Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/HKkvRIovIltW_6F2D21xfDXd71Y.roa
File: HKkvRIovIltW_6F2D21xfDXd71Y.roa (raw, json)
Hash identifier: HkSljEwi83RM0kswUl/aBAYZH/MBr/ahDWugxJ0mbBA=
Subject key identifier: 1C:A9:2F:44:8A:2F:22:5B:56:FF:A1:76:0F:6D:71:7C:35:DD:EF:56
Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Certificate serial: 0D436767
Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/HKkvRIovIltW_6F2D21xfDXd71Y.roa
Signing time: Sat 01 Jan 2022 13:56:00 +0000
ROA not before: Sat 01 Jan 2022 13:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60502
IP address blocks: 185.221.226.0/23 maxlen: 23
185.221.224.0/22 maxlen: 22
185.221.224.0/23 maxlen: 23
2a0c:5003::/32 maxlen: 32
2a0c:5000::/30 maxlen: 30
2a0c:5000:3072::/48 maxlen: 48
2a0c:5000:3082::/48 maxlen: 48
2a0c:5000::/32 maxlen: 32
2a0c:5000::/48 maxlen: 48
2a0c:5000:3084::/48 maxlen: 48
2a0c:5001::/32 maxlen: 32
2a0c:5000:225::/48 maxlen: 48
2a0c:5000:3083::/48 maxlen: 48
2a0c:5000:3073::/48 maxlen: 48
2a0c:5002::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222521191 (0xd436767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf
Validity
Not Before: Jan 1 13:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ca92f448a2f225b56ffa1760f6d717c35ddef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:5d:84:e3:34:94:1d:55:c8:3a:30:21:26:
bd:31:47:72:84:1c:99:5c:b5:c7:13:2f:d0:ca:3b:
be:50:85:23:0f:22:1c:ef:b6:59:65:79:df:0c:fb:
ae:e1:91:f3:43:14:bc:bf:ce:1f:c9:a7:e1:23:ac:
bc:8f:93:b4:ed:31:e5:09:1f:18:35:b4:2f:46:52:
26:d1:68:01:7a:8e:c0:9d:e5:b2:64:ec:c8:af:15:
b2:e0:26:a0:60:5a:df:bb:2a:17:ee:2f:09:80:a6:
09:31:76:b0:2b:1e:0c:d6:2a:31:42:62:d9:29:9a:
60:60:22:45:2d:f5:d7:a4:0f:a0:f5:91:84:c7:f5:
2d:b9:49:49:7d:61:79:73:15:c3:43:0a:0b:a6:20:
c9:9b:29:29:ba:9a:81:fe:c5:ac:6d:4f:f8:72:e7:
50:a9:9f:8a:7a:f5:87:ae:ed:88:eb:9b:e2:d4:61:
7a:fc:ee:a3:15:94:8d:b1:8d:00:1f:d0:56:74:0c:
fe:f9:8d:8c:1d:f3:be:bf:5a:ed:2c:51:30:2c:72:
e9:e0:cc:2a:83:bd:1b:c2:8b:5f:ef:f8:68:0d:75:
16:b3:67:d0:f2:26:41:98:bb:0d:1b:0b:f6:41:5e:
dc:a1:cc:4d:56:e6:47:02:23:fa:45:c7:a3:91:be:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:2F:44:8A:2F:22:5B:56:FF:A1:76:0F:6D:71:7C:35:DD:EF:56
X509v3 Authority Key Identifier:
keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/HKkvRIovIltW_6F2D21xfDXd71Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.224.0/22
IPv6:
2a0c:5000::/30
Signature Algorithm: sha256WithRSAEncryption
30:05:c7:02:96:1b:c7:e1:73:60:32:bc:04:82:ab:93:44:4e:
1c:e2:4d:be:e1:d5:34:42:44:f5:26:d7:70:83:8f:b6:6b:ef:
6e:f0:c4:ac:f7:ac:71:d1:cb:97:58:13:b1:00:f6:6d:7e:e7:
3a:7b:30:f2:ec:ec:4f:26:60:e0:2f:d2:03:b1:c5:25:5b:fb:
eb:d2:dc:f9:51:c2:38:57:b6:e8:e9:c8:52:5f:f7:14:76:b9:
92:bd:29:8e:f5:69:a7:1c:7b:38:7b:60:fa:08:d6:eb:18:fb:
dd:24:f1:06:18:74:ff:e0:cc:26:ff:4d:15:30:28:89:bb:e9:
b5:32:b2:7e:6f:7e:04:64:de:0e:3d:ee:ee:be:05:69:97:ac:
26:7c:fe:16:27:b2:90:48:52:8e:2f:31:f5:93:33:ad:fe:a6:
5f:77:18:a7:fe:f9:63:3d:5c:f6:fa:b4:54:d2:a9:53:23:df:
6f:89:19:2a:3c:be:21:fa:b1:a8:88:81:77:e6:8e:d9:17:e5:
9a:6f:2e:e6:51:ec:e3:9a:af:b0:af:4d:50:48:08:60:a4:00:
30:e2:fe:14:55:7a:2b:d8:9a:9f:4b:03:6b:98:e6:a9:78:e2:
18:e7:cc:3c:6c:82:3c:a4:58:0d:15:96:f6:8c:86:91:56:56:
6f:8a:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:25 2024 by rpki-client on console-fra.rpki-client.org