Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/f15rsB9lG2XxDMtGEvQtgpimVls.roa
File: f15rsB9lG2XxDMtGEvQtgpimVls.roa (raw, json)
Hash identifier: eZqDKTI0f4GCESq9FV9dbNdplwB7pdLqo5eFJ0VfoEM=
Subject key identifier: 7F:5E:6B:B0:1F:65:1B:65:F1:0C:CB:46:12:F4:2D:82:98:A6:56:5B
Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial: 9F4C
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/f15rsB9lG2XxDMtGEvQtgpimVls.roa
Signing time: Thu 07 Apr 2022 11:27:58 +0000
ROA not before: Thu 07 Apr 2022 11:27:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202093
IP address blocks: 185.53.65.0/24 maxlen: 24
185.53.67.0/24 maxlen: 24
185.53.66.0/24 maxlen: 24
185.53.64.0/24 maxlen: 24
185.53.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40780 (0x9f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Validity
Not Before: Apr 7 11:27:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f5e6bb01f651b65f10ccb4612f42d8298a6565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:ca:61:4c:0b:c9:de:d8:01:75:bb:85:2b:
f2:47:b7:8d:a0:8d:b0:06:5c:bf:cf:0d:b3:f8:1a:
f0:1e:6f:20:65:6d:3e:cf:f4:90:ba:17:ac:94:76:
99:f7:c9:b9:0f:6a:b3:7d:25:2e:3c:70:c8:90:3e:
0a:55:f1:96:d3:47:ad:30:4a:92:c6:0d:ab:66:b4:
eb:b2:cc:b0:6f:d2:18:bd:e0:e1:45:be:78:43:74:
15:6e:f4:f5:55:c2:5f:4b:ab:e2:ec:cd:ff:8d:48:
a9:ff:e9:73:79:bb:98:af:9c:2c:d3:a9:79:53:cc:
86:6a:e4:00:a1:15:c3:9d:41:27:30:e2:6d:19:71:
9a:84:14:4c:20:44:4f:71:9e:87:a7:52:b1:2a:25:
06:b5:0b:96:06:61:48:5c:88:fc:0b:c4:5f:92:43:
aa:b3:26:7e:e0:13:f4:15:0b:d8:8b:b2:f5:85:bb:
91:0a:6c:c9:07:3a:8d:32:34:42:2d:30:44:e4:f5:
60:1a:f6:f1:ed:d4:0c:98:08:4a:6c:c2:cc:bf:12:
d8:13:b9:be:c4:e6:04:d8:4b:87:73:6c:d6:08:fa:
40:f2:da:41:7c:a6:30:b1:66:b0:fc:96:d9:83:79:
e6:de:db:69:bc:3f:69:72:64:73:79:99:e9:c4:6b:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5E:6B:B0:1F:65:1B:65:F1:0C:CB:46:12:F4:2D:82:98:A6:56:5B
X509v3 Authority Key Identifier:
keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/f15rsB9lG2XxDMtGEvQtgpimVls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.64.0/22
Signature Algorithm: sha256WithRSAEncryption
53:21:39:ee:d0:db:19:a3:29:06:19:e8:19:06:46:52:3b:13:
9e:07:22:4f:8b:18:ac:e7:1c:2f:46:c1:4e:d9:14:82:ab:73:
7f:b8:1f:dd:36:2e:ca:f7:64:4b:67:8c:9f:53:38:06:33:53:
c9:06:a6:fd:be:31:fa:52:e1:ed:09:66:cd:c4:a6:9a:d6:19:
e4:8d:6e:94:7b:ee:e2:1c:36:bf:ac:db:f6:42:f1:90:e8:3a:
61:cc:d3:06:c1:2a:4c:37:b2:dc:73:90:ce:30:ce:43:e4:d9:
1e:da:fe:80:a0:7b:fd:49:40:24:46:1b:2e:97:92:a1:c9:03:
42:9d:2f:90:82:ab:c5:9a:bf:0f:6d:04:c1:9b:93:db:cb:13:
e3:4c:3d:3c:c7:d2:da:3a:b1:10:74:d3:6f:ef:ae:d2:cd:c9:
00:57:64:a2:c5:ba:1b:8b:a6:76:72:85:64:4c:d1:68:69:85:
fa:82:c5:90:fd:f7:d0:85:d8:7a:93:7b:c2:49:b6:f4:3e:ed:
9b:66:b9:05:65:ab:8e:ec:c6:fb:19:6c:76:48:52:dc:43:45:
9b:07:18:41:b9:e3:77:f8:ca:bd:40:9e:9a:f0:16:ac:37:23:
04:67:2f:8f:b5:6e:89:64:27:36:42:20:83:e2:ad:2d:17:96:
41:df:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:45 2024 by rpki-client on console-ams.rpki-client.org