Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/siLho2OckSJ_DgqSnIjYkiiLd-4.roa
File: siLho2OckSJ_DgqSnIjYkiiLd-4.roa (raw, json)
Hash identifier: UUH3Z2STv+cT02CEFSqFFhbqm71TJYHLeIk331MlCXM=
Subject key identifier: B2:22:E1:A3:63:9C:91:22:7F:0E:0A:92:9C:88:D8:92:28:8B:77:EE
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853457C799FE7B6502ADAACF2C11FC011F
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/siLho2OckSJ_DgqSnIjYkiiLd-4.roa
Signing time: Wed 21 Dec 2022 11:00:46 +0000
ROA not before: Wed 21 Dec 2022 11:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60675
IP address blocks: 185.114.84.0/22 maxlen: 24
185.252.8.0/24 maxlen: 24
185.252.9.0/24 maxlen: 24
185.252.10.0/24 maxlen: 24
185.252.11.0/24 maxlen: 24
185.252.8.0/22 maxlen: 24
185.142.192.0/22 maxlen: 24
185.27.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:57:c7:99:fe:7b:65:02:ad:aa:cf:2c:11:fc:01:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 11:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b222e1a3639c91227f0e0a929c88d892288b77ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:f0:01:e5:04:90:81:0d:17:fb:2d:75:9a:
48:39:e6:6f:1e:6a:00:25:9c:fb:3b:3a:bf:e5:f3:
cb:e9:19:52:46:10:29:ec:c7:c4:c4:90:57:59:4d:
da:64:7e:89:3f:ae:1f:bf:22:20:33:50:1a:3b:d9:
46:1c:83:24:18:29:0d:3d:32:ab:88:43:ca:ae:47:
6c:35:27:18:97:9d:90:59:82:d7:1a:ea:19:57:40:
55:0c:e5:ca:70:fb:f2:73:b7:22:cf:2c:40:ed:e7:
f8:43:2e:5a:7c:8c:f5:d5:a9:ac:87:a6:e6:87:a5:
7b:08:23:58:13:dc:b0:21:c8:c6:4c:6c:2c:a3:5a:
a3:a7:75:ac:40:9f:08:7f:c8:c2:c5:78:1a:ab:6d:
c3:69:e6:82:ad:03:4b:d8:a8:79:f3:04:3d:1c:ec:
94:8a:f8:50:93:33:f1:a0:ed:0a:87:01:39:88:94:
56:92:15:af:4a:f5:fb:9b:48:70:cd:2e:fa:43:47:
b5:6e:fc:63:7b:82:d5:c1:de:4c:eb:d8:fd:16:2d:
d1:1b:2b:aa:39:a9:c0:96:0e:72:db:ea:16:56:6e:
0c:40:55:f0:6a:71:43:11:0a:c6:89:b3:59:83:18:
d7:73:da:62:4d:2a:59:83:ef:d3:f2:db:18:81:74:
de:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:E1:A3:63:9C:91:22:7F:0E:0A:92:9C:88:D8:92:28:8B:77:EE
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/siLho2OckSJ_DgqSnIjYkiiLd-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.136.0/22
185.114.84.0/22
185.142.192.0/22
185.252.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:3f:41:09:53:db:7b:2d:a3:cb:fa:c0:5b:b6:b9:2b:7d:31:
43:79:49:2a:9b:f3:d1:7f:3b:5b:e0:e5:17:3c:83:5e:74:cb:
bc:9f:e6:04:50:05:4d:5b:6f:ab:c1:f6:cc:a2:9a:60:06:66:
34:89:35:58:fc:63:1e:4f:65:04:3c:26:03:76:2e:53:12:ef:
56:10:a3:6b:ac:c3:85:4b:47:4b:01:1f:b4:2b:21:e2:26:04:
e9:31:24:44:b7:59:62:7d:c1:26:55:5d:da:31:08:b8:37:c4:
9a:d9:b5:c8:0d:a7:b3:e8:c5:d0:e3:58:05:60:12:60:f8:44:
e0:0e:cd:e9:e9:fe:7a:3c:0a:95:de:43:55:a4:c6:28:82:7d:
96:af:11:08:bd:c2:97:21:4b:ed:b1:bf:4e:83:d5:7b:42:61:
90:40:2d:79:b7:79:f6:4f:d5:89:52:c6:a0:65:8f:fc:22:94:
b1:bc:bb:06:9c:33:41:c5:7f:a3:be:c8:80:ee:75:d2:f5:ee:
b2:0d:39:49:81:27:64:ef:6e:77:19:24:96:46:74:db:aa:f8:
5d:87:a8:e4:57:4d:36:f2:63:f2:78:b9:16:e8:40:35:18:74:
a1:bc:29:fe:7c:9d:c3:ec:c6:cc:35:e9:14:ff:64:4a:1f:eb:
41:b0:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:51 2024 by rpki-client on console-ams.rpki-client.org