Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/Fk_Kvno-GCRnzpht7SUjHLvDtes.roa
File: Fk_Kvno-GCRnzpht7SUjHLvDtes.roa (raw, json)
Hash identifier: /MOZujKCzons8hiz5A+tIOyQZgrwUUWlMUT1b30oKKU=
Subject key identifier: 16:4F:CA:BE:7A:3E:18:24:67:CE:98:6D:ED:25:23:1C:BB:C3:B5:EB
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 04E4B54B
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/Fk_Kvno-GCRnzpht7SUjHLvDtes.roa
Signing time: Sat 01 Jan 2022 15:04:23 +0000
ROA not before: Sat 01 Jan 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201500
IP address blocks: 185.137.69.0/24 maxlen: 24
185.174.214.0/24 maxlen: 24
185.174.214.0/23 maxlen: 23
185.174.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82097483 (0x4e4b54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Jan 1 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=164fcabe7a3e182467ce986ded25231cbbc3b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:8c:e9:35:b6:f4:84:c8:1a:01:41:a0:ae:
c6:22:df:a9:47:13:fa:93:ec:27:bd:5a:11:ac:5d:
06:79:e3:dc:f5:41:46:df:4d:2c:a6:23:f7:62:93:
52:2c:b6:3d:2f:fc:0e:3a:85:41:84:7b:02:9e:6d:
a8:3d:85:57:28:5f:b5:c8:00:ad:92:a3:ae:13:3b:
9c:61:ce:fa:d9:80:01:89:83:60:cd:ad:31:ea:5f:
73:c9:ef:6b:e7:a4:8e:c3:9e:4d:0e:78:ab:0e:00:
32:c8:58:fd:5d:8b:fe:cf:11:5a:84:5a:3a:4d:fd:
93:05:ba:31:81:92:b7:b4:9e:b7:20:40:5e:65:29:
1c:3f:0e:70:db:49:13:fd:b0:93:6d:91:27:9e:38:
b6:19:42:59:75:55:ba:d9:3b:95:62:ed:82:dd:07:
56:7a:9b:8e:43:f6:65:ef:35:8f:2b:cb:da:4b:b4:
6d:7e:5f:ef:44:d4:ff:8e:a5:ac:78:f9:57:20:49:
58:32:3b:d7:49:63:dd:38:e6:40:43:a6:0a:a4:a7:
9b:82:0f:b1:62:b9:18:f8:f7:5b:9e:91:a6:ac:14:
e9:34:be:d2:05:0a:6b:43:dd:5f:b2:7f:d5:25:18:
5e:c2:dd:81:05:f8:75:60:ac:cd:6f:01:a4:aa:97:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:CA:BE:7A:3E:18:24:67:CE:98:6D:ED:25:23:1C:BB:C3:B5:EB
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/Fk_Kvno-GCRnzpht7SUjHLvDtes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.69.0/24
185.174.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:4b:04:e2:01:c2:b3:71:ba:e7:73:18:77:73:16:34:47:16:
df:a5:26:a0:9a:c9:9d:c8:71:ba:15:1d:1d:12:4e:bb:35:24:
0e:ca:16:d5:39:e4:bf:5c:06:1c:82:39:18:9e:5a:f4:ba:16:
4a:ca:c2:84:9d:f3:47:7c:b2:2e:8a:a7:d9:d2:06:0b:33:3b:
de:9b:d0:91:ea:fe:4b:04:43:34:c7:76:3d:7c:78:08:73:94:
d2:64:65:e2:0e:21:61:ea:d3:cc:5b:10:22:0d:03:15:56:8e:
27:56:52:42:56:8a:61:72:79:8f:46:0a:d8:d3:bb:ea:cf:36:
bc:7b:0d:75:0f:61:5f:9a:1e:84:52:68:7b:0a:f7:09:2b:60:
5c:8e:01:ee:e9:c0:eb:82:ab:7a:8d:44:f1:de:23:9c:65:76:
fb:68:8c:f8:12:77:d1:a1:97:65:a0:7a:c2:af:39:87:b0:1d:
39:f8:a6:d8:ea:fb:1a:d9:80:8b:01:b6:e5:ae:f1:42:c9:27:
29:7a:a1:0f:44:42:ea:28:16:0d:a1:22:b3:c8:c5:a2:a2:69:
8e:5e:b7:52:c1:2a:35:ac:af:ea:7f:4b:5d:d9:ca:08:6f:05:
a9:38:85:c9:76:b5:b3:3e:8b:97:2b:17:cd:0b:52:cc:c0:b2:
0b:d5:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:29 2024 by rpki-client on console-ams.rpki-client.org