Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XI1G4_yZwZ77c9h6gGso75YZDbk.roa
File: XI1G4_yZwZ77c9h6gGso75YZDbk.roa (raw, json)
Hash identifier: 8vn3ZTte6UiiSU3LcbOhv2QtZ5npqXE05T+Xq2roAEA=
Subject key identifier: 5C:8D:46:E3:FC:99:C1:9E:FB:73:D8:7A:80:6B:28:EF:96:19:0D:B9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A75A362
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XI1G4_yZwZ77c9h6gGso75YZDbk.roa
Signing time: Sat 01 Jan 2022 16:07:05 +0000
ROA not before: Sat 01 Jan 2022 16:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41280
IP address blocks: 151.237.24.0/24 maxlen: 24
151.237.26.0/24 maxlen: 24
85.187.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175481698 (0xa75a362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c8d46e3fc99c19efb73d87a806b28ef96190db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:d3:f4:02:19:a7:43:d8:d3:30:23:1b:c1:
3f:7b:66:4f:82:7c:06:ec:32:d8:ad:04:69:eb:22:
8c:c2:e8:19:48:04:f7:ce:30:b1:61:56:ba:7d:31:
ef:30:08:f1:a2:d1:0a:6e:1c:1d:44:2c:c6:1b:8f:
8f:a9:f3:93:58:40:d4:b2:0e:9b:c7:c2:e4:b7:d4:
3a:9c:33:16:49:d1:8d:0b:51:c0:1b:ee:68:ca:d2:
8f:c7:91:a3:9a:35:60:d4:d5:7f:fa:9a:e6:da:21:
47:6c:4a:f8:37:44:b7:77:5f:c0:90:80:fc:7e:bc:
c5:ec:ba:2f:95:ea:8a:2f:cc:94:21:76:64:44:4e:
7c:da:e4:ed:db:89:5c:6a:10:54:5e:0d:61:35:e3:
1f:8e:c3:6d:f8:b4:2e:21:4e:54:37:4f:fa:30:33:
11:41:88:a2:5f:ae:cd:d3:0e:58:bc:3a:47:45:40:
6b:19:87:25:a6:c6:55:73:19:62:13:a2:7d:c3:2f:
03:60:ff:73:bf:ed:37:3f:54:38:92:3e:0b:ce:cb:
c9:41:c3:5c:3c:33:34:36:97:22:54:8e:13:96:0c:
6b:c9:03:40:69:26:59:1b:b8:a8:11:be:15:0b:c7:
3d:ac:62:14:32:53:73:11:ee:a9:c6:91:ce:2b:64:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:46:E3:FC:99:C1:9E:FB:73:D8:7A:80:6B:28:EF:96:19:0D:B9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/XI1G4_yZwZ77c9h6gGso75YZDbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.244.0/22
151.237.24.0/24
151.237.26.0/24
Signature Algorithm: sha256WithRSAEncryption
df:5d:e9:4c:2b:96:72:08:b3:19:1f:35:4c:68:01:a2:9b:e5:
67:36:f1:57:f7:60:31:59:dd:70:49:bd:6f:1b:4d:61:cc:4d:
50:05:d7:dc:fb:09:c8:bd:70:d1:19:90:6c:20:b1:42:d7:57:
be:8f:e5:31:9c:9a:63:9a:bf:39:b0:2c:73:bd:e3:a4:f8:93:
81:8f:00:69:fb:1a:7d:12:da:55:91:59:d7:d3:7f:20:14:93:
3e:40:4e:56:4c:e3:ea:3b:25:ae:46:30:49:92:ce:71:41:af:
98:6b:5e:7a:87:83:9c:57:4b:5a:8f:60:3e:1c:52:b6:54:b7:
93:21:65:07:e4:ba:e2:d7:32:0b:20:19:18:59:c9:d2:ec:a0:
e0:2e:5f:21:68:5e:ed:22:db:dd:f3:9e:7c:8b:02:66:c8:2a:
70:c0:cd:80:4b:02:95:bf:3e:7f:5a:a9:98:84:53:e7:26:35:
7e:39:ed:96:0d:1b:9b:c2:a5:11:79:67:73:bb:c9:0c:35:61:
87:4e:33:b4:b1:89:45:9a:08:02:5d:b8:68:35:59:dc:7b:fc:
75:00:fb:35:02:1a:f2:69:9b:09:c0:f8:23:ec:44:f3:ef:3b:
11:74:e2:df:62:8e:60:ad:b2:1a:22:ac:00:5b:ae:d2:4a:6f:
80:60:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org