Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rxEjyDk40PB-xmTfCV7oKKIIk3Q.roa
File: rxEjyDk40PB-xmTfCV7oKKIIk3Q.roa (raw, json)
Hash identifier: jS8VHyJw6hnWhhC984W3dJwsmyPFn8OGCY1hhVbLn3o=
Subject key identifier: AF:11:23:C8:39:38:D0:F0:7E:C6:64:DF:09:5E:E8:28:A2:08:93:74
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 1C827F13
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rxEjyDk40PB-xmTfCV7oKKIIk3Q.roa
Signing time: Sat 01 Jan 2022 01:57:18 +0000
ROA not before: Sat 01 Jan 2022 01:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199361
IP address blocks: 185.77.232.0/22 maxlen: 24
185.20.76.0/23 maxlen: 24
2a00:49e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478314259 (0x1c827f13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jan 1 01:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af1123c83938d0f07ec664df095ee828a2089374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:2d:2c:08:12:45:da:37:f9:40:6d:d1:e0:
62:1d:c4:27:50:1b:2f:b2:93:67:26:27:e5:3f:53:
6c:e4:8b:45:c0:fc:f1:e6:bf:66:30:c5:24:6f:b6:
dc:d9:e3:ef:ed:d5:dd:d2:f1:36:ee:c6:42:50:ec:
49:16:52:c9:9a:13:a1:99:db:03:af:ff:6f:85:ef:
a1:8a:ea:5d:de:40:42:f3:c1:d1:04:ad:9c:c9:3a:
24:b5:47:22:80:4d:66:5f:4f:fb:12:df:4f:5d:c7:
e7:4d:ac:de:c0:e1:bf:f3:da:77:d2:f3:23:d7:4f:
a3:98:df:9d:30:18:32:ad:76:08:9b:f7:ed:78:76:
2f:d4:6f:e9:a0:33:2d:25:a8:3c:8d:1a:2d:b9:f6:
b5:49:f1:0f:a6:2e:22:78:28:3e:e1:9b:64:e1:58:
70:32:66:d0:24:5e:b7:02:8a:a0:ff:e3:4b:8e:5a:
8b:9b:b3:1a:02:0b:d2:78:d0:d3:4a:10:a4:fd:67:
9d:65:7d:13:f2:5c:49:8f:df:88:7e:05:8b:48:be:
4f:4c:c9:cd:85:c7:d8:96:b6:93:81:f2:5b:de:f4:
2c:e7:a7:b2:15:b2:82:e8:86:75:3d:2b:ff:e7:6d:
7d:b4:fe:2c:16:78:e9:d7:8f:bd:1e:ac:2c:27:ea:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:23:C8:39:38:D0:F0:7E:C6:64:DF:09:5E:E8:28:A2:08:93:74
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rxEjyDk40PB-xmTfCV7oKKIIk3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.76.0/23
185.77.232.0/22
IPv6:
2a00:49e0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:fc:e6:62:6e:70:cc:fb:e3:45:3e:33:24:03:34:d5:04:7f:
bd:05:b0:00:52:00:3b:71:93:4d:0a:ca:80:fc:19:1f:27:eb:
d4:e7:ee:ea:e8:da:a2:04:ac:b9:5a:e0:91:2e:8d:e8:cf:39:
58:8f:12:00:9c:64:d0:27:61:a2:4f:9e:5f:60:e3:a6:79:10:
85:50:0e:1f:29:2a:44:1a:a4:ad:2e:88:83:72:75:3e:e9:f3:
9b:6c:68:0a:29:59:f0:3a:b9:62:67:44:b1:7d:35:13:eb:2f:
4e:25:99:a0:3a:d6:0a:23:4a:a1:28:0e:d3:61:af:ab:6f:aa:
4b:65:0e:39:9a:f2:6e:ac:5e:26:6d:66:16:e0:8d:df:af:16:
a6:68:7a:d7:cc:e3:bb:9f:67:18:4e:07:c0:ca:0e:59:0b:ab:
bc:74:93:5b:b8:ee:ba:00:00:1e:ca:74:78:99:77:66:61:fa:
96:f9:c3:55:72:ec:f8:3c:77:0b:d8:49:14:21:a9:f8:65:ba:
55:b4:99:f7:ad:99:5b:07:bc:60:e7:cf:68:0c:1b:db:17:ea:
40:6f:44:aa:25:ea:c3:6c:c0:d8:f1:b1:c9:83:09:8a:4d:b6:
fc:9c:9a:44:48:c3:b1:e1:e6:44:dc:7d:41:89:8b:61:e5:1b:
14:36:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org