Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/DfjNfdWJFaFMn4gmEbHrGiis5yk.roa
File: DfjNfdWJFaFMn4gmEbHrGiis5yk.roa (raw, json)
Hash identifier: 8NkAiFmstCNB4ujQWzv1K2TjIINw1UjjDyNkueAUzRI=
Subject key identifier: 0D:F8:CD:7D:D5:89:15:A1:4C:9F:88:26:11:B1:EB:1A:28:AC:E7:29
Certificate issuer: /CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Certificate serial: 11B1C67B
Authority key identifier: 85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/DfjNfdWJFaFMn4gmEbHrGiis5yk.roa
Signing time: Sat 01 Jan 2022 06:59:59 +0000
ROA not before: Sat 01 Jan 2022 06:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59456
IP address blocks: 185.55.24.0/22 maxlen: 22
2a01:8cc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296863355 (0x11b1c67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Validity
Not Before: Jan 1 06:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0df8cd7dd58915a14c9f882611b1eb1a28ace729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b3:36:e0:64:95:9e:5f:04:13:85:fc:4c:c2:
f6:a2:89:c4:79:f1:03:a3:c1:07:70:c0:74:90:e2:
0d:b5:83:57:2c:08:e3:80:2a:5c:e5:e5:94:b8:f3:
26:d1:7a:99:e0:df:92:2a:ba:de:d2:ec:ec:ff:ca:
c6:86:08:ea:8c:2c:00:2b:9c:66:24:83:d8:f0:1a:
a1:35:31:a3:79:57:b6:a1:40:62:0b:ec:d1:10:d7:
c3:59:fd:22:c9:40:d2:3f:31:53:40:30:bb:fe:75:
72:66:d6:49:b8:50:74:f5:e2:a5:7d:cd:dd:b7:6c:
8b:4a:5b:30:9f:42:bf:12:51:f9:d8:28:e6:3e:62:
45:8a:57:33:67:5b:e9:27:9a:e5:ec:76:71:f4:10:
44:91:f9:3f:5c:16:b7:bc:e4:99:bf:2f:01:d7:6b:
89:0e:58:a8:95:7c:f2:c6:91:f4:7e:36:a0:59:70:
f5:0c:fd:bf:d1:26:e6:14:d5:79:d2:0d:b3:fa:21:
5d:99:e8:3b:7e:53:d7:df:a2:5c:42:f0:61:bf:47:
a2:a3:c2:6f:37:29:22:a7:83:0e:2e:24:b0:31:d2:
f5:0f:88:47:38:29:3e:ce:28:f7:f4:ce:48:da:6f:
71:fc:49:34:1e:ed:8d:38:78:65:3d:aa:36:9a:ad:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:CD:7D:D5:89:15:A1:4C:9F:88:26:11:B1:EB:1A:28:AC:E7:29
X509v3 Authority Key Identifier:
keyid:85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/DfjNfdWJFaFMn4gmEbHrGiis5yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.24.0/22
IPv6:
2a01:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:14:43:8b:fd:3f:4e:e3:f4:41:2b:50:0b:1d:a8:0c:f8:e5:
dd:96:82:d3:98:4c:aa:a0:d3:1b:60:fd:c0:d2:9f:61:5d:44:
1a:06:ab:6c:e1:3a:83:16:21:6c:8f:49:90:53:22:18:89:ab:
38:8b:eb:38:86:06:25:e9:70:7b:b6:cc:71:70:81:1e:bb:06:
f9:02:d7:21:c0:76:a4:dd:aa:64:ca:57:c1:b6:56:b6:d2:a0:
bf:98:96:a5:a9:f2:fb:18:7f:fa:3f:07:ac:e5:0e:c0:5a:62:
d2:f0:9e:6d:b2:b7:f1:b2:8c:d8:bb:b4:ca:b3:eb:ea:13:95:
ec:00:dc:d8:55:6a:23:f3:4e:37:85:74:71:2a:34:ff:82:73:
8b:4d:58:69:86:45:62:d2:2b:1b:a8:7a:f6:f8:cb:e0:1e:94:
a3:91:f1:4c:8c:0e:c9:4c:77:f7:4e:dc:de:39:b9:b7:08:fd:
0c:67:77:2f:e1:8f:aa:3a:7b:0d:9f:d8:b7:a2:76:b0:4c:93:
96:66:c6:e5:48:bd:fe:0d:5a:37:2f:dc:00:f8:07:62:fe:9f:
f5:e7:eb:7a:0b:92:4a:01:fc:cb:5b:d9:c7:eb:08:3b:37:7a:
c3:91:9c:76:7b:6a:fa:2c:5c:8d:3f:9c:e9:ff:d7:9a:5e:14:
da:2b:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:49 2024 by rpki-client on console-fra.rpki-client.org