Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/j3fVIyqFozcPmFXieLSd_Q8pFRk.roa
File: j3fVIyqFozcPmFXieLSd_Q8pFRk.roa (raw, json)
Hash identifier: PFzKUztKQ8pchHQ43bb7/ZourwGnuEs3v21s3FnHalg=
Subject key identifier: 8F:77:D5:23:2A:85:A3:37:0F:98:55:E2:78:B4:9D:FD:0F:29:15:19
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 026086EE
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/j3fVIyqFozcPmFXieLSd_Q8pFRk.roa
Signing time: Fri 11 Mar 2022 15:57:01 +0000
ROA not before: Fri 11 Mar 2022 15:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39498
IP address blocks: 185.122.245.0/24 maxlen: 24
185.122.246.0/23 maxlen: 23
185.122.244.0/24 maxlen: 24
185.122.244.0/23 maxlen: 23
185.122.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39880430 (0x26086ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Mar 11 15:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f77d5232a85a3370f9855e278b49dfd0f291519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:c1:64:b7:5c:de:52:f9:90:57:9d:bc:98:
9b:b8:3c:2d:ac:85:d6:f2:86:2a:d0:f2:d8:d8:bb:
ae:10:d6:6b:b8:f4:48:4c:3b:2a:23:c1:6c:e5:23:
bc:dd:25:f3:bf:90:b9:66:f7:0b:ee:fe:f6:ba:07:
aa:0d:ec:af:67:84:82:8c:3e:ac:84:ed:ff:19:9d:
40:6b:f5:f4:bd:16:66:6f:d7:e1:f2:95:f1:aa:c4:
87:17:ed:ad:52:7b:b4:88:41:c4:08:65:bb:ef:39:
0e:85:31:fd:43:82:a4:6f:81:0a:27:e1:db:c6:bd:
e4:79:1f:43:84:f4:ee:46:fa:b8:26:c9:e2:9a:7c:
68:de:91:93:3b:53:90:aa:c2:29:3b:d5:6c:68:32:
12:91:45:f7:15:37:4b:dd:4c:d5:1f:d0:42:65:1a:
e7:78:c2:5e:6e:d1:44:94:19:a5:36:e3:1f:e4:9e:
cc:40:65:30:23:64:4d:f8:aa:e1:f8:38:fa:89:e0:
e8:2c:20:ff:89:1c:39:ab:62:b3:f5:c2:6d:06:91:
52:d7:c6:a9:1d:52:24:7d:fc:bc:8d:12:08:55:52:
f6:b7:b3:9a:af:77:3e:fe:4e:00:a1:8e:a6:b8:3b:
b9:11:9a:14:4e:55:33:a8:f1:27:8e:3f:27:eb:a1:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:77:D5:23:2A:85:A3:37:0F:98:55:E2:78:B4:9D:FD:0F:29:15:19
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/j3fVIyqFozcPmFXieLSd_Q8pFRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.244.0/22
Signature Algorithm: sha256WithRSAEncryption
26:be:d9:a7:08:46:2a:5c:a5:a1:a5:f5:82:43:db:77:77:b1:
21:74:4d:88:5a:64:8f:c9:76:a6:4f:f7:15:f2:ac:40:10:06:
56:9e:e5:57:79:e1:eb:6e:1b:c6:f8:c2:e3:4c:2d:af:0e:2d:
79:c5:bf:b2:f9:df:1b:f2:27:69:08:46:7b:5b:40:b0:3b:3c:
81:6f:7d:53:9d:89:96:41:3b:7d:b6:0b:a3:1d:37:86:9b:ec:
16:a7:c3:d8:75:9c:f8:b1:6f:8d:c4:55:f5:1f:65:93:40:d9:
b9:9b:0a:70:2e:16:ca:cd:b5:ed:a6:0e:c4:05:4c:5a:bc:ec:
09:d2:d5:7e:4a:85:5d:85:e8:33:0b:84:b4:0d:c6:fe:db:0a:
df:84:48:83:95:9e:a7:5b:99:a5:df:2a:45:e1:b9:36:48:09:
92:5b:65:73:a4:d4:dd:0f:a2:10:13:d4:80:2f:5f:f5:e7:b6:
bf:5b:cd:b0:01:a4:1c:96:7a:5e:cb:db:e1:5b:1f:ca:23:c8:
0b:a8:c6:0d:b5:8c:30:00:52:11:bf:88:23:48:68:90:27:db:
fc:82:49:3f:9f:62:3c:2e:32:40:5e:8f:b7:5f:e0:d0:a1:7a:
78:16:ae:9d:77:0e:5b:2a:83:26:d7:70:32:08:85:78:fa:d4:
94:3f:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:13 2023 by rpki-client on console-fra.rpki-client.org