Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/Vf-L7m9Ldckc19IUOmDemgtgDWA.roa
File: Vf-L7m9Ldckc19IUOmDemgtgDWA.roa (raw, json)
Hash identifier: /wfSdFfACSp+r9OrnOycSBAp/GoRwU475iy8MzFWoIU=
Subject key identifier: 55:FF:8B:EE:6F:4B:75:C9:1C:D7:D2:14:3A:60:DE:9A:0B:60:0D:60
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 7E5E95
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/Vf-L7m9Ldckc19IUOmDemgtgDWA.roa
Signing time: Fri 13 May 2022 11:41:40 +0000
ROA not before: Fri 13 May 2022 11:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201832
IP address blocks: 185.62.149.0/24 maxlen: 24
185.62.148.0/24 maxlen: 24
2a03:560::/48 maxlen: 48
2a03:560:148::/48 maxlen: 48
2a03:560:1::/48 maxlen: 48
2a03:560:149::/48 maxlen: 48
2a03:561::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8281749 (0x7e5e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: May 13 11:41:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55ff8bee6f4b75c91cd7d2143a60de9a0b600d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:d8:4a:ad:78:19:59:6f:33:2d:09:3d:56:
97:65:87:d6:e5:39:59:e0:37:58:c3:51:dc:2b:08:
13:30:5b:fb:95:7b:b9:bd:e4:e0:cb:84:7b:41:eb:
0f:a3:94:c0:a0:b9:72:9f:35:93:bb:4d:71:52:15:
9a:d5:15:ac:a6:e7:53:2c:f4:bf:f5:f2:70:09:5c:
41:d9:f5:b2:b1:7a:e6:cc:ff:61:b8:46:c3:b5:ed:
92:20:51:ea:d8:7c:89:4c:83:41:5e:64:19:60:0b:
46:51:f3:1b:9e:84:f1:f3:71:ca:1d:ca:3b:5c:f9:
ee:a8:1b:d2:b2:ee:d7:8d:0d:4a:6a:32:0b:a8:b8:
19:77:88:07:bf:72:83:d8:cb:e1:91:56:a7:65:cd:
d7:9d:63:4b:9a:64:1c:6a:02:bb:67:bb:13:c6:b1:
13:36:79:4c:71:ea:5e:04:e3:1d:cd:14:67:58:d7:
b6:a0:51:03:2f:31:ab:36:74:35:02:e0:9f:07:c3:
fd:ee:d5:7c:7f:dc:53:54:90:64:af:69:b4:fa:9f:
15:9f:0c:f6:ca:01:23:fb:69:3c:cc:5c:6c:a1:6a:
18:98:88:2f:d9:07:c5:a2:26:67:84:31:14:38:0f:
84:25:20:ad:e3:84:c1:f9:a5:59:8e:21:0e:e3:52:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:8B:EE:6F:4B:75:C9:1C:D7:D2:14:3A:60:DE:9A:0B:60:0D:60
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/Vf-L7m9Ldckc19IUOmDemgtgDWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.148.0/23
IPv6:
2a03:560::/47
2a03:560:148::/47
2a03:561::/32
Signature Algorithm: sha256WithRSAEncryption
af:a0:e2:7c:e9:66:9c:ba:bd:ad:24:78:5d:98:99:0a:64:2b:
96:d3:16:e1:6b:c1:3e:01:43:bd:e3:39:1e:60:a5:75:e1:81:
65:fa:39:2f:28:77:8b:5b:72:10:de:db:e9:68:e4:37:07:e8:
b6:af:c4:99:30:92:61:a3:9c:d3:c8:e4:8f:0c:4a:fc:a5:77:
5d:54:77:70:c2:b7:0b:b2:79:48:9d:71:50:c0:07:ea:ff:53:
29:47:00:94:0f:ec:89:73:a6:c9:59:00:cb:58:65:d5:a8:c7:
a7:39:82:d9:b0:b6:09:be:ba:65:23:9a:36:db:7a:7c:58:7a:
02:8a:71:d5:86:4b:ac:ae:51:e1:6e:cd:83:3a:e8:dd:60:bd:
b0:54:a2:70:a8:d1:36:59:db:c8:19:2d:2a:ce:83:ab:74:01:
07:bf:8f:a5:ca:c8:de:17:1e:5d:0a:fc:26:0b:d8:bc:27:f4:
7c:da:ef:e5:8d:69:5e:26:ec:96:f2:ef:9d:7e:91:a0:60:9d:
9d:52:c5:1c:7a:8f:20:f4:dd:07:bb:92:5f:f7:cf:18:ef:34:
a3:f2:25:18:f5:58:2f:ed:95:cb:ea:77:5f:a1:fb:cf:bb:fb:
89:f3:59:4f:b7:e7:ad:61:0a:f6:bb:9e:00:e4:40:76:87:65:
b4:0d:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:22 2024 by rpki-client on console-ams.rpki-client.org