Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/v8aIYF1qfkUEQ5m0ShSI4JMhtfI.roa
File: v8aIYF1qfkUEQ5m0ShSI4JMhtfI.roa (raw, json)
Hash identifier: E6o86N0acWQGdaTvp4tM2TI382ze90ecZCD7BMXAft8=
Subject key identifier: BF:C6:88:60:5D:6A:7E:45:04:43:99:B4:4A:14:88:E0:93:21:B5:F2
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 0465139F
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/v8aIYF1qfkUEQ5m0ShSI4JMhtfI.roa
Signing time: Sat 01 Jan 2022 08:53:17 +0000
ROA not before: Sat 01 Jan 2022 08:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59817
IP address blocks: 185.70.56.0/22 maxlen: 22
2a03:34a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73733023 (0x465139f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Jan 1 08:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfc688605d6a7e45044399b44a1488e09321b5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:e8:d8:78:6a:fd:3c:31:56:7a:fe:6c:0a:
93:aa:ed:a4:05:68:24:3a:06:87:a5:ff:25:98:b1:
59:a9:fc:82:b9:4c:15:c5:6a:c6:47:19:08:a8:56:
4f:9b:6e:a6:0f:de:42:6d:e7:47:b9:a1:ec:e6:e2:
48:63:99:60:f4:ae:ad:5e:e8:63:9b:14:1f:99:5d:
b4:20:6d:8b:78:77:fe:26:c0:b0:7d:a9:df:df:99:
45:4b:1c:cd:dc:e9:1a:5d:93:2f:ec:a8:48:24:5a:
d3:18:1f:2e:07:9d:b7:29:d8:cf:29:e5:af:e0:43:
d9:e9:66:15:26:1e:15:84:18:58:95:c6:44:70:ce:
31:14:65:80:79:78:32:c4:72:77:88:3c:04:8e:b5:
60:82:cc:00:b1:c0:b4:f2:82:43:90:06:2b:53:c7:
bb:c8:eb:fd:61:c6:6b:21:4a:23:86:4a:60:1c:45:
9d:77:e9:a8:5c:45:09:3c:03:24:7e:07:3e:8e:3a:
d7:48:a7:4f:4c:4f:8e:c1:02:7a:73:02:b7:f3:8a:
33:5e:ad:69:2f:f5:2e:72:b3:a2:62:2d:82:3f:1a:
da:39:39:1d:00:ea:40:18:fa:72:16:1c:f9:d0:3f:
47:1b:2b:ba:72:39:09:6e:f9:62:c6:0d:92:0b:67:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:88:60:5D:6A:7E:45:04:43:99:B4:4A:14:88:E0:93:21:B5:F2
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/v8aIYF1qfkUEQ5m0ShSI4JMhtfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.56.0/22
IPv6:
2a03:34a0::/32
Signature Algorithm: sha256WithRSAEncryption
91:ce:91:87:16:8c:9e:c4:d9:bc:1d:83:50:68:c2:43:1f:3d:
56:0e:e2:4f:df:49:06:2e:98:e2:59:2a:72:1c:df:0c:e2:e4:
20:4a:7f:e7:28:45:18:2a:ae:5c:4b:65:64:b2:17:8e:6e:16:
50:0f:bf:f4:22:f8:b8:c9:e3:9b:a4:ec:c7:a0:84:9e:b1:cc:
78:58:98:34:7b:8c:b8:ce:75:d0:89:01:33:ea:79:51:18:f8:
49:66:59:17:17:d6:45:97:c9:77:18:ab:b1:fc:af:d2:89:45:
a2:00:e6:26:8a:c6:be:37:66:30:24:7c:2f:a8:c5:2f:b8:b2:
2c:37:78:9e:07:d6:ad:cd:5b:76:fe:71:42:d8:45:e2:8e:f1:
0d:d4:fb:a9:8c:b3:a8:1f:3a:35:06:b6:af:be:2a:5e:d4:fd:
9d:84:de:60:ec:c7:ec:50:43:d1:cb:77:a0:34:e4:a1:c1:5f:
5f:4a:9f:bf:bb:f2:fc:19:a4:8c:77:3c:b1:de:2c:a5:87:66:
f0:dc:b1:46:35:b9:0b:9b:65:b4:71:38:b1:3c:31:9b:1e:59:
c8:36:b6:cd:90:ee:63:6d:b2:90:93:48:8f:2f:2d:9b:62:38:
fe:5a:b6:b2:cb:3f:78:02:7e:59:7b:79:45:2a:cc:66:5c:58:
92:07:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:40 2024 by rpki-client on console-fra.rpki-client.org