Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/S84cY3t69blNQvm56fh-_GA6isA.roa
File: S84cY3t69blNQvm56fh-_GA6isA.roa (raw, json)
Hash identifier: pPLt14EVNWjHx75PU7BueuHdVKBJXOJ4rtVUhdpb1ls=
Subject key identifier: 4B:CE:1C:63:7B:7A:F5:B9:4D:42:F9:B9:E9:F8:7E:FC:60:3A:8A:C0
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01D46FDE
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/S84cY3t69blNQvm56fh-_GA6isA.roa
Signing time: Fri 04 Feb 2022 17:59:42 +0000
ROA not before: Fri 04 Feb 2022 17:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.22.56.0/22 maxlen: 24
147.185.163.0/24 maxlen: 24
195.14.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30699486 (0x1d46fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Feb 4 17:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bce1c637b7af5b94d42f9b9e9f87efc603a8ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4e:d8:3c:ce:7f:88:f2:cd:1e:5b:5e:2f:30:
ab:14:2e:37:50:d1:90:c2:65:22:67:2f:54:94:ca:
12:4e:5c:f2:e2:75:d1:33:73:bd:66:0c:ec:26:95:
a0:f1:a7:5d:3e:84:da:0a:df:b0:c7:2e:b7:7f:7e:
87:4a:f9:d2:77:e9:b7:a3:3b:3b:ba:3a:41:d4:0c:
a1:f3:dd:bc:8f:7f:74:75:e7:7d:bf:99:11:ce:cc:
fa:f0:a3:bb:14:3e:f6:96:ef:07:6f:aa:ba:9d:e4:
36:61:81:39:bf:78:94:be:f5:02:88:76:7a:13:7b:
af:7d:f9:b8:60:04:6a:01:b7:b5:50:39:14:99:64:
e6:d9:2a:1d:ed:18:1d:c9:3c:23:6e:11:67:a5:ee:
ba:3d:41:34:98:77:30:4e:c8:33:c6:cc:ab:3a:8f:
e0:57:79:3d:64:51:75:4a:6a:f0:4f:cc:42:e6:3b:
89:5a:78:b7:14:76:35:b0:44:2d:54:02:1f:c8:77:
7e:a0:1e:56:99:91:e9:55:cb:ae:74:be:6b:28:db:
72:d3:23:03:97:e6:47:14:c9:cd:e9:c8:12:62:25:
12:e7:0a:25:bb:35:1a:07:a7:0e:db:1c:9a:c5:f3:
35:36:bb:f2:bb:a4:7b:3f:8f:f8:b0:f6:1c:d4:8b:
dd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:1C:63:7B:7A:F5:B9:4D:42:F9:B9:E9:F8:7E:FC:60:3A:8A:C0
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/S84cY3t69blNQvm56fh-_GA6isA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
185.22.56.0/22
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:80:e0:58:51:b6:b1:fb:48:23:72:29:e6:31:84:71:4b:66:
af:38:11:a5:9f:58:56:32:5c:fe:80:15:b9:0a:1c:71:46:fa:
ce:76:ed:cb:d3:1b:f2:c6:a7:91:10:bc:bb:89:78:5a:a0:b5:
94:2e:6a:dc:d7:17:ed:8c:6c:08:5f:a7:88:08:3b:5c:b3:ee:
6f:f3:28:d0:57:5e:3c:7f:ac:65:a3:83:ad:21:05:b9:20:2a:
39:a1:b6:c6:14:5e:65:3a:df:34:40:2e:4c:a0:e1:df:be:ec:
d6:4e:d4:20:66:80:be:27:0d:dd:e4:87:e8:b8:f0:b8:63:7c:
00:25:ff:98:01:4d:35:3a:58:c3:ce:4d:d4:73:38:00:8e:9f:
6b:8b:30:f8:58:1e:2e:8c:84:80:8d:c3:36:89:77:88:1f:d3:
6f:2e:a6:20:84:cf:00:1a:d5:25:70:03:7d:64:bd:5c:4e:3f:
34:fe:f4:62:a4:a2:05:e2:7a:38:df:44:1a:fc:07:c6:f0:5d:
b6:af:c8:bf:b7:cb:84:06:e7:38:f3:8b:b1:32:6c:bd:4d:2f:
0c:15:2b:ec:b0:49:1f:d9:55:24:55:53:b9:d8:f5:b9:c4:40:
d4:12:16:ea:14:ec:4d:16:6e:a9:90:46:a8:ea:b6:3a:11:37:
a0:e4:fc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org