Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/vr8OtztJfxz9xgbibIiShSmqkLM.roa
File: vr8OtztJfxz9xgbibIiShSmqkLM.roa (raw, json)
Hash identifier: LkYsZEtFWHbTEexbaWkLSkwSoBN7BShcWYQjVSyJlOo=
Subject key identifier: BE:BF:0E:B7:3B:49:7F:1C:FD:C6:06:E2:6C:88:92:85:29:AA:90:B3
Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial: 07CEB928
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/vr8OtztJfxz9xgbibIiShSmqkLM.roa
Signing time: Sat 01 Jan 2022 15:03:30 +0000
ROA not before: Sat 01 Jan 2022 15:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42061
IP address blocks: 185.248.180.0/22 maxlen: 22
193.186.5.0/24 maxlen: 24
193.186.6.0/24 maxlen: 24
2a0d:ee80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130988328 (0x7ceb928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Validity
Not Before: Jan 1 15:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebf0eb73b497f1cfdc606e26c88928529aa90b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:53:eb:42:1a:14:60:44:6a:b2:97:c6:c5:
da:50:b1:b2:b7:1e:af:9e:c4:77:7d:de:50:d1:a4:
19:65:25:03:bc:23:fb:e5:0b:83:3b:00:c0:d4:9c:
79:e9:6b:0a:07:ff:9d:fe:75:66:81:61:7c:6e:2b:
0d:d0:13:b4:55:37:51:48:9b:2d:cd:40:f9:ba:c6:
5f:f3:07:58:fa:13:ba:c3:ff:b1:83:2a:70:93:2d:
7c:34:a0:68:9f:fd:d9:43:74:33:af:40:46:15:d8:
52:1a:c6:fa:e5:ad:30:86:b2:32:98:10:e8:ff:91:
b7:82:89:70:74:6a:34:3a:f5:a6:8b:7d:30:7d:ec:
0e:1a:08:1a:6b:f8:49:4d:e7:a5:19:56:21:49:5b:
58:fc:df:09:76:4d:80:a2:a2:b5:4f:9b:70:40:a5:
cd:05:69:5c:92:ab:18:ee:7c:46:a9:c1:45:93:69:
8a:b1:08:fb:40:73:c2:41:6c:c4:91:79:e0:c7:7e:
ac:c4:c5:1b:9e:8e:71:31:fe:f4:0f:06:08:df:3d:
44:25:5d:a6:eb:b7:b2:ed:a7:da:6a:72:e3:7a:a8:
e3:a4:01:81:b2:89:80:16:d6:d5:97:24:08:4e:d4:
5d:b8:94:02:19:75:5b:b3:da:69:32:dc:af:79:e5:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:0E:B7:3B:49:7F:1C:FD:C6:06:E2:6C:88:92:85:29:AA:90:B3
X509v3 Authority Key Identifier:
keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/vr8OtztJfxz9xgbibIiShSmqkLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.180.0/22
193.186.5.0-193.186.6.255
IPv6:
2a0d:ee80::/32
Signature Algorithm: sha256WithRSAEncryption
6a:dc:e5:1c:52:20:d8:a1:94:34:8e:e0:49:9a:8d:aa:3a:cc:
be:58:40:7e:a1:3c:4e:d6:41:50:b1:40:b2:67:b1:a3:67:66:
5e:85:b0:52:d9:27:b7:4e:10:90:d6:4b:a9:dd:f6:63:7d:0f:
74:36:eb:e0:ea:e7:89:df:fc:ad:66:7f:e0:5f:86:f9:ab:b2:
a1:fd:59:e5:c3:b0:c3:6a:ba:5c:7f:51:30:6c:22:62:88:36:
0c:51:81:1b:7f:52:d2:12:b8:d4:e9:30:df:27:a2:22:d4:60:
d4:3c:ff:bd:f7:d7:8b:df:0c:e3:d4:bc:5f:7c:64:0a:9c:fc:
f4:11:b3:a9:2a:9b:d1:f2:87:19:b9:f6:aa:d2:51:6d:c7:0a:
53:97:94:4d:bb:dc:fa:66:ff:09:13:60:b2:7b:2c:3e:fa:9a:
b1:88:ec:8f:57:22:91:df:3a:0c:5a:9c:f2:63:06:d6:65:ce:
1e:c7:19:61:f3:17:ad:54:c8:9e:de:57:86:04:7a:c2:57:d9:
05:e2:5b:20:61:e3:e0:65:1e:f1:75:bd:45:ec:48:f2:c0:4e:
79:9f:c3:23:42:06:6d:de:c9:cf:c3:dc:e5:1f:8f:e7:10:ee:
26:9e:54:46:8a:0b:be:70:3a:91:99:13:78:9d:9e:bf:5f:34:
b5:94:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:05 2024 by rpki-client on console-ams.rpki-client.org