Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2sMdSBrxV0Ur5xCLNsMqEso9nss.roa
File: 2sMdSBrxV0Ur5xCLNsMqEso9nss.roa (raw, json)
Hash identifier: b8ZpMb2zZH9HCc8F8eXKNr17uKv0ASYp8vYMMRXCE8Q=
Subject key identifier: DA:C3:1D:48:1A:F1:57:45:2B:E7:10:8B:36:C3:2A:12:CA:3D:9E:CB
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 01855836771FBE919E9F35E06B0F854C914D
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2sMdSBrxV0Ur5xCLNsMqEso9nss.roa
Signing time: Wed 28 Dec 2022 10:10:42 +0000
ROA not before: Wed 28 Dec 2022 10:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 195.211.118.0/24 maxlen: 24
195.211.116.0/24 maxlen: 24
195.211.116.0/22 maxlen: 24
195.211.117.0/24 maxlen: 24
195.211.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:36:77:1f:be:91:9e:9f:35:e0:6b:0f:85:4c:91:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Dec 28 10:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dac31d481af157452be7108b36c32a12ca3d9ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:73:b5:1d:9c:9d:4d:9c:92:5a:22:69:b2:
45:0f:1a:38:8f:7f:10:06:52:a1:7e:6a:c0:7b:2b:
82:73:f0:9b:c9:0a:c7:27:d8:07:7b:6b:7b:3d:00:
be:9f:1d:8e:31:08:6d:39:2a:d4:e7:c5:c5:d7:1e:
a5:1a:8d:b0:ec:a5:7d:ea:fd:95:c4:72:e4:b1:4a:
5c:6e:3d:00:cd:86:b7:21:dc:d2:f6:c9:52:db:f6:
5f:ac:c2:4a:41:9b:49:02:08:51:64:e5:ff:b0:dd:
25:00:a6:57:c6:0b:55:dd:07:7e:16:0e:32:9b:d7:
e6:28:a0:62:85:a8:e7:c4:f1:51:0c:c2:02:f2:ae:
80:36:34:10:97:12:23:d2:4c:2f:67:78:9a:e3:68:
99:13:b6:59:38:b2:46:c3:28:fc:94:49:4e:22:76:
46:3e:8f:51:58:80:ee:ba:44:64:f3:62:a5:67:fe:
31:08:88:e8:de:10:e6:aa:8a:9d:dc:ba:6c:d3:66:
ec:19:2f:fe:72:0f:b8:c1:2c:9b:bc:ae:31:4b:78:
c5:74:48:ea:56:c1:62:90:46:e1:27:96:62:92:95:
07:0e:d5:00:d4:44:8d:04:96:66:70:58:d6:89:5b:
d1:20:61:48:3a:ff:71:20:e8:79:be:8f:0a:3a:3a:
91:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:1D:48:1A:F1:57:45:2B:E7:10:8B:36:C3:2A:12:CA:3D:9E:CB
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/2sMdSBrxV0Ur5xCLNsMqEso9nss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:00:47:ef:82:43:75:54:77:60:e4:8b:40:c7:c3:e5:cc:75:
80:16:21:54:58:d7:10:f5:c7:55:3a:de:7c:1b:d0:40:a5:be:
8c:cf:f0:d7:38:f2:66:38:04:de:00:14:fc:8e:1e:41:20:c7:
ee:b6:c3:0e:e9:ca:d3:be:91:45:cf:82:f8:80:73:47:c9:d4:
1d:ae:86:98:38:03:ec:2d:2d:c1:5d:3b:12:37:48:94:29:2a:
63:a1:25:35:5a:31:1d:45:e9:ea:58:40:16:b9:6e:4c:48:a0:
ce:36:f1:78:24:a3:cb:03:01:d7:04:51:60:cb:de:78:5a:0f:
54:cd:9c:49:c4:47:8d:a4:24:1b:44:9b:fd:56:05:0b:2c:ca:
74:54:ff:f5:d4:20:46:64:4b:26:ae:63:56:cc:23:df:35:f4:
eb:5e:b6:2b:47:3f:c5:24:14:49:d6:e2:3c:1a:64:cc:71:02:
99:ae:fa:c2:00:53:8b:3c:90:b1:10:a6:a7:5e:9a:b0:7c:ff:
3b:52:de:04:c4:ed:44:ce:df:03:7f:06:ac:1d:c3:b1:cf:54:
02:34:81:d5:fe:90:1b:13:55:77:96:e2:c1:1b:f5:2e:24:ff:
d4:25:a9:90:ee:d4:96:55:6f:dc:73:d6:36:d6:11:83:27:22:
5a:e1:78:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:43 2024 by rpki-client on console-fra.rpki-client.org