Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/rkOLcmebuYBoiS6dIZVd6kFqbRU.roa
File: rkOLcmebuYBoiS6dIZVd6kFqbRU.roa (raw, json)
Hash identifier: tVl6xtfJ4bJBJKZNw9uhgcoMG+OwSDrIteLRMKxKwvA=
Subject key identifier: AE:43:8B:72:67:9B:B9:80:68:89:2E:9D:21:95:5D:EA:41:6A:6D:15
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 018258C178514AD1E0C1A7A0F20E7B084EFB
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/rkOLcmebuYBoiS6dIZVd6kFqbRU.roa
Signing time: Mon 01 Aug 2022 09:34:10 +0000
ROA not before: Mon 01 Aug 2022 09:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42207
IP address blocks: 185.206.186.0/23 maxlen: 23
185.206.184.0/23 maxlen: 23
185.206.184.0/22 maxlen: 22
2a0b:15c0::/30 maxlen: 30
2a0b:15c4::/30 maxlen: 30
2a0b:15c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:c1:78:51:4a:d1:e0:c1:a7:a0:f2:0e:7b:08:4e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Aug 1 09:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae438b72679bb98068892e9d21955dea416a6d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:66:b0:a6:6f:ff:c3:6d:2f:81:6a:c3:c7:
60:41:ce:da:4e:73:c1:76:cc:43:b6:e2:57:28:e4:
1b:e0:9a:dd:7f:70:c5:8d:12:c6:96:d3:b1:70:8b:
08:13:23:9a:a3:03:0d:b6:88:55:3d:96:52:a2:18:
b9:5a:f2:de:2c:2d:3f:be:31:1e:29:93:94:be:8e:
d4:0a:50:98:8b:41:1c:c8:34:a0:cf:e3:00:67:4a:
cf:a5:2b:1c:e6:c9:21:3d:ac:49:76:cf:06:8f:18:
8d:95:fb:f0:80:13:44:b6:2e:a2:9e:28:61:46:21:
92:de:32:6e:24:99:c0:5b:72:2b:3f:4c:46:2e:ac:
b1:cf:be:e6:c8:c5:8c:76:77:5d:a6:df:20:ea:c1:
23:fd:b8:23:8c:ef:5b:b7:0f:57:db:37:a1:2c:2c:
e8:90:bf:c9:51:7b:b2:32:2d:6e:4e:3e:6b:91:26:
34:b9:c0:e5:f7:27:ac:ef:1b:26:5c:5a:a5:43:ab:
02:1d:f6:2e:c4:bb:48:8e:55:bc:e7:05:33:45:cd:
70:e9:60:93:34:53:14:a7:a3:d4:09:f0:55:57:2c:
1e:af:e3:da:52:6e:c2:a7:92:bb:b4:80:e9:d7:f7:
50:46:1a:a7:cb:58:10:8a:18:28:97:ed:0a:05:e6:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:8B:72:67:9B:B9:80:68:89:2E:9D:21:95:5D:EA:41:6A:6D:15
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/rkOLcmebuYBoiS6dIZVd6kFqbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.184.0/22
IPv6:
2a0b:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:e6:4a:20:05:a8:88:d5:8c:4d:5b:1b:26:2b:16:d7:48:3c:
2a:76:db:26:61:28:fb:ef:46:9f:9f:e4:1f:21:0a:55:0f:97:
93:ad:1f:05:96:ea:b1:83:d4:a5:b3:be:eb:0a:eb:99:63:f7:
20:5a:64:d7:1d:d6:ea:d3:02:86:82:00:52:a6:a7:b0:84:ff:
10:cb:27:e7:29:29:e2:6b:28:31:c8:4d:78:67:ce:c8:af:03:
51:e0:df:e2:be:25:f4:50:44:da:6a:30:ec:96:95:2d:24:fd:
6a:9e:e0:a8:8b:06:6e:27:e2:1b:d2:42:23:7a:7e:36:1d:9e:
c4:b8:f0:2e:e0:53:eb:ca:7e:5f:90:19:0e:cc:2f:ac:db:f9:
1e:b7:0e:5c:d1:40:48:4a:fb:a0:76:3d:f1:42:c5:23:57:6f:
96:12:90:8a:cb:46:3a:c9:7e:30:d2:f2:6b:46:7b:39:9d:05:
74:6e:d5:f9:66:31:52:0c:8f:76:19:01:51:52:56:db:49:bc:
1c:5a:ab:48:2a:80:0c:c6:97:d1:f4:f6:10:ff:fb:dc:70:37:
99:22:1d:67:1a:53:a0:70:b5:8c:db:db:d2:12:6e:a4:34:82:
3c:75:08:1d:66:7b:d1:3a:57:29:33:8b:65:ef:14:9d:83:77:
66:47:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:39 2024 by rpki-client on console-fra.rpki-client.org