Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa
File: Feu_tK5cOTyeFHU3OLfH96vIpY0.roa (raw, json)
Hash identifier: hPMklMVnZ4WkbJzY1QAKdSX2poagzq0HIdLpppigTOk=
Subject key identifier: 15:EB:BF:B4:AE:5C:39:3C:9E:14:75:37:38:B7:C7:F7:AB:C8:A5:8D
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 06D2FCB5
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa
Signing time: Wed 04 May 2022 13:13:02 +0000
ROA not before: Wed 04 May 2022 13:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.163.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.160.0/24 maxlen: 24
185.241.213.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114490549 (0x6d2fcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: May 4 13:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15ebbfb4ae5c393c9e14753738b7c7f7abc8a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:88:0f:d2:fa:43:5b:a0:ed:11:22:8e:51:
d1:da:24:b9:73:00:d0:4a:59:11:7b:5d:c6:50:36:
84:fd:24:0b:3c:8a:f4:e5:7c:5e:e1:11:01:ae:3a:
90:31:1a:19:d9:90:b8:f7:5d:d3:62:9a:03:4c:97:
a5:b5:f5:1e:9f:2d:3e:a9:be:e1:53:45:b6:0e:b3:
0c:b8:4f:bf:91:79:c4:f9:71:ac:f5:db:7a:41:df:
af:54:69:31:a6:29:04:d3:dc:42:0c:7f:b2:69:42:
9b:3f:07:ca:92:46:54:64:03:a0:6d:52:4e:ff:8d:
30:18:73:14:d5:bd:91:da:56:54:5c:67:2a:19:00:
76:39:82:93:7a:c6:52:5d:d7:58:44:78:3f:4b:16:
7d:52:00:58:ea:d9:a7:0e:5c:2f:92:9a:cd:5b:9b:
a1:95:d9:73:60:51:91:6b:af:43:f4:65:a3:ec:36:
50:e5:14:0c:9f:5b:71:03:fb:cb:23:08:00:b0:c6:
1f:06:b1:f6:3f:ca:5d:2e:d4:f2:bb:c2:a3:62:75:
e0:61:74:f2:42:26:6b:6e:3c:5a:29:86:c2:00:a7:
7e:99:28:f0:79:bc:31:69:c5:85:34:e1:b9:19:fe:
23:c4:79:17:b1:40:c7:52:db:fb:17:7b:ce:88:aa:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:BF:B4:AE:5C:39:3C:9E:14:75:37:38:B7:C7:F7:AB:C8:A5:8D
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Feu_tK5cOTyeFHU3OLfH96vIpY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/24
185.119.91.0/24
185.241.213.0-185.241.214.255
Signature Algorithm: sha256WithRSAEncryption
6e:dc:49:60:16:be:48:c4:dc:ef:9b:8c:87:f5:b9:49:7a:4f:
28:59:6f:4a:d5:ed:a3:a1:2a:2e:68:50:9e:89:18:85:a6:9e:
58:d6:0d:2c:2e:f5:dd:4f:f8:24:18:ba:99:35:f3:4b:99:39:
35:30:ee:d8:2b:38:c7:af:ce:04:40:b7:88:b2:91:a9:09:4c:
e2:ff:6e:5c:22:b6:d1:c4:5e:e5:46:18:68:18:bb:36:c2:07:
8c:f8:d8:20:83:d6:8c:d2:b3:7e:3f:ce:1a:09:6e:ec:1a:cc:
8d:cd:b1:2a:fa:90:6a:70:cc:d4:af:d6:f4:a2:91:aa:66:16:
87:c9:99:94:a1:c3:91:e4:8d:2c:84:da:69:4e:eb:28:6b:f0:
ec:27:90:d8:12:e1:e6:6d:f1:db:48:8a:48:b3:58:17:17:36:
c9:f8:c6:85:4b:4c:9c:f7:68:a8:b8:b1:ee:06:32:60:7b:48:
65:62:b2:40:6d:10:c3:ac:2e:21:a3:bd:86:72:6b:0e:56:88:
46:73:86:d8:ff:d8:47:80:9d:56:08:20:13:12:8f:c8:8f:0c:
b0:61:2c:26:20:66:93:53:1e:0d:04:c5:ed:ac:da:e5:19:15:
32:ff:3d:95:81:9a:b3:66:9b:2b:23:18:db:a9:98:43:56:8d:
86:3a:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:07 2023 by rpki-client on console-ams.rpki-client.org