Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/et8k91F-qjwMSNStZjRLrcKb4Xw.roa
File: et8k91F-qjwMSNStZjRLrcKb4Xw.roa (raw, json)
Hash identifier: nh+xCJRxT5fDxBOjAdnSZVaTihpbbrg2PbzzznAoq2w=
Subject key identifier: 7A:DF:24:F7:51:7E:AA:3C:0C:48:D4:AD:66:34:4B:AD:C2:9B:E1:7C
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 01F94031
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/et8k91F-qjwMSNStZjRLrcKb4Xw.roa
Signing time: Sat 01 Jan 2022 02:02:13 +0000
ROA not before: Sat 01 Jan 2022 02:02:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206372
IP address blocks: 185.175.36.0/22 maxlen: 22
2a0b:cd00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33112113 (0x1f94031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Jan 1 02:02:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7adf24f7517eaa3c0c48d4ad66344badc29be17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:87:63:fe:55:63:08:bf:64:6f:16:e0:64:
ea:94:9d:60:bd:47:2e:7d:4a:d8:5c:f1:90:b2:a3:
07:35:ba:cd:b7:23:71:82:e5:34:95:dd:c5:1b:21:
20:34:73:b9:88:94:af:83:bf:e8:b1:81:d5:09:0a:
c6:c7:6f:47:6d:bf:82:62:7d:50:b1:e8:50:74:43:
36:ec:5b:ed:de:40:20:75:2e:3c:5f:8a:96:16:9a:
06:fa:e8:e1:7d:df:3c:67:a0:fb:f1:a9:39:3b:61:
92:6e:2c:f3:f0:d0:ff:03:6e:a2:15:0d:ae:8f:91:
e7:eb:2e:49:2a:b1:ff:99:62:c8:3c:81:d5:f6:a9:
4e:0c:1f:ac:70:92:bd:3b:f0:58:66:9b:34:a1:b7:
a4:01:a1:18:60:77:12:b7:c1:76:56:f3:0e:ae:27:
97:22:83:bd:bc:ca:eb:72:ee:94:b3:17:66:db:64:
ee:3c:fa:00:c9:49:bf:de:1d:cb:17:b8:3c:74:5e:
d1:cc:43:70:09:78:99:ca:6b:b6:7b:b9:65:8b:16:
d6:f0:1c:5f:85:62:f2:b8:55:66:1f:47:62:fe:dd:
d5:a5:d8:81:93:7a:13:7d:c4:ee:21:25:47:54:77:
97:9f:2d:c0:c3:45:64:12:5d:94:01:d3:68:54:9b:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:24:F7:51:7E:AA:3C:0C:48:D4:AD:66:34:4B:AD:C2:9B:E1:7C
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/et8k91F-qjwMSNStZjRLrcKb4Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.36.0/22
IPv6:
2a0b:cd00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:05:f3:76:55:90:8a:ef:61:d4:cd:fa:fd:c8:2c:db:16:9d:
04:73:87:92:e9:55:c3:54:7f:93:4f:8b:11:50:b2:86:de:2c:
ec:d5:60:b1:25:15:62:9e:64:7f:69:86:cb:73:6b:23:a7:6a:
98:11:57:a6:10:1a:47:bd:bb:4e:8c:91:65:2e:4b:94:dd:48:
bc:b7:d0:a9:6d:a3:7a:13:ea:b1:35:d3:f9:d4:c6:30:6f:7d:
e3:d4:05:32:6c:ab:a0:34:c7:06:da:0a:04:67:62:fd:52:55:
41:65:aa:cf:bf:29:e2:5a:6d:5e:9f:c7:8e:e8:c9:b0:63:bd:
75:c1:d4:05:b5:9f:ae:95:5b:a1:eb:b2:2d:ee:23:28:48:85:
99:00:13:14:53:02:51:b2:c5:94:08:da:b4:61:ad:55:da:20:
2c:cf:50:e0:1b:5f:cb:a7:fe:9d:d8:f3:c2:0d:11:53:d3:b1:
43:82:96:ec:01:0f:8b:f7:d1:35:5b:02:67:54:e5:1a:04:eb:
b5:74:6c:bf:72:13:cc:82:80:05:52:fa:1e:4a:54:90:21:3d:
7b:8c:f8:57:f3:ab:dc:e9:a0:48:12:aa:35:b5:2f:23:44:a1:
be:31:47:b0:77:32:f7:cd:64:93:7c:b6:a1:b8:c9:69:ee:ba:
e2:e0:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:53 2024 by rpki-client on console-fra.rpki-client.org