Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/TL7ixaNbnHDZrPFcUqGFFCCgfC8.roa
File: TL7ixaNbnHDZrPFcUqGFFCCgfC8.roa (raw, json)
Hash identifier: ddsWqrxD6d8GzS9wvhOsJS6ODdFjwqQ1NkaGST353fE=
Subject key identifier: 4C:BE:E2:C5:A3:5B:9C:70:D9:AC:F1:5C:52:A1:85:14:20:A0:7C:2F
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 1AD84E7C
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/TL7ixaNbnHDZrPFcUqGFFCCgfC8.roa
Signing time: Sat 01 Jan 2022 13:02:37 +0000
ROA not before: Sat 01 Jan 2022 13:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 185.2.244.0/22 maxlen: 22
185.2.244.0/24 maxlen: 24
185.2.245.0/24 maxlen: 24
185.2.246.0/24 maxlen: 24
185.2.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450383484 (0x1ad84e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jan 1 13:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cbee2c5a35b9c70d9acf15c52a1851420a07c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:38:79:c9:21:1d:fb:3d:df:b1:c7:66:3d:
ad:af:57:a5:43:85:e5:d5:46:e6:7a:46:54:6d:20:
1c:9f:cd:38:68:f4:df:c6:fa:f8:e7:00:bf:1a:31:
44:04:04:3f:b4:5b:8a:fc:2b:8a:c1:67:10:bd:7b:
f1:18:73:b5:2f:8c:41:fd:98:e3:a3:6b:10:5a:c1:
dd:85:aa:df:bb:0e:bd:6f:bd:4e:ad:4d:1a:2d:51:
2b:b5:bf:4a:fc:17:fe:04:0b:29:c8:10:9a:4a:ad:
59:a9:63:91:25:cc:e3:a9:f1:7c:83:96:44:45:58:
2a:12:fc:4a:bf:71:be:1a:14:53:8e:01:5b:aa:94:
0b:75:93:c8:3c:2d:59:78:b5:ea:ed:9e:b9:3e:d0:
48:27:6e:b4:36:1b:3d:04:b6:fc:f4:44:7d:69:a3:
c8:f8:da:e5:aa:0e:a6:27:3a:e1:ce:e7:c6:83:53:
eb:f2:ed:3e:7d:33:6d:8e:d1:33:67:81:85:7c:2f:
09:ee:83:d5:1c:de:ed:e0:80:b9:3d:e2:f7:b5:24:
b7:18:ba:0e:7b:01:62:62:40:e3:69:74:14:f2:59:
d8:c2:b2:9e:e3:51:b5:f3:16:d8:8e:96:4f:2a:2a:
28:68:05:f7:fb:16:d1:7a:58:75:88:e8:3d:72:b5:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BE:E2:C5:A3:5B:9C:70:D9:AC:F1:5C:52:A1:85:14:20:A0:7C:2F
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/TL7ixaNbnHDZrPFcUqGFFCCgfC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:1c:58:ca:66:d7:09:d8:b5:08:73:42:bf:c8:c9:9b:12:3b:
5a:96:c8:3c:d7:9c:76:22:b7:09:cc:ab:83:3d:c2:32:cb:ef:
8c:84:92:a8:50:c1:99:bc:b3:79:da:11:49:63:4b:ad:67:bc:
82:46:d2:84:22:a8:fe:5c:6e:95:9c:da:b6:55:8c:1d:4d:fb:
66:9d:07:28:6b:da:da:61:17:bf:03:cd:53:cd:52:ce:ec:b0:
2f:6d:8a:07:0a:e4:6d:14:95:32:85:c3:6b:68:73:78:4b:ea:
aa:6e:b2:e6:ce:b8:55:3e:60:a1:07:5e:a8:a9:f4:29:0d:75:
86:c9:eb:ab:9a:6d:36:a7:ce:2c:ad:a4:94:95:24:a0:29:25:
d4:51:5c:ec:ee:0f:2f:f2:c6:7c:76:5a:dc:cf:c6:6c:61:47:
1e:a4:ac:76:3e:86:e8:ce:57:52:48:3b:95:09:ce:aa:56:3f:
9d:80:7c:19:2b:f0:b6:49:b0:ec:f7:63:90:14:e2:7c:8b:cf:
69:44:0a:a0:33:ea:6a:b6:6f:9b:b4:b2:42:9b:cc:1c:67:94:
fa:ea:f7:65:6b:d4:7c:a1:92:b9:b4:a7:b4:c0:59:eb:59:3f:
b0:69:a3:b1:74:73:0c:bd:dd:ca:39:70:e3:cc:2b:36:4f:fc:
68:a3:fa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:06 2024 by rpki-client on console-ams.rpki-client.org