Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/V5FAdhS8RP5YgUCtuaE_ff66wRQ.roa
File: V5FAdhS8RP5YgUCtuaE_ff66wRQ.roa (raw, json)
Hash identifier: kQgC9Tb3xAlQ7HrHx8C6Vpr+DuaBMOnc9PKzxhiGZjA=
Subject key identifier: 57:91:40:76:14:BC:44:FE:58:81:40:AD:B9:A1:3F:7D:FE:BA:C1:14
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 067A6E
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/V5FAdhS8RP5YgUCtuaE_ff66wRQ.roa
Signing time: Wed 02 Feb 2022 23:39:42 +0000
ROA not before: Wed 02 Feb 2022 23:39:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 185.218.120.0/24 maxlen: 24
185.218.121.0/24 maxlen: 24
185.218.122.0/24 maxlen: 24
185.218.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424558 (0x67a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Feb 2 23:39:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5791407614bc44fe588140adb9a13f7dfebac114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:6a:5e:e8:79:85:c0:cc:75:33:6c:6a:48:
3f:11:90:70:ec:76:e7:c3:13:47:25:6d:9b:bb:49:
f7:ec:1b:25:22:c6:65:9c:bd:0d:2f:bb:8f:ff:7c:
13:1c:e1:1c:a9:f7:97:97:d9:bc:3b:40:1d:d3:4d:
2c:28:54:de:ad:99:23:68:5d:f1:df:83:61:1a:19:
95:78:b9:e9:c4:23:e8:b5:93:fa:f0:5c:82:c5:63:
87:1b:45:b4:20:01:e2:b6:74:ba:13:7c:4c:6a:05:
1f:b5:6b:91:60:14:8b:7c:b3:38:04:21:9d:10:d4:
0f:6c:c5:07:f4:24:d0:87:a8:c8:ca:6e:1c:21:6d:
61:56:dc:48:7c:44:99:8b:8e:92:75:2d:02:b3:1b:
f4:3d:a6:0e:b7:20:57:87:86:fc:83:3b:24:de:b4:
70:ad:ea:33:6c:55:6c:65:04:6e:3f:7e:97:78:bf:
1a:cf:c8:09:90:37:70:97:00:ef:4a:7f:bf:6b:62:
73:88:9f:82:75:90:ca:b5:19:7b:52:10:fb:7d:1c:
b8:06:b0:40:f4:2e:64:26:67:28:29:de:bf:8c:a0:
af:74:a6:34:ac:39:68:38:5a:ed:9c:7a:99:5c:4a:
28:6b:83:34:bf:02:55:39:e1:be:ef:d4:fe:77:fb:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:91:40:76:14:BC:44:FE:58:81:40:AD:B9:A1:3F:7D:FE:BA:C1:14
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/V5FAdhS8RP5YgUCtuaE_ff66wRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.120.0/22
Signature Algorithm: sha256WithRSAEncryption
27:a2:82:8f:17:a3:e0:9c:d7:1b:16:31:ec:93:07:7a:61:c9:
7f:40:33:52:8b:cc:e6:d8:35:c0:ba:91:1b:d9:34:39:75:55:
46:3a:a3:32:5d:d0:a9:5d:3e:a3:59:96:d4:0c:c7:20:34:63:
4e:dc:cb:3c:ee:a6:75:32:a6:7d:56:48:f4:70:d8:17:30:28:
9a:43:f0:6a:d8:56:88:32:e9:0e:a2:1e:8f:21:d5:e1:31:82:
f1:0d:32:2c:9f:1d:13:7f:10:2a:a2:f6:40:13:88:1d:b9:0f:
23:b5:cd:2e:82:cb:b6:1d:b5:5a:1a:f6:b7:a2:f5:5d:59:80:
cf:ad:01:b5:4f:82:d6:9e:eb:66:86:a8:00:f5:63:6a:7a:5b:
da:4b:45:89:d3:29:a9:10:1c:f7:64:b7:e1:fa:80:05:4a:f8:
2f:45:4f:30:06:ea:a4:f1:83:9c:63:31:c9:68:fb:3a:22:c4:
f9:c9:0c:2c:74:14:c4:25:31:00:0d:60:e0:3b:ef:5f:ec:cc:
51:4a:a8:f1:1c:de:73:32:1b:0a:34:1b:b7:c2:4f:51:81:41:
2e:7a:e9:4b:5a:09:4d:72:60:16:59:79:13:25:cb:b3:8c:18:
21:b1:9a:6d:24:30:a3:93:86:3d:fa:f7:6f:9f:74:57:40:c1:
87:71:b1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org