Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/j9NgUgVB7ZR66Vy70RNOjuYRasA.roa
File: j9NgUgVB7ZR66Vy70RNOjuYRasA.roa (raw, json)
Hash identifier: lbP6kxetGc2k5l+iwrm/oxATqhD6Jc1Udiyd6a7d+lY=
Subject key identifier: 8F:D3:60:52:05:41:ED:94:7A:E9:5C:BB:D1:13:4E:8E:E6:11:6A:C0
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 08271B26
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/j9NgUgVB7ZR66Vy70RNOjuYRasA.roa
Signing time: Sat 01 Jan 2022 08:57:25 +0000
ROA not before: Sat 01 Jan 2022 08:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200428
IP address blocks: 185.107.188.0/22 maxlen: 22
2a06:4540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136780582 (0x8271b26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jan 1 08:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fd360520541ed947ae95cbbd1134e8ee6116ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:77:4c:c8:af:f9:b7:f5:e4:07:e5:5c:11:
91:1a:1e:bd:cf:32:08:26:c2:cb:a2:d5:50:ae:ee:
e4:32:24:d8:a5:5e:c4:23:33:92:e8:70:b5:28:30:
86:9e:46:25:f8:31:ad:18:f8:5e:3c:eb:12:94:b5:
6a:6d:01:2e:45:6e:a3:c0:a4:fd:80:04:1c:3e:63:
5b:18:69:86:7a:5e:13:10:c2:67:96:21:f0:58:b1:
e2:f3:15:ed:48:6c:03:97:4e:08:7e:db:32:b5:e5:
b2:b0:31:88:2b:4c:5e:44:3d:9e:ca:15:18:95:73:
5b:41:fb:51:3a:bf:b9:a7:55:ef:53:64:e3:10:d6:
27:1a:86:c6:24:b6:08:ee:a9:cb:38:05:37:f4:71:
ab:a2:bb:96:3d:fd:65:fa:c3:9b:69:5d:69:c7:de:
e0:4c:4f:04:c8:05:2c:5d:1d:8a:5a:4a:6c:c5:13:
bc:00:d8:07:5b:bf:25:4f:d2:ff:bc:ad:f0:f7:af:
36:80:07:c7:2c:25:de:4c:65:1a:9a:c9:b4:9a:ea:
2a:65:23:21:36:a0:2f:1d:a7:e9:c6:0e:2c:95:0c:
25:d4:54:b2:6d:7c:8c:c2:e6:0c:6f:4f:12:51:07:
cb:3d:aa:a1:b4:4a:a2:30:49:21:c5:42:5d:fd:6b:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:60:52:05:41:ED:94:7A:E9:5C:BB:D1:13:4E:8E:E6:11:6A:C0
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/j9NgUgVB7ZR66Vy70RNOjuYRasA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.188.0/22
IPv6:
2a06:4540::/29
Signature Algorithm: sha256WithRSAEncryption
4c:7c:00:24:c2:c9:b5:aa:da:94:e5:d2:3f:14:52:1a:36:9c:
d0:6e:d2:3f:b4:a6:c3:db:e9:48:a8:2c:17:69:67:85:6f:46:
16:6b:e1:a4:60:13:28:cc:f9:c6:cd:c8:78:83:d4:17:24:16:
22:e9:2f:73:a3:49:11:e1:62:a7:83:c9:de:25:95:60:02:58:
96:4a:69:a8:a0:ae:e5:ab:02:53:21:58:b7:cc:b3:8a:53:f4:
1f:6e:96:08:a3:59:dd:db:0b:82:73:bf:4e:1a:d6:97:33:9b:
d9:47:8b:1b:d0:6b:ea:9e:3b:4c:aa:fd:04:c9:3e:e8:4b:b3:
d1:00:85:db:55:7c:11:cb:ee:c8:a9:21:70:e9:67:df:28:89:
9f:7a:c4:3c:41:b8:38:ce:32:4e:4e:8a:85:8f:6d:0d:f9:92:
56:54:c1:da:98:fc:51:14:d8:d8:0e:fa:2a:62:56:63:0e:a1:
f8:45:3c:78:7a:34:97:53:60:36:97:79:da:03:ff:92:6b:3c:
d2:33:b1:2e:e8:49:4a:f7:33:de:de:cb:7e:d2:9a:35:46:c7:
6b:9a:fd:95:8b:49:a5:aa:d4:0a:51:8a:2f:96:56:a1:43:68:
eb:fb:7c:a1:7d:ef:dd:a5:aa:70:5a:46:20:cb:d3:38:15:18:
e0:0a:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:17 2024 by rpki-client on console-fra.rpki-client.org