Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/S_-g-5dBGxJ7zf2szrM4PQBSE1E.roa
File: S_-g-5dBGxJ7zf2szrM4PQBSE1E.roa (raw, json)
Hash identifier: HDTmY3AnAbE2LflLnOJ5bX8F3w/ec0OwWlvGePYIlis=
Subject key identifier: 4B:FF:A0:FB:97:41:1B:12:7B:CD:FD:AC:CE:B3:38:3D:00:52:13:51
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 196F2CE3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/S_-g-5dBGxJ7zf2szrM4PQBSE1E.roa
Signing time: Sun 03 Apr 2022 18:24:43 +0000
ROA not before: Sun 03 Apr 2022 18:24:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
195.85.49.0/24 maxlen: 32
185.226.74.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426716387 (0x196f2ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 3 18:24:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bffa0fb97411b127bcdfdacceb3383d00521351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:ff:35:d4:7d:0f:6b:9e:c3:7b:41:9e:8e:
09:b4:c1:d3:99:60:8f:2a:62:e5:7f:4c:3e:cc:ca:
2e:b6:5a:cc:41:6c:5c:b3:b8:44:bb:fc:3f:83:1b:
22:56:98:8c:ac:a2:e5:ce:83:ff:0f:7e:8c:6a:10:
0d:91:52:ea:fd:5a:3a:f3:cc:7b:2f:eb:9d:62:bd:
a9:e7:89:d3:cd:41:d5:dd:51:1b:18:4c:0e:5e:a5:
f8:2e:69:e6:6b:d1:1b:54:96:e1:0a:9f:ec:1c:a3:
d3:42:d7:8b:d9:d1:34:75:02:06:c5:a6:d4:24:58:
f2:ce:c7:91:b7:6b:74:60:1d:09:f3:11:e1:14:30:
64:b4:fd:8f:a8:01:a1:a0:60:fa:0f:20:ee:3e:69:
ee:9e:94:ec:72:8e:94:20:0d:3c:f1:ab:09:e6:fa:
75:fd:d1:cb:08:24:3e:af:fa:2f:a5:9c:26:25:30:
85:67:64:4e:8d:66:40:3e:f5:63:01:94:24:90:eb:
df:83:a6:ab:04:92:47:de:49:f5:7d:df:4f:42:56:
d6:41:7f:72:28:ff:5a:d5:c7:20:49:38:41:ef:0c:
cc:f8:21:10:a5:93:8d:20:04:93:a2:09:bd:6f:ba:
29:e2:1a:a2:08:16:bb:a5:7b:93:d3:20:ae:ed:e4:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:A0:FB:97:41:1B:12:7B:CD:FD:AC:CE:B3:38:3D:00:52:13:51
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/S_-g-5dBGxJ7zf2szrM4PQBSE1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
185.226.74.0/24
195.85.49.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e6:ba:bc:f2:14:94:2a:5a:79:5c:e5:15:46:f5:99:3c:53:
cb:5a:5b:73:71:02:ef:0a:05:f4:cf:f8:6c:67:ee:eb:8e:86:
e8:09:b8:79:76:bb:cb:fb:87:72:37:66:5f:1f:8f:c1:41:21:
b8:d4:32:66:8c:0b:64:36:36:fb:e1:94:fd:da:c2:18:6a:fe:
a6:11:f9:9a:57:9e:77:4a:26:be:c5:26:dc:2b:4e:03:50:f8:
33:39:78:aa:8b:a9:9b:90:90:72:21:f6:31:5e:2b:75:4c:d8:
f5:fd:81:cb:54:77:7e:70:60:7e:a2:1c:ba:2d:e8:99:9a:49:
42:56:8d:21:1d:26:bb:9a:22:e0:69:2f:7d:a8:84:ef:31:db:
31:a3:dc:14:60:9b:35:c4:cc:ab:57:2f:99:87:55:86:94:57:
81:a5:7f:fe:cb:d8:ab:6e:6f:9b:b8:51:34:b8:f7:be:f0:18:
73:8d:2c:c5:60:2e:65:35:46:50:93:db:c5:32:90:db:ee:e7:
00:39:f7:1a:2e:a4:75:28:bf:39:bb:5b:6c:1e:f1:23:26:15:
43:df:80:33:0c:0c:ce:7c:41:92:f5:1a:d0:cc:52:9f:eb:f1:
6d:02:bd:ed:10:cb:fc:df:5d:d0:93:41:38:9c:15:6b:67:d0:
b0:73:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org