185.101.252.0/22
185.226.204.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:6a:03:3a:b1:47:46:6f:d5:9b:00:ae:74:38:0f:3a:b7:dd:
ff:22:97:70:a5:fa:a1:22:34:6b:2d:03:7c:f7:98:ff:7b:3a:
6d:8f:e0:bb:74:17:05:0c:f2:8f:3a:13:1c:f2:9f:6b:1f:38:
c0:dc:db:7a:47:30:61:4a:81:b7:6a:ab:da:73:9b:11:ec:2e:
42:ff:51:0d:c3:6d:91:76:2c:db:50:1f:18:e4:f4:9d:11:57:
3e:5e:3b:56:40:d7:c0:ab:9a:b4:80:10:45:19:8e:ea:68:13:
ef:e3:fa:8a:2b:e2:5a:8f:d1:44:78:53:d3:51:50:4a:82:50:
a2:77:4d:8c:57:c3:37:78:e1:b3:f9:d9:b8:12:52:7c:fe:fe:
fc:96:76:4e:a0:7e:7c:10:0b:66:b3:c3:10:d7:63:3a:ed:b1:
c3:9a:e7:b5:a3:c6:44:f1:ae:8c:28:d5:e3:72:05:f3:f9:3e:
86:72:8d:d2:76:31:81:f8:3d:43:1b:44:0c:28:4e:31:87:54:
be:66:d6:86:7c:e3:88:79:f7:e1:32:e2:aa:df:94:d8:84:25:
cf:1b:7e:fa:17:90:17:2d:e6:a9:38:3b:8c:ea:44:7a:5c:70:
37:db:fb:b6:3c:6d:90:99:8e:a4:0a:2d:10:19:d1:97:f7:fd:
14:60:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org