Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/_3EPKsoUF5jUcb1wUdX0GF15XFw.roa
File: _3EPKsoUF5jUcb1wUdX0GF15XFw.roa (raw, json)
Hash identifier: 47TBbz9WoWQUX9fdIbcagtxpYuvP64B1MyyFX53YJVo=
Subject key identifier: FF:71:0F:2A:CA:14:17:98:D4:71:BD:70:51:D5:F4:18:5D:79:5C:5C
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 32BB071E
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/_3EPKsoUF5jUcb1wUdX0GF15XFw.roa
Signing time: Sat 01 Jan 2022 05:59:31 +0000
ROA not before: Sat 01 Jan 2022 05:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30781
IP address blocks: 185.18.80.0/22 maxlen: 22
185.166.100.0/22 maxlen: 22
2a0c:d040::/32 maxlen: 32
2a03:f4c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851117854 (0x32bb071e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Jan 1 05:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff710f2aca141798d471bd7051d5f4185d795c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:7d:b6:2f:01:c1:95:d2:2f:77:fe:ad:5e:
a8:32:17:cf:a5:eb:88:c1:d4:0f:f2:86:ef:4e:fa:
51:94:4f:6e:6b:23:5b:2e:e3:6a:b1:cc:68:a2:17:
48:96:07:22:8e:60:9b:85:cd:90:39:a0:b8:28:af:
b6:a1:10:73:ed:a5:b6:fa:3e:0f:c1:48:16:20:1d:
e2:cf:3a:cf:dd:66:4c:4d:52:68:94:60:47:05:0c:
f9:c5:ee:a4:c8:9c:16:7f:b6:6a:c6:fa:06:b8:03:
71:36:74:dd:93:25:52:b3:3f:29:15:00:ae:17:1b:
ff:9a:2d:9c:cc:92:36:66:92:1a:0f:46:eb:12:8e:
5b:7a:b7:81:ff:4f:94:50:99:d0:1d:50:9b:59:db:
fe:f2:c2:db:09:68:b4:2b:4a:3d:38:94:fc:b2:5a:
d8:01:4c:e4:91:29:05:31:44:27:17:b2:7c:fa:fe:
5f:e9:48:41:57:eb:b7:e7:23:5f:53:fc:a9:3b:af:
05:67:ed:a1:38:4c:75:db:36:b2:1c:31:f4:ac:a7:
f2:62:6d:e3:c9:19:4c:d2:85:3f:14:f3:2e:d9:6d:
93:1e:b9:58:56:63:c8:92:88:4e:7f:5c:b2:03:b3:
e0:83:17:cc:f9:92:f0:0f:f4:13:49:06:f6:c2:44:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:0F:2A:CA:14:17:98:D4:71:BD:70:51:D5:F4:18:5D:79:5C:5C
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/_3EPKsoUF5jUcb1wUdX0GF15XFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.80.0/22
185.166.100.0/22
IPv6:
2a03:f4c0::/32
2a0c:d040::/32
Signature Algorithm: sha256WithRSAEncryption
4e:52:79:01:91:4c:32:80:bf:27:6d:9c:c7:0d:b6:fd:c3:78:
fc:94:df:8c:68:68:b0:05:7b:f4:37:33:88:72:7b:01:3c:18:
40:5f:c6:ac:cf:62:c3:97:da:17:92:4c:42:eb:b8:14:4a:5a:
eb:25:a7:13:25:37:45:ea:26:d6:e5:b6:37:57:6a:1d:65:29:
c6:1d:c2:ca:61:74:af:98:7f:84:07:0a:87:ec:ef:2d:3e:14:
8e:12:73:b0:2f:3f:f0:9d:cc:2f:d3:e4:8d:7c:01:6c:60:d8:
f3:ca:ed:52:78:d1:14:f3:2f:ad:32:44:25:de:6a:ae:97:1f:
7b:cc:5d:37:25:05:b1:ca:78:90:96:7d:2d:73:dc:97:25:28:
8c:f2:a0:c8:23:ab:ce:46:c5:b7:91:a4:f3:25:ae:a2:f3:6c:
f0:16:7b:77:f4:2f:15:a9:45:97:d8:63:38:5f:57:38:1f:f9:
96:55:5d:a3:82:a7:2a:22:fd:9c:7c:cb:19:63:d8:d4:1f:47:
bf:70:24:d0:3f:f0:a4:45:87:8d:10:f3:4e:26:dc:f8:17:da:
5c:cf:db:a5:82:ff:db:6e:52:67:50:9a:61:dc:2d:7b:65:63:
ae:64:6c:f3:51:00:82:3a:83:82:63:6f:83:cd:15:ca:f9:11:
1c:2f:66:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:30 2024 by rpki-client on console-ams.rpki-client.org