Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ps8nyMS8lR0azC1IV77ojIVCn78.roa
File: ps8nyMS8lR0azC1IV77ojIVCn78.roa (raw, json)
Hash identifier: 1bOzIkqNpGMRUFaCLmh20E8IqZ3JqK/GGgObiKxz2X0=
Subject key identifier: A6:CF:27:C8:C4:BC:95:1D:1A:CC:2D:48:57:BE:E8:8C:85:42:9F:BF
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 03F40835
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ps8nyMS8lR0azC1IV77ojIVCn78.roa
Signing time: Thu 21 Apr 2022 10:26:42 +0000
ROA not before: Thu 21 Apr 2022 10:26:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 185.232.204.0/22 maxlen: 24
185.239.140.0/22 maxlen: 22
185.239.142.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66324533 (0x3f40835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Apr 21 10:26:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6cf27c8c4bc951d1acc2d4857bee88c85429fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:a2:e7:d1:b7:dc:1b:3f:5e:25:bd:3f:56:
2f:b5:4c:1f:3a:b9:39:29:32:f2:5d:6e:74:f6:88:
d3:a5:77:d1:a3:c6:38:98:33:70:77:8a:a5:12:e8:
81:38:c5:23:56:5d:32:01:ee:05:d6:32:74:38:bf:
e5:b2:69:59:6b:1a:27:56:a4:01:9e:d9:21:70:ca:
84:13:16:ee:f4:11:90:48:10:96:e5:ab:fa:b7:7c:
34:9f:a2:21:8b:88:11:f5:d3:48:fe:ae:a7:63:6e:
5a:19:9f:b6:27:69:45:6e:24:54:7c:41:f3:b5:8a:
fd:73:b6:79:9a:8a:17:32:33:4c:fe:8c:f5:9b:d9:
99:7d:0f:8c:f2:1b:cb:81:73:75:35:b7:20:de:81:
20:6f:75:94:16:9b:51:a4:4b:13:05:d3:e4:70:12:
b1:d3:5f:0f:38:b8:6b:eb:b8:25:1b:12:56:5b:db:
8a:6d:1c:bd:69:3d:3a:2a:da:9f:16:fd:56:7a:38:
a4:dd:23:53:aa:93:55:e6:bb:b5:0b:a5:ec:52:88:
d9:5b:c5:8e:ae:bf:a3:8b:1e:65:78:90:5e:21:bf:
39:e3:3c:56:43:a0:4e:54:83:bf:54:9d:df:7e:72:
3a:b9:6c:0f:bd:81:17:c3:32:cf:0d:67:de:70:2c:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:27:C8:C4:BC:95:1D:1A:CC:2D:48:57:BE:E8:8C:85:42:9F:BF
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/ps8nyMS8lR0azC1IV77ojIVCn78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.204.0/22
185.239.140.0/22
Signature Algorithm: sha256WithRSAEncryption
99:40:36:a6:88:dc:07:da:7a:13:e5:48:63:3d:a5:a2:d8:b0:
c6:d9:8d:a0:61:b4:dd:6a:eb:6a:ae:eb:60:63:c1:e7:38:00:
8d:eb:9f:df:10:51:b4:5c:21:c3:64:36:ed:9d:b5:90:07:47:
71:39:52:48:72:15:c4:7d:83:a7:ce:9c:86:66:64:0a:ed:48:
12:d5:9b:12:42:18:a8:e2:4f:a1:ac:c6:80:a1:75:00:cb:f3:
b3:f5:77:0b:92:2a:d5:f0:7c:ff:88:80:9e:1c:62:58:0f:53:
aa:10:eb:01:68:4e:86:65:9c:33:8e:ef:d1:7b:7a:c7:ce:bf:
71:c5:60:e9:57:40:ee:ad:1a:17:02:9a:fd:f5:3d:e3:6f:84:
be:3c:51:50:d9:74:75:02:32:51:da:89:6a:34:17:a9:9d:53:
2d:9a:c7:d4:12:77:57:e9:c9:34:2a:98:5a:4b:5e:f7:56:5e:
f2:71:28:b8:c5:64:13:f7:40:72:23:f7:7d:99:bd:a0:b3:2f:
f6:5a:ca:7a:d4:9e:5a:ef:3d:84:9e:41:33:62:f6:c6:b9:91:
14:4a:55:dd:d3:99:d0:f8:39:93:eb:e4:db:64:58:16:c4:bc:
09:a7:c1:dc:33:ca:d6:88:ae:30:81:96:cb:ef:30:b6:45:67:
c2:84:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org