Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/8VMeVsP29Ifpzghp3dXDVxeI9Jw.roa
File: 8VMeVsP29Ifpzghp3dXDVxeI9Jw.roa (raw, json)
Hash identifier: THxCuDg/hD+454ygfwHfgxsrgpODLYIc93JavArk1Fc=
Subject key identifier: F1:53:1E:56:C3:F6:F4:87:E9:CE:08:69:DD:D5:C3:57:17:88:F4:9C
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 058301
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/8VMeVsP29Ifpzghp3dXDVxeI9Jw.roa
Signing time: Wed 25 May 2022 13:03:13 +0000
ROA not before: Wed 25 May 2022 13:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204630
IP address blocks: 185.244.64.0/23 maxlen: 23
185.244.66.0/23 maxlen: 23
2a0d:4280::/48 maxlen: 48
2a0d:4280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361217 (0x58301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: May 25 13:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1531e56c3f6f487e9ce0869ddd5c3571788f49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:da:0a:fe:1b:91:75:f0:2b:d3:00:9f:4d:
74:98:a2:b0:19:64:b1:b4:35:6b:8e:6e:40:0f:85:
66:a1:a4:5b:18:7d:b6:98:24:05:5d:73:8d:58:c2:
62:ad:41:d3:84:b4:d4:d4:a7:ff:8e:24:8b:43:e9:
d2:59:23:62:08:f6:55:45:41:5a:99:4a:32:ad:fc:
4c:0a:14:75:89:89:c9:51:da:b0:b2:a2:b2:58:06:
37:03:c9:67:4e:07:1e:87:62:bb:61:08:94:05:cf:
7c:aa:b7:0f:22:21:89:de:a6:2d:ad:13:89:7d:a0:
dd:ed:2b:66:29:57:7d:fa:f3:c9:f3:21:00:3d:48:
50:fc:af:83:12:ee:a2:d3:4d:6f:bc:9e:78:dd:75:
1a:0e:cb:7f:7d:e7:be:43:94:89:3e:5e:7c:b9:1e:
98:02:81:38:ba:98:b7:ba:a7:fa:a9:f0:32:85:d6:
57:40:23:75:c4:89:ff:5d:d2:6f:91:1f:e6:f3:b6:
ca:f2:43:d2:98:ff:7a:0d:c8:48:af:6a:cb:99:b7:
7d:48:9b:d4:67:01:22:ee:c1:0b:4f:b3:dc:f6:0b:
83:8a:a7:08:82:de:84:3c:bf:4b:9d:f3:2c:da:a6:
9b:6d:4c:23:32:24:45:5f:69:ce:4d:3a:90:14:36:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:53:1E:56:C3:F6:F4:87:E9:CE:08:69:DD:D5:C3:57:17:88:F4:9C
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/8VMeVsP29Ifpzghp3dXDVxeI9Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.64.0/22
IPv6:
2a0d:4280::/29
Signature Algorithm: sha256WithRSAEncryption
2b:5c:4b:77:c2:60:14:3b:74:7b:0a:40:a1:b4:58:b9:59:c1:
b5:84:80:10:8b:03:e7:08:9b:63:4a:7d:99:18:97:1a:1b:08:
f8:42:e5:bf:01:55:ae:1b:4c:75:ac:86:49:f3:c1:92:89:ab:
0b:8e:9d:71:4c:88:32:34:b8:d4:a3:01:9a:de:21:ba:88:0b:
3b:bd:71:58:7f:f9:b5:4c:78:48:57:bd:ac:46:3a:4f:1c:a6:
5d:27:25:9a:5c:e9:d9:81:9a:4d:c8:06:ad:a7:28:05:01:c0:
67:8f:90:ff:23:8a:51:92:7d:c0:ea:74:25:3f:05:df:6d:d9:
bf:ec:bb:ab:b8:a9:3c:e4:f1:df:79:64:de:e4:9f:eb:36:8a:
ae:f5:52:56:ad:61:ae:38:dc:76:7c:bf:e9:a0:db:dd:48:3e:
14:63:c0:78:ee:6f:35:68:ab:26:c5:0c:cb:88:47:fa:d6:57:
54:65:99:b9:60:51:91:1e:a1:e6:bb:48:cf:a5:16:07:61:24:
2b:7f:f0:e6:f0:5d:76:2c:fa:1b:9f:49:23:d5:2f:cd:b3:5f:
23:d4:f8:b6:1d:ac:92:d2:dc:76:5c:04:ae:a5:c6:55:f6:d8:
73:36:61:4d:f9:5e:cf:b2:92:f5:b7:8f:c6:6e:33:12:cd:50:
f3:61:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:19 2024 by rpki-client on console-fra.rpki-client.org