Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/UrH3z-lL_C7UMBaTXdG-i35AsJE.roa
File: UrH3z-lL_C7UMBaTXdG-i35AsJE.roa (raw, json)
Hash identifier: FoQBIOXEiqCqFrCp8ydobcXTRCoH9ohvnmrP1Z2QMIw=
Subject key identifier: 52:B1:F7:CF:E9:4B:FC:2E:D4:30:16:93:5D:D1:BE:8B:7E:40:B0:91
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 2895852A
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/UrH3z-lL_C7UMBaTXdG-i35AsJE.roa
Signing time: Sat 01 Jan 2022 02:52:30 +0000
ROA not before: Sat 01 Jan 2022 02:52:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 185.85.195.0/24 maxlen: 24
128.65.202.0/24 maxlen: 24
128.65.206.0/24 maxlen: 24
128.65.203.0/24 maxlen: 24
128.65.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680887594 (0x2895852a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jan 1 02:52:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b1f7cfe94bfc2ed43016935dd1be8b7e40b091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:ed:04:13:d5:05:84:c9:55:f8:27:fc:10:
53:06:6d:78:54:1b:06:67:e5:72:28:a9:1e:86:5d:
6c:87:e4:17:36:af:cf:fb:42:8d:10:bd:35:28:30:
bf:73:d3:73:16:d5:7f:21:f5:6b:5f:e4:87:57:8c:
eb:f0:18:e7:08:28:44:c9:a5:bf:67:63:3b:f9:fb:
99:72:b4:5e:ad:88:52:2a:ce:b5:6d:60:35:c8:ac:
ca:27:77:75:05:82:95:f1:1e:f2:08:4f:5e:d5:4b:
1f:4b:73:a0:d6:12:14:ac:ac:76:ae:68:df:3c:71:
af:a2:19:ae:a5:3d:d0:8e:34:5a:36:d7:ed:7b:24:
a9:91:bf:4b:5d:5a:d9:43:c5:01:cf:77:24:97:ec:
63:6a:46:6b:b0:9f:01:3c:67:4a:c7:85:a2:71:d0:
d1:81:31:91:79:8a:93:ba:58:28:4d:ae:3c:95:72:
2f:ce:03:9e:72:26:58:57:e8:dc:7e:97:9d:ac:df:
8e:0c:53:9c:fc:b2:bd:0b:1f:86:35:52:a5:48:27:
69:88:a9:3a:c3:61:3e:de:c2:f3:02:62:79:b6:d8:
01:48:75:b7:eb:5d:6a:5d:71:f9:bf:2c:87:85:7a:
08:f6:44:12:4b:61:a1:0f:2d:a3:2c:c6:82:44:68:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:F7:CF:E9:4B:FC:2E:D4:30:16:93:5D:D1:BE:8B:7E:40:B0:91
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/UrH3z-lL_C7UMBaTXdG-i35AsJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.202.0/23
128.65.206.0/23
185.85.195.0/24
Signature Algorithm: sha256WithRSAEncryption
06:07:37:52:12:1c:b1:df:12:1c:2e:29:49:c6:74:5a:60:04:
01:0f:09:5d:aa:39:06:0f:1b:87:f9:2a:7c:ad:d9:12:8a:54:
f6:be:ba:6c:00:2d:a1:31:a0:6b:55:05:5a:ab:1b:2b:9b:1c:
bd:16:7c:aa:8c:02:8c:66:5f:d9:34:9f:e0:49:60:02:2f:db:
ea:4b:96:e7:d9:5f:55:f1:37:20:84:cc:2b:f0:81:f6:68:12:
4e:36:7b:64:e3:f3:03:b8:01:8d:a3:a7:e9:45:a3:92:f5:a2:
ed:e4:1f:4a:fe:53:38:e8:b0:0b:b2:40:56:6f:86:a4:93:98:
a3:00:a4:5d:77:fa:22:d9:2b:ea:c9:ae:ca:02:b1:2b:3c:a8:
1b:70:30:25:27:82:ff:5b:54:0c:c7:25:e1:cc:3c:a9:78:94:
3f:38:ba:07:d8:23:9a:19:b6:d0:59:a4:05:a4:da:f3:0b:fd:
2e:5b:8a:2b:fc:23:63:05:9c:2b:e2:27:2d:9c:60:02:1b:54:
51:f8:40:24:6a:1b:0c:e6:34:13:d0:77:3e:ee:89:82:28:8c:
9b:bd:55:91:81:6d:5c:b0:61:35:68:a3:5a:79:03:83:40:d5:
f0:c6:94:76:b4:21:d1:4c:df:f6:ce:72:57:f1:25:27:77:bf:
53:5c:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:33 2024 by rpki-client on console-ams.rpki-client.org