Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/SIIq8TtYPLeoG7hjK-DxjSmka5Q.roa
File: SIIq8TtYPLeoG7hjK-DxjSmka5Q.roa (raw, json)
Hash identifier: vmekgSXMFlFBOAxmrjFEPPujAZ2iM6F0fJ7siLuSf9U=
Subject key identifier: 48:82:2A:F1:3B:58:3C:B7:A8:1B:B8:63:2B:E0:F1:8D:29:A4:6B:94
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 15DE2008
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/SIIq8TtYPLeoG7hjK-DxjSmka5Q.roa
Signing time: Sat 01 Jan 2022 04:03:59 +0000
ROA not before: Sat 01 Jan 2022 04:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56647
IP address blocks: 185.168.112.0/24 maxlen: 24
185.94.84.0/23 maxlen: 23
185.168.113.0/24 maxlen: 24
185.94.86.0/24 maxlen: 24
2a04:2d00::/48 maxlen: 48
2a0b:f600::/48 maxlen: 48
2a04:2d01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366878728 (0x15de2008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jan 1 04:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48822af13b583cb7a81bb8632be0f18d29a46b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:03:59:03:22:71:f2:73:58:9a:75:ec:a7:
6a:66:cd:f9:12:75:79:0b:39:46:72:55:67:eb:aa:
79:16:da:c0:0f:1c:41:6d:33:48:71:4c:e7:01:4b:
b4:85:18:d5:ce:ac:2f:13:a7:a8:8d:cd:df:ed:b1:
d6:1f:b2:b7:6c:b3:cd:80:db:a0:df:65:34:7c:d6:
58:d3:d7:71:98:d9:07:e7:30:a6:89:dc:b6:43:91:
92:17:05:df:e1:f9:4e:16:ce:e1:9c:6d:91:23:f1:
99:d2:24:f7:a2:e1:30:a2:fe:bb:95:cd:53:f1:ea:
d4:be:6c:5a:ad:00:93:64:db:ed:c8:7d:98:92:d1:
77:ca:8e:95:24:a0:c6:9e:7e:6b:c2:65:20:a9:4a:
b5:65:7b:0e:84:7a:4f:14:1e:c8:7f:24:3a:24:dc:
ff:15:39:1d:1a:46:c5:b2:a7:bd:b1:36:c3:75:b9:
56:8f:a1:4f:c4:29:77:96:91:d3:55:9e:79:d3:a1:
40:a9:7b:55:11:fc:75:aa:a3:ea:ec:d9:86:ca:b9:
3d:3e:c7:21:0d:dc:37:6f:39:bd:1a:38:2b:79:c0:
d9:dc:52:0e:b4:db:32:06:34:a2:08:bf:80:b7:a3:
3b:d7:5c:3c:1b:a5:fb:93:11:fb:d8:0e:de:64:aa:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:2A:F1:3B:58:3C:B7:A8:1B:B8:63:2B:E0:F1:8D:29:A4:6B:94
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/SIIq8TtYPLeoG7hjK-DxjSmka5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.84.0-185.94.86.255
185.168.112.0/23
IPv6:
2a04:2d00::/48
2a04:2d01::/48
2a0b:f600::/48
Signature Algorithm: sha256WithRSAEncryption
04:29:04:da:93:9f:72:46:93:a4:6a:d7:91:26:41:fb:4a:c1:
92:ea:f5:0d:a0:5e:88:9a:0a:06:91:4e:63:fe:e8:b7:e1:90:
2f:ec:16:55:91:99:bb:73:4a:80:73:8a:60:3f:95:be:08:0e:
60:e5:de:00:a4:fe:02:60:e2:03:ea:40:98:6a:14:76:b0:0b:
09:7a:aa:8a:fb:a0:a0:9b:59:86:6c:16:2b:26:55:55:45:0e:
21:49:85:fa:06:24:8a:e2:3e:27:05:e4:5e:fd:1a:88:11:25:
83:db:5e:6c:3a:be:14:f3:71:16:d4:10:e9:c7:22:68:37:e1:
33:44:c9:11:a4:3d:28:7f:42:8b:04:6c:72:b4:cb:45:50:2e:
0a:cb:c2:d9:46:c6:2e:33:ac:b2:94:47:2d:6a:a2:8b:c7:3d:
e3:63:7a:12:06:84:6a:fd:cc:b7:d3:33:92:47:17:31:2a:52:
06:b1:a2:fd:cc:0f:47:3c:61:35:42:9a:bf:38:6d:c1:7e:c0:
43:63:64:78:d9:58:5d:ce:48:e5:49:6b:17:dd:a8:44:6f:58:
0a:bf:88:c3:05:d7:2b:29:26:f1:31:47:fb:34:e5:7d:6b:ac:
b4:58:89:1b:d3:e7:04:b8:38:bc:bf:5d:7e:dd:aa:61:66:35:
0e:1a:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:12 2024 by rpki-client on console-fra.rpki-client.org