Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/I0KecInZjtMg7xt_4Q5_uXb61ug.roa
File: I0KecInZjtMg7xt_4Q5_uXb61ug.roa (raw, json)
Hash identifier: 0jEjO9dp9guQF/oZxT7/gaIp7DK9n1jBLyume5eL0Ic=
Subject key identifier: 23:42:9E:70:89:D9:8E:D3:20:EF:1B:7F:E1:0E:7F:B9:76:FA:D6:E8
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0B4326
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/I0KecInZjtMg7xt_4Q5_uXb61ug.roa
Signing time: Sun 24 Apr 2022 09:21:42 +0000
ROA not before: Sun 24 Apr 2022 09:21:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8376
IP address blocks: 185.98.220.0/22 maxlen: 24
217.23.32.0/20 maxlen: 24
194.165.128.0/19 maxlen: 24
213.186.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738086 (0xb4326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Apr 24 09:21:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23429e7089d98ed320ef1b7fe10e7fb976fad6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:9c:51:fc:61:21:21:ee:73:7d:df:fe:24:
dc:7e:14:e8:13:c8:a9:06:1d:46:89:0f:db:05:e8:
8d:ad:8c:dc:28:15:17:47:cc:d5:5e:d3:b8:2f:33:
43:5d:0d:85:ab:89:17:99:d3:21:58:92:f1:a3:ff:
7f:df:11:39:b0:02:85:d2:eb:89:7c:ce:e3:ec:7c:
fe:99:9c:71:81:a3:19:3e:c1:57:8f:6b:36:ac:40:
3c:6c:bc:8d:08:71:7f:53:37:83:52:84:18:0f:b9:
8f:70:5c:86:02:ab:f9:6f:f7:be:5a:43:51:e1:b4:
78:7e:75:66:fc:94:06:4e:64:9e:66:2e:a6:53:4a:
f8:56:a1:cf:73:c6:63:d7:01:95:28:4b:71:1e:a7:
ec:ad:89:50:fe:a2:c2:e0:b4:99:ce:60:f3:d1:45:
b4:24:e5:7d:59:bb:02:5a:e7:4a:2d:5d:dd:1f:60:
1d:7e:31:a8:98:66:35:14:08:37:6e:95:99:e6:90:
06:87:cf:7e:b1:25:d5:30:df:08:bc:ec:e5:5d:3e:
e3:f7:97:37:13:28:3f:81:c4:8e:7f:50:dc:b5:f3:
4b:e6:8b:c5:95:b6:76:ac:12:c6:0f:2a:7c:d0:18:
71:d6:ae:6a:24:8d:0a:b5:15:c5:25:d0:fb:23:b1:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:9E:70:89:D9:8E:D3:20:EF:1B:7F:E1:0E:7F:B9:76:FA:D6:E8
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/I0KecInZjtMg7xt_4Q5_uXb61ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.220.0/22
194.165.128.0/19
213.186.160.0/19
217.23.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:9a:11:ae:6e:ff:18:f8:42:83:ce:f8:bb:2c:b5:2c:37:f5:
47:9e:9b:ee:86:d3:ae:69:a9:3a:d7:57:77:9b:eb:45:24:3d:
8f:e6:94:30:76:8b:e6:1e:43:77:9d:ab:09:a5:41:5d:31:f5:
ab:33:24:97:f7:bb:2e:26:4e:37:ca:e9:dd:0b:5e:d3:cb:bd:
48:0a:f1:a0:b1:46:f3:b7:16:80:ae:46:b8:dc:a5:e4:eb:2f:
1f:e2:cf:95:ca:30:80:76:32:80:c7:9e:59:8f:2f:ff:1b:83:
e8:81:f3:e5:5e:a7:df:b0:59:cd:59:19:5d:c1:96:e3:5e:6f:
e6:9c:d0:5b:2a:24:ac:a4:85:c1:0d:54:b7:b2:f3:a4:d7:6b:
5d:69:45:c8:c4:03:da:08:d9:21:82:e3:0e:98:0f:6b:7d:3c:
c6:96:85:43:0c:fc:b2:ea:4b:39:cc:fc:d9:2e:18:d0:11:52:
34:9b:5e:56:4f:2c:85:04:f9:8e:53:a3:d1:34:e1:31:ed:25:
18:e3:2c:5f:47:61:a6:34:92:76:f9:35:07:90:18:7b:dd:e2:
99:2c:ab:62:81:22:c9:cb:66:be:5b:b7:9f:9c:08:0a:00:be:
30:4a:48:5b:77:1b:d7:f4:05:84:d4:d1:6e:ab:3f:d4:fe:aa:
d2:41:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org