Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/XnQZFzRkY1FRHWBAKz1KW6UKjG0.roa
File: XnQZFzRkY1FRHWBAKz1KW6UKjG0.roa (raw, json)
Hash identifier: mbOAW74gQ06D8EcBr9xpOLFgAdUpotSY40pX6sJLqHg=
Subject key identifier: 5E:74:19:17:34:64:63:51:51:1D:60:40:2B:3D:4A:5B:A5:0A:8C:6D
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 05990E4B
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/XnQZFzRkY1FRHWBAKz1KW6UKjG0.roa
Signing time: Sat 01 Jan 2022 11:03:39 +0000
ROA not before: Sat 01 Jan 2022 11:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200480
IP address blocks: 185.105.240.0/22 maxlen: 22
2a06:38c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93916747 (0x5990e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jan 1 11:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e74191734646351511d60402b3d4a5ba50a8c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:fe:b7:35:47:64:37:29:90:b7:df:ff:33:
9b:76:9e:69:8a:c8:ee:13:8a:6b:b3:ea:11:d2:43:
01:ad:bf:61:32:fc:ae:49:15:c8:79:4b:b3:c4:4e:
09:21:c9:d4:93:5f:c5:6e:b6:1e:4e:8d:6e:5f:19:
9a:b3:b6:d1:13:43:f4:83:71:27:12:ed:69:31:06:
1f:35:3b:72:98:65:a5:d8:ed:c4:41:62:2d:ac:9e:
c1:cc:17:55:7b:ca:f6:8b:49:c9:9e:dc:fd:26:f2:
d3:33:5a:83:e8:ae:fb:de:8f:74:c1:ba:9d:0c:ed:
a7:32:f5:68:72:d7:7c:ee:a8:1c:54:4d:64:7a:f9:
58:6d:e5:e1:b2:af:e9:a6:e2:28:00:1a:43:11:71:
7b:69:a5:63:04:23:ed:6e:83:91:98:45:76:bd:58:
01:21:98:49:6b:83:46:2b:46:53:b2:23:ff:c1:7d:
5c:9b:94:ef:68:9d:8e:81:a4:14:6c:a7:a3:b6:7b:
43:89:72:09:c9:02:97:40:e3:5f:3d:a3:54:b7:94:
da:15:46:86:33:97:9f:52:96:8e:bb:45:7f:f9:89:
c7:7e:d3:79:49:31:84:b0:29:88:1b:74:55:ed:60:
cb:21:73:84:61:99:ea:d0:ef:ec:60:69:ab:2c:bf:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:74:19:17:34:64:63:51:51:1D:60:40:2B:3D:4A:5B:A5:0A:8C:6D
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/XnQZFzRkY1FRHWBAKz1KW6UKjG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.240.0/22
IPv6:
2a06:38c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:c8:2d:70:f5:2f:c2:66:cc:15:e4:56:0e:f5:e3:4d:a1:d6:
56:fc:6f:32:d7:f6:31:6b:09:4b:f5:41:64:a2:94:22:0b:c6:
91:a7:1a:81:46:8f:3b:3a:fb:9f:6b:12:6c:15:a0:77:75:97:
3b:86:f3:1d:c9:19:31:22:67:22:bb:77:e2:51:47:1c:6c:ee:
a9:99:6a:c8:3c:30:60:27:d9:0f:0b:20:b5:b2:fd:49:1d:35:
be:86:0a:3b:fb:76:b3:d6:dc:d2:ee:a7:75:30:16:b0:80:44:
7e:ab:0f:d6:65:d7:a8:51:ae:8c:4e:cf:77:90:8c:b7:d1:6c:
d4:15:a0:ff:9d:37:c2:0c:68:70:47:18:12:59:78:31:80:1c:
5e:87:81:88:76:8d:87:54:28:bf:54:9e:cd:d9:18:81:d8:62:
d3:3c:2d:3b:63:01:c0:1d:3c:5f:0d:c0:cd:c2:b6:6f:6a:93:
ad:b7:af:10:be:68:75:b5:c8:cb:e8:f5:4b:b4:10:1e:64:ba:
46:6e:16:95:7d:d9:fb:35:1d:0d:8f:b0:77:4b:46:c6:9a:df:
ec:14:5a:bd:e7:b6:07:e5:6e:59:2c:3f:d3:40:dc:3f:ea:f6:
cf:11:13:bc:e1:97:db:b4:63:6c:0f:ee:a3:03:57:72:60:7e:
3d:b0:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:44 2024 by rpki-client on console-fra.rpki-client.org