Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/_lZkVXtL4UWVoJdlls0dvqLPNrY.roa
File: _lZkVXtL4UWVoJdlls0dvqLPNrY.roa (raw, json)
Hash identifier: 9LCcD65XmFtaklKJEKyNqUTZV9YASWjsokGk5LLPT24=
Subject key identifier: FE:56:64:55:7B:4B:E1:45:95:A0:97:65:96:CD:1D:BE:A2:CF:36:B6
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 0A54B0C1
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/_lZkVXtL4UWVoJdlls0dvqLPNrY.roa
Signing time: Sat 01 Jan 2022 10:59:34 +0000
ROA not before: Sat 01 Jan 2022 10:59:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64403
IP address blocks: 185.166.232.0/23 maxlen: 24
185.166.234.0/24 maxlen: 24
185.166.235.0/24 maxlen: 24
2a0b:2200::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173322433 (0xa54b0c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Jan 1 10:59:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe5664557b4be14595a0976596cd1dbea2cf36b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:46:1b:30:50:a4:36:a0:89:50:1b:2a:74:
5e:61:03:5c:a5:cb:9e:3d:24:3d:cf:f1:36:03:2e:
f4:06:a1:17:db:51:f7:cc:2a:ed:1c:7d:4a:df:86:
80:86:4a:c3:4c:d7:71:a1:8c:32:76:e0:32:2c:d2:
fa:ec:ff:d8:11:f4:f3:82:48:0f:3e:65:a5:7c:a5:
bd:07:95:53:d0:85:30:79:b3:12:10:c8:1c:ae:0b:
41:3d:d4:1a:b1:fb:69:78:bc:d2:c2:77:3a:6e:d4:
b4:21:76:52:83:3e:d3:34:95:82:25:4b:02:4f:55:
0d:68:6d:fb:bc:b6:96:6f:d8:8d:d0:6b:6b:79:43:
fb:61:e7:d6:d8:be:96:d8:1e:70:d1:c7:ed:2d:c1:
49:59:1e:e6:23:0f:07:39:b3:5f:80:a5:4c:6c:9c:
12:87:85:fd:d1:55:5e:03:53:bf:47:26:a4:a8:43:
d3:83:ef:3e:0e:9b:50:fe:17:fb:f5:44:b8:c6:0b:
ee:7b:1c:9c:17:2c:c2:c1:5c:89:f0:5f:b5:3e:65:
9b:3a:58:13:ab:fe:7c:7d:32:36:17:c7:9c:aa:10:
5a:26:07:38:f9:60:9f:ca:5f:fd:07:68:b3:b2:a2:
67:a2:78:fc:0e:f1:16:65:7e:37:89:f5:84:76:be:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:64:55:7B:4B:E1:45:95:A0:97:65:96:CD:1D:BE:A2:CF:36:B6
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/_lZkVXtL4UWVoJdlls0dvqLPNrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.232.0/22
IPv6:
2a0b:2200::/29
Signature Algorithm: sha256WithRSAEncryption
78:c8:e8:a8:e1:bd:e7:85:36:3c:3e:ba:50:97:0a:da:8a:f3:
04:1c:52:5c:e1:0b:97:88:ee:9b:d9:bd:a3:19:79:da:4c:4c:
46:e0:4a:84:1f:47:bf:c2:95:26:48:a8:b3:f2:44:c8:e8:12:
16:5d:4d:6b:11:d8:76:00:ba:8e:ca:c3:30:9e:0d:a2:36:7b:
bf:05:59:c4:97:09:0a:36:b4:8f:9c:53:7e:ce:72:aa:a2:a4:
6f:c3:da:f8:a3:42:20:49:55:05:ec:71:47:4c:cd:3f:7c:75:
ed:01:8c:ec:fa:45:f2:c6:74:7b:7f:bb:b1:09:0e:94:bc:f3:
5b:7a:cd:20:83:a7:f5:37:18:a4:54:be:c6:8b:10:25:3d:73:
76:bb:0d:05:33:1e:4b:df:72:ee:3f:b2:e3:a5:61:83:1f:ae:
22:db:41:c3:35:73:ed:00:d1:94:fd:e2:fa:67:00:8f:bb:c7:
77:a9:d8:2d:36:0f:c7:e8:bc:1f:ba:6e:b0:3e:9c:1c:3c:11:
b5:d0:ad:56:c5:8c:00:6c:8f:5a:7d:01:2d:9e:76:3b:35:8d:
e6:e3:b7:a2:0e:4a:af:84:eb:ee:7b:73:18:fc:69:66:10:d3:
45:4f:9d:b0:66:0f:a9:16:9c:88:30:77:ef:9f:a1:3a:de:a9:
ec:a1:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org