Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/4SLmtCWEDjf4K70IK8KJjaFSqk0.roa
File: 4SLmtCWEDjf4K70IK8KJjaFSqk0.roa (raw, json)
Hash identifier: z7PFxi5F8xx2c8RsyONQfUanp5l3AqWLFtAeFVRR6j0=
Subject key identifier: E1:22:E6:B4:25:84:0E:37:F8:2B:BD:08:2B:C2:89:8D:A1:52:AA:4D
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 5D7270
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/4SLmtCWEDjf4K70IK8KJjaFSqk0.roa
Signing time: Sat 01 Jan 2022 02:55:05 +0000
ROA not before: Sat 01 Jan 2022 02:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206854
IP address blocks: 185.172.214.0/24 maxlen: 24
185.172.215.0/24 maxlen: 24
185.172.213.0/24 maxlen: 24
185.172.212.0/24 maxlen: 24
185.172.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6124144 (0x5d7270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Jan 1 02:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e122e6b425840e37f82bbd082bc2898da152aa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:50:36:a5:03:58:8c:57:92:91:77:52:c9:
61:09:cf:9d:19:83:08:f6:cb:65:67:b2:a2:f1:a2:
06:bd:7e:d6:ff:63:5e:c9:42:25:3d:61:69:6b:0f:
25:8d:0c:b5:a1:f4:c6:de:ef:d9:c0:1f:66:0c:83:
e3:ad:2c:dc:3e:83:d4:83:59:a7:2e:80:36:06:b6:
c6:79:6e:bc:48:75:bd:34:36:bb:af:52:bb:eb:02:
8c:d2:d2:7b:6f:da:0c:a0:27:66:81:93:26:0f:67:
2a:d9:90:c4:f9:c7:c7:bf:1f:8d:74:25:e8:d4:b1:
64:ff:c2:66:36:1e:90:b5:85:02:00:ab:92:30:87:
9d:50:88:cd:b5:69:94:f8:39:36:be:66:1a:e2:f9:
ae:73:a4:31:41:38:4a:ba:a3:c2:48:d2:23:c1:d2:
9f:81:ba:7b:24:24:e6:68:0c:a0:5f:d2:e0:ba:8c:
2b:a4:cf:ad:44:22:9d:6b:a2:86:1a:cb:d5:cb:03:
a9:fa:c3:5a:76:5d:fb:44:fc:cf:19:bc:7b:cc:93:
10:f9:e8:00:5f:e8:0f:0e:34:f7:93:62:40:7b:57:
c8:5e:5e:65:ce:af:cd:07:88:10:42:5c:d4:81:cf:
04:b2:74:c9:85:14:c9:6e:51:1f:c7:8a:a0:2a:84:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:22:E6:B4:25:84:0E:37:F8:2B:BD:08:2B:C2:89:8D:A1:52:AA:4D
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/4SLmtCWEDjf4K70IK8KJjaFSqk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.212.0/22
Signature Algorithm: sha256WithRSAEncryption
72:43:17:c5:b9:2b:f5:06:4d:03:8a:e3:c7:21:3b:a7:14:09:
a3:48:c3:2c:5d:f3:00:c6:50:bd:04:58:7f:c1:f1:02:86:ca:
e5:2b:d7:7d:a3:c2:87:bc:1b:40:ad:27:78:4c:60:7a:91:ed:
d1:74:11:6b:06:b4:ad:39:1f:6f:e4:44:06:fb:65:66:1b:0c:
0c:28:6a:86:1b:46:fe:d5:36:78:e6:a3:c5:a3:90:14:3f:40:
0c:32:3f:a0:cd:10:1c:13:bb:d3:4d:30:a9:b2:54:60:a1:80:
c1:6e:c5:2e:38:86:bf:c2:dc:8b:4e:42:10:bc:fd:e3:16:8a:
60:8b:6c:4e:60:a0:f1:8f:0e:00:6b:ad:70:ed:fc:de:64:a3:
c4:22:68:c8:34:61:f9:bd:e6:d5:8c:3b:31:68:bc:2c:9a:cc:
b1:a7:d5:d3:4e:6c:3d:a7:09:dd:21:69:b2:74:70:90:e9:6d:
d5:ca:dd:52:80:09:78:df:6c:13:f8:a5:f9:ec:e6:04:49:74:
d4:9f:83:06:cb:14:9e:d8:ff:88:27:be:33:24:5f:49:a6:1c:
ee:b7:03:18:3e:da:db:24:ec:0a:f7:08:21:75:76:0b:2c:f3:
a8:e2:96:80:6a:d8:57:3c:02:13:30:d0:5a:d2:d3:f5:19:86:
f4:51:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:51 2024 by rpki-client on console-ams.rpki-client.org