Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/Hq4jN12R5EVWNCviotIoqAfT-xg.roa
File: Hq4jN12R5EVWNCviotIoqAfT-xg.roa (raw, json)
Hash identifier: NlNjVnDnIXOQKHCLRLHydgiqnkGYpo7Qd3EX7MCJ2+I=
Subject key identifier: 1E:AE:23:37:5D:91:E4:45:56:34:2B:E2:A2:D2:28:A8:07:D3:FB:18
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 1C02722D
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/Hq4jN12R5EVWNCviotIoqAfT-xg.roa
Signing time: Sat 01 Jan 2022 12:59:47 +0000
ROA not before: Sat 01 Jan 2022 12:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.114.192.0/24 maxlen: 24
185.114.195.0/24 maxlen: 24
185.114.193.0/24 maxlen: 24
185.114.194.0/24 maxlen: 24
185.19.95.0/24 maxlen: 24
185.19.94.0/24 maxlen: 24
185.19.92.0/24 maxlen: 24
185.19.93.0/24 maxlen: 24
185.59.29.0/24 maxlen: 24
185.59.30.0/24 maxlen: 24
185.59.28.0/24 maxlen: 24
185.59.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469922349 (0x1c02722d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jan 1 12:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eae23375d91e44556342be2a2d228a807d3fb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:83:8c:62:c4:67:b4:25:42:16:a1:c2:b0:
8a:e6:94:e0:4a:7a:97:fe:62:b5:b6:9a:97:97:20:
b5:1b:de:3d:41:31:63:ae:1c:43:9e:ae:98:b5:39:
cc:16:f2:70:72:4f:de:2d:0f:fe:f5:e3:79:bb:ce:
be:a3:d1:a4:4d:3d:da:ba:db:97:65:c2:ef:53:78:
78:28:42:ea:c8:98:b9:11:ca:0f:17:62:ff:af:15:
e8:14:72:e0:16:60:36:d1:53:a5:eb:76:eb:62:8e:
90:77:6a:b6:3a:b3:1d:63:06:f2:58:b5:71:a5:25:
a9:78:66:fc:a1:89:96:a8:6a:fb:80:d1:a5:bc:0a:
83:65:db:47:e8:3e:c9:d3:b4:c3:17:8a:a6:44:4d:
8a:f4:64:0d:34:63:35:10:de:08:c3:03:83:b1:75:
e0:b4:3a:99:35:96:bd:0b:49:98:13:2d:e3:7f:ea:
28:cc:10:22:65:f9:80:d8:e3:f3:f8:9f:46:08:19:
6a:07:89:59:e3:f9:76:ed:28:04:4c:37:c5:6c:18:
69:93:9b:27:3d:2e:4f:a2:75:0d:5e:b5:4c:61:e8:
54:fa:8f:e6:ab:ea:6a:2b:3e:34:d0:59:f5:3f:e1:
9e:2a:47:6d:29:32:e7:4d:9c:69:8a:43:4c:41:40:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:23:37:5D:91:E4:45:56:34:2B:E2:A2:D2:28:A8:07:D3:FB:18
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/Hq4jN12R5EVWNCviotIoqAfT-xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.92.0/22
185.59.28.0/22
185.114.192.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:6c:d5:df:4b:f3:18:fd:a4:b2:2c:a1:be:2a:3a:d1:6e:fa:
16:ed:73:07:0d:4e:db:8a:15:0d:51:4b:3e:56:98:e8:7a:5f:
07:af:11:72:1d:3e:48:68:13:82:94:2e:0e:53:3d:fd:e3:4a:
52:48:d7:47:4a:57:88:4d:c8:a9:07:cc:23:f1:1a:3d:6f:e2:
ad:b4:23:32:11:a7:6d:75:ee:a6:2f:6e:5d:89:e4:b3:c1:f6:
e9:0b:dc:a2:17:10:3b:14:09:fc:f3:1a:89:ec:ec:11:bd:88:
e8:dc:34:9a:f4:74:3f:9e:2c:cc:92:80:01:00:b1:86:fa:42:
17:97:13:17:74:8b:42:79:f6:a0:7a:fe:4a:ab:65:95:58:dc:
ad:b4:e3:3a:d1:44:b4:9c:a1:e7:64:6e:db:fe:e1:6b:2f:76:
ee:2d:89:b8:69:1f:7a:06:3d:ea:0f:f2:82:7b:ef:f7:4d:5d:
ac:85:40:d9:1b:1f:cd:3f:7b:3f:cd:f5:8a:d7:fa:2f:54:5e:
e2:01:7a:bd:4c:f2:d1:bb:35:ee:08:a5:02:6c:36:69:55:13:
04:74:70:3a:e9:d7:6b:51:10:0b:79:0d:e6:43:ce:72:86:8f:
7e:8a:e0:f0:18:f8:73:4a:35:41:39:e8:67:d0:40:65:37:7d:
d4:93:05:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org