Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/stj4Fg7KEnrt8NUxWRDgceJ--VY.roa
File: stj4Fg7KEnrt8NUxWRDgceJ--VY.roa (raw, json)
Hash identifier: 8Sk1Of71kbWBZMRrNh2E78ANsrBUMtEDc6llXmbJQYQ=
Subject key identifier: B2:D8:F8:16:0E:CA:12:7A:ED:F0:D5:31:59:10:E0:71:E2:7E:F9:56
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0DF51AEC
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/stj4Fg7KEnrt8NUxWRDgceJ--VY.roa
Signing time: Sat 01 Jan 2022 08:04:10 +0000
ROA not before: Sat 01 Jan 2022 08:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203185
IP address blocks: 185.118.231.0/24 maxlen: 24
185.118.228.0/24 maxlen: 24
185.118.229.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234167020 (0xdf51aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 1 08:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2d8f8160eca127aedf0d5315910e071e27ef956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f7:b6:be:c4:e6:ad:fb:bc:3d:18:56:65:14:
96:88:1f:be:35:e7:31:00:67:d8:55:e9:a4:bf:05:
f8:31:bf:ef:15:15:80:d0:7f:02:cd:7a:8e:af:7a:
48:a8:fe:fa:e6:61:de:3c:b5:c0:48:41:39:1c:f0:
80:3b:ae:f4:72:d1:1e:a7:93:3a:a7:fe:10:07:0d:
d0:81:17:89:85:90:c0:64:7d:71:3b:fc:97:58:b9:
9b:59:4f:b6:23:55:b1:5b:be:a5:e4:62:a5:57:91:
55:b8:17:77:91:d6:ac:9c:7f:cf:41:d6:7d:84:0b:
33:c0:58:a5:45:68:9a:73:94:35:ea:88:b5:4a:8b:
98:23:a2:b5:de:10:41:c4:de:89:69:55:af:bc:88:
dc:ca:02:33:5f:2f:09:ba:a2:a7:86:72:82:f9:e9:
ef:54:6c:81:cd:46:31:c9:e1:7a:b2:5e:55:4f:5f:
d8:ba:2c:6d:46:76:c1:73:aa:7d:e6:27:0e:f4:24:
2d:00:13:ce:ba:f9:c6:e6:b5:46:54:29:62:5e:49:
5f:27:77:ac:d7:a3:3b:d1:a0:03:de:e5:34:49:ed:
c2:3b:ff:06:23:1c:da:b4:ee:98:79:c1:6d:79:df:
8c:b5:53:15:29:cc:f0:02:59:52:e6:19:db:02:f4:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:F8:16:0E:CA:12:7A:ED:F0:D5:31:59:10:E0:71:E2:7E:F9:56
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/stj4Fg7KEnrt8NUxWRDgceJ--VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:08:ff:7f:75:e6:6a:79:9c:13:3f:46:97:40:3e:92:b2:95:
36:f1:00:d4:91:cc:d6:96:80:71:02:c8:8f:56:cc:f0:05:0b:
bb:a2:77:1a:cc:ed:71:f8:45:6d:a2:70:d1:4a:9c:8e:0f:e9:
99:17:ca:3d:ec:e6:69:bb:08:b8:91:02:25:cc:dc:4d:ef:6e:
49:4b:f7:f0:d6:1f:ef:4e:04:69:83:2b:13:91:d8:05:83:b9:
19:a2:0d:b8:d4:97:cf:88:c1:4c:fa:ca:ac:16:9e:b8:de:41:
5a:c3:03:35:8a:38:fe:a6:ad:35:af:7c:87:8a:2a:08:24:46:
5c:4c:53:3a:2c:e9:86:79:5c:ab:62:05:15:ea:4c:80:4f:32:
a6:6e:4d:55:c8:85:a2:a2:b8:5d:da:81:13:8c:6d:2f:dd:1c:
fa:80:ad:66:72:0b:72:f8:d8:0f:e1:d0:76:c5:95:b0:fb:23:
11:ea:25:e3:dc:81:04:f3:e6:4f:c2:29:b4:0f:fd:7a:c1:b1:
f7:4d:93:a2:4d:bc:a0:c9:35:cf:79:1b:64:5c:c6:2f:a6:9e:
db:b8:f4:cf:6b:2f:ea:18:9c:d4:0e:58:a9:8a:bd:15:00:75:
50:ed:1f:3e:eb:a4:72:9d:bf:93:a9:03:ad:3f:07:30:87:85:
a3:e1:d3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org