Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/7OTfLzzjYCeoxmPCkpOMCyCBhdY.roa
File: 7OTfLzzjYCeoxmPCkpOMCyCBhdY.roa (raw, json)
Hash identifier: F/1UGvz2bE4wjKhWRkY+fyexNTXuWdNXNbeJf0BP9lk=
Subject key identifier: EC:E4:DF:2F:3C:E3:60:27:A8:C6:63:C2:92:93:8C:0B:20:81:85:D6
Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial: 127A0E21
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/7OTfLzzjYCeoxmPCkpOMCyCBhdY.roa
Signing time: Tue 15 Feb 2022 10:15:05 +0000
ROA not before: Tue 15 Feb 2022 10:15:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39176
IP address blocks: 185.86.52.0/24 maxlen: 24
185.86.52.0/23 maxlen: 23
185.86.55.0/24 maxlen: 24
185.86.54.0/24 maxlen: 24
185.86.53.0/24 maxlen: 24
2a05:b500:54::/48 maxlen: 48
2a05:b500:55::/48 maxlen: 48
2a05:b500:53::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 309988897 (0x127a0e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Validity
Not Before: Feb 15 10:15:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece4df2f3ce36027a8c663c292938c0b208185d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:70:ff:9a:4c:59:b0:89:e6:4c:30:92:1f:
5b:43:c7:21:4d:dd:63:4c:1b:06:03:97:8f:b7:ff:
b0:a2:3d:59:43:f8:20:92:3d:ae:42:14:32:87:35:
25:c4:b0:6a:26:9f:d4:57:98:3a:8d:ce:d3:53:36:
f9:d9:97:1b:bd:ab:b7:64:6d:93:db:bc:ac:60:7b:
f9:29:9b:6e:a7:fb:71:a3:e4:eb:bf:9c:5f:29:18:
6a:f7:44:89:4e:26:5d:49:02:bb:8b:4f:87:c8:87:
6f:2f:d5:3f:65:2d:23:e1:96:ab:e0:43:21:53:4b:
e7:23:82:f3:5a:9b:41:6c:10:f3:58:9c:5f:c4:ff:
06:e9:a3:5f:f2:24:56:5a:37:d7:2d:b1:fa:4e:3a:
56:79:d2:e7:ae:e2:26:bc:b6:61:91:18:91:7e:37:
8e:eb:8f:e1:d7:8e:66:d9:e0:02:dc:da:d2:05:1e:
5c:90:bc:31:a5:49:6d:ad:65:85:97:20:23:2a:5e:
0a:46:08:da:3d:4f:2e:5f:82:10:d7:09:fb:dd:d7:
82:f7:97:59:ce:13:a9:15:d4:d8:c8:20:8a:78:c3:
ba:f2:1d:08:f7:6d:2b:a7:9d:0a:1d:84:62:ab:5d:
9f:d8:05:3a:29:3e:3e:51:84:36:37:70:e1:37:eb:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:DF:2F:3C:E3:60:27:A8:C6:63:C2:92:93:8C:0B:20:81:85:D6
X509v3 Authority Key Identifier:
keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/7OTfLzzjYCeoxmPCkpOMCyCBhdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.52.0/22
IPv6:
2a05:b500:53::-2a05:b500:55:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:f7:59:17:fe:0d:b8:50:f1:5c:e5:88:68:ae:67:c6:80:5f:
f0:7e:c8:a3:86:7f:bb:42:ac:22:43:42:a6:31:18:65:20:57:
e4:a6:89:df:45:7b:4e:db:08:22:e9:27:fc:47:af:b3:dc:0d:
26:0d:b2:1b:34:c4:75:0c:cc:22:8b:12:90:8e:3a:69:e3:41:
6f:82:90:87:dc:57:88:73:da:70:f6:38:0c:49:36:55:f0:d7:
48:10:3f:ec:c5:80:a4:d0:5e:1f:20:bd:66:32:ce:ab:b7:8d:
de:5c:8d:db:71:38:a6:59:ab:09:30:34:4f:7f:ed:dc:db:b2:
22:18:35:01:29:1e:79:ea:29:ba:eb:d5:7f:5a:12:f6:4e:00:
c9:aa:d7:64:39:8a:55:f2:eb:9d:cd:01:0e:b2:c3:cb:32:4d:
9e:3a:97:23:1a:4a:f0:68:c8:3c:52:0c:55:c6:21:0d:e4:6b:
8c:1f:51:17:c1:6a:06:12:d8:45:66:88:46:b8:c6:bd:64:22:
91:91:a0:9e:8c:d9:b5:eb:a1:8d:4d:e7:1a:28:26:0d:39:aa:
a8:7b:cb:9a:90:b2:65:a7:82:d9:a9:20:60:0f:f1:af:5a:94:
88:18:84:5c:26:cc:b3:2b:59:7f:d8:8b:1e:7c:28:a4:7b:55:
86:33:5d:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:19 2024 by rpki-client on console-ams.rpki-client.org