Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/yTiUzBDVuY7EoCic8GXCPVU2r-Q.roa
File: yTiUzBDVuY7EoCic8GXCPVU2r-Q.roa (raw, json)
Hash identifier: Z7S+zbmJkbbxTnkre0nnMM8kdCuqB8Oeeic3PJfKVg0=
Subject key identifier: C9:38:94:CC:10:D5:B9:8E:C4:A0:28:9C:F0:65:C2:3D:55:36:AF:E4
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 7B8FD0
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/yTiUzBDVuY7EoCic8GXCPVU2r-Q.roa
Signing time: Sat 01 Jan 2022 01:59:53 +0000
ROA not before: Sat 01 Jan 2022 01:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205862
IP address blocks: 185.204.43.0/24 maxlen: 24
185.204.40.0/24 maxlen: 24
185.204.42.0/24 maxlen: 24
185.204.41.0/24 maxlen: 24
2a0d:b00:2901::/48 maxlen: 48
2a0d:b00:3501::/48 maxlen: 48
2a0d:b00:9201::/48 maxlen: 48
2a0d:b00:3502::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8097744 (0x7b8fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jan 1 01:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c93894cc10d5b98ec4a0289cf065c23d5536afe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:ba:fb:2b:8b:d5:9c:0d:8c:82:5f:21:4d:
8c:7f:47:33:cb:de:25:7f:47:16:05:a5:69:a3:40:
74:0a:a4:c6:86:11:ce:b9:dd:aa:c6:4e:c3:ac:75:
be:35:e4:e2:e4:54:88:51:37:bc:ef:49:40:ce:e2:
30:17:e9:78:fb:ce:c6:24:b1:45:d6:2a:7f:53:61:
d4:09:fd:43:7a:36:d0:ad:d5:58:bd:58:80:42:fc:
fe:6b:eb:69:e7:64:05:f1:54:7d:fe:5b:09:25:ad:
a3:65:c0:82:94:50:11:5d:58:b0:2b:f0:60:c9:03:
72:6a:a9:3d:22:13:07:c6:ee:a1:3e:fa:17:3e:27:
d7:f4:ec:da:8f:5c:15:b3:e6:b9:b3:5f:06:3d:92:
48:4c:d1:c5:1d:9f:5b:91:e2:12:08:dc:f4:e3:06:
22:b1:e2:e2:47:ad:f8:ce:f1:32:9f:27:c0:c9:3f:
be:3d:38:29:ba:d4:4a:43:a1:ab:8e:95:65:0a:62:
9d:bf:50:ae:3b:4b:fa:16:24:29:40:37:cb:be:d1:
09:1b:dc:4a:de:67:14:4e:36:06:7a:8d:46:81:29:
b0:05:be:1b:e4:e2:b3:aa:56:8f:38:78:35:e4:73:
e8:40:7c:8e:ff:d7:3b:8e:b3:48:e5:52:97:ef:e7:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:94:CC:10:D5:B9:8E:C4:A0:28:9C:F0:65:C2:3D:55:36:AF:E4
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/yTiUzBDVuY7EoCic8GXCPVU2r-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.40.0/22
IPv6:
2a0d:b00:2901::/48
2a0d:b00:3501::-2a0d:b00:3502:ffff:ffff:ffff:ffff:ffff
2a0d:b00:9201::/48
Signature Algorithm: sha256WithRSAEncryption
6f:65:41:c4:99:01:2b:a5:22:d8:81:e6:12:6f:a2:76:35:02:
34:46:1b:34:02:d2:a0:92:20:95:79:85:36:94:1f:69:05:5a:
35:eb:a9:1e:d8:7d:cd:31:69:ee:0d:ea:89:66:10:ce:3c:d4:
b9:9d:e6:d8:8b:3b:f6:62:6f:b5:a8:11:52:07:13:a3:e0:44:
e4:86:0f:cc:57:79:5f:24:41:9e:61:a2:b4:2a:1d:25:1d:5b:
ae:25:12:f4:ff:69:7e:e5:66:60:fe:aa:21:89:48:32:78:b1:
d5:21:ed:ed:7c:53:c8:4b:d8:df:80:8a:8a:d2:71:26:1c:58:
10:ea:fd:a0:65:31:36:92:87:2d:d2:a6:82:d0:43:79:9d:1b:
f2:49:f7:9b:3d:c1:d9:0d:de:ad:91:87:04:c8:b1:29:e9:d9:
aa:be:f9:02:08:45:39:b4:02:98:c1:1a:cf:2c:43:1e:65:2a:
39:4c:3c:56:bc:aa:be:12:a2:a2:42:81:cb:db:7d:0a:f3:2b:
94:d6:55:d5:29:3c:df:89:e3:93:ce:bf:ff:da:3f:40:3c:e4:
96:5c:61:c8:37:9e:4a:8a:79:af:2a:b2:ba:c8:0d:48:e3:a8:
91:2b:52:63:55:42:47:0d:7e:b1:f6:16:1d:25:63:1d:f7:31:
7e:de:05:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:39 2024 by rpki-client on console-fra.rpki-client.org